Privacy Policy — Bluehills OÜ

1. Who we are

Bluehills OÜ (“Bluehills”, “we”, “us”) is a company registered in Estonia with its office at Turu 9, Tartu, 51004, Estonia. We act as a data controller for personal data submitted through our website and as a data processor for data handled on behalf of our clients.

2. What we collect

Contact details you submit through forms (name, surname, email, phone, client type, work requirement).
Basic technical information (IP address, browser type, pages visited) for security and analytics.
Communications you send us by email, chat or phone.

3. Why we use it

To respond to your enquiries and deliver the services you request.
To send relevant updates about your engagement (never marketing without consent).
To meet legal, accounting and tax obligations under Estonian and EU law.

4. Legal basis (GDPR Art. 6)

We rely on (a) performance of a contract, (b) our legitimate interests in running and securing our business, and (c) your consent where required.

5. Where data is stored

Personal data is hosted on EU-based infrastructure by default. We use vetted sub-processors and require GDPR-aligned contractual safeguards for any transfer outside the EEA.

6. How long we keep it

Enquiry data is kept for up to 24 months unless we begin an engagement, in which case it is retained for the duration of the contract plus 7 years to meet Estonian accounting requirements.

7. Your rights

You have the right to access, correct, delete, restrict or port your data, and to object to processing. To exercise any of these rights, email us at the address below. You can also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

8. Cookies

We use a minimal set of cookies for site functionality and anonymous analytics. No advertising or third-party tracking cookies are used without explicit consent.

9. Contact

For any privacy question, write to us at our registered office: Bluehills OÜ, Turu 9, Tartu, 51004, Estonia.