DEMI SOLUTIONS · LEGAL
Privacy Policy
Last updated: 2026-09-25
This notice explains how we handle personal information when you visit www.demi-solutions.com, contact Demi Solutions, or discuss a project with us.
1. Who is responsible
Demi Solutions OÜ is the service provider and data controller for the activities described here. Registered in the Estonian Commercial Register, registry code 16776917. Address: Sepapaja tn 6, 15551 Tallinn, Estonia. Contact: info@demi-solutions.com.
This notice covers this website and our business enquiries. Separate products, including DemiSignal and UTMTool, have their own privacy notices. Processing customer data on a client’s instructions is covered by the applicable service agreement and data-processing terms.
2. Information and purposes
- Enquiries and project discussions: your name, business contact details, organisation, domain, messages and any attachments you choose to send. We use these to respond, assess the request, prepare a quote and manage the business relationship. This is necessary to take steps towards or perform a contract with you, or for our legitimate interests in handling business enquiries when you represent an organisation.
- Website delivery and security: our hosting provider processes technical connection information such as IP address, request time, requested URL and browser information. Our legitimate interests are delivering the website, diagnosing faults and preventing abuse.
- Contract and accounting records: where you become a customer, we use relevant business, billing and transaction details to administer the contract, meet legal obligations and establish or defend legal claims.
Providing information is voluntary. We may be unable to assess or carry out a request without the relevant contact and project details. Please do not send passwords, private keys or unnecessary personal information by email; we agree a suitable access method when work requires it.
3. Cookies and website features
Website analytics: we use PostHog (US cloud) to understand how this website is used so we can improve it. PostHog sets first-party cookies and local storage containing a random identifier, which lets it recognise a returning browser. It records the pages you view, clicks and other interactions with page elements (automatic interaction capture), the referring page, browser and device information, and an approximate location derived from your IP address. Session recording is turned off. Analytics traffic is routed through our own domain. There is no account or login on this website, and we do not link analytics data to your name or email address.
Our legal basis is our legitimate interest in understanding and improving the website. You can object at any time: block cookies or clear this site’s data in your browser settings, use a tracker blocker, or email info@demi-solutions.com to ask us to delete analytics data. If you previously disabled analytics on this website, that choice is still respected. The website works fully without analytics.
The website provides an email link rather than an enquiry form. Clicking it opens your chosen email application; information reaches us when you send your message.
Fonts and visual assets are served with the website. We do not use advertising trackers on this site. Hosting and security services may process connection data and use strictly necessary security mechanisms.
4. Who can receive information
Information is available to authorised people who need it to handle your enquiry or project. We use Cloudflare for website hosting and security, Google Workspace for business email and collaboration, and PostHog (US cloud) for website analytics. PostHog receives the analytics data described above, including your IP address, which it uses to derive an approximate location. Relevant professional advisers, accounting providers and service contractors may receive information needed for their work, subject to appropriate confidentiality and data-protection obligations. We may also disclose information when required by law or necessary to protect legal rights.
These providers may process data outside the European Economic Area. Where required, transfers use an applicable adequacy decision or contractual safeguards such as the European Commission’s standard contractual clauses. You can contact us for information about the safeguards relevant to your data. Provider terms: Cloudflare data processing and Google Workspace data processing, and PostHog data processing.
5. How long information is kept
We keep enquiry correspondence while the enquiry and related follow-up remain relevant. Project records are retained for the engagement and any applicable contractual, accounting or legal retention period. When deciding whether information is still needed, we consider the status of the relationship, statutory record-keeping duties and any unresolved dispute or claim. Technical logs follow the provider’s applicable retention settings. Analytics data is kept according to our PostHog project’s retention settings. Information that is no longer needed is deleted or anonymised, subject to backup and legal retention requirements.
6. Your rights
Subject to the conditions in data-protection law, you can ask to access, correct, erase or restrict use of your information, request portability, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it without affecting processing already carried out. You may object to direct marketing at any time.
Contact info@demi-solutions.com to exercise your rights. We may need proportionate information to verify your identity. You can also complain to the Estonian Data Protection Inspectorate or your local supervisory authority. This website does not make automated decisions about you that have legal or similarly significant effects.
7. Changes
We update this notice when our processing changes. The date above identifies this version; material changes will be communicated where required.