Privacy & Cookie Policy

EKB Labs OÜ is the data controller for the personal data described here. We are a private limited company registered in Estonia, operating remotely. You can reach us about privacy at privacy@ekblabs.io.

EKB Labs OÜ is registered in Estonia. Full company registration details are on the Estonian e-Business Register and available on request at privacy@ekblabs.io.

We collect only the data you choose to give us. There are three surfaces.

Enquiries. When you use the contact form we collect your name, email, optional company name, and your message. We use this to reply and to scope possible work. The lawful basis is our legitimate interest in responding to enquiries, and taking steps at your request before entering a contract.

Newsletter. If you subscribe, we collect your email address to send occasional field notes. The lawful basis is your consent, which you can withdraw at any time using the unsubscribe link in any email.

Booking a call. Calls are scheduled through an embedded Cal.com widget. When you book, the details you enter (such as name, email, and timing) are processed by Cal.com to arrange the call. The lawful basis is taking steps at your request before a contract.

We do not run advertising or analytics tracking on this site, and we do not build behavioural profiles of visitors.

This site keeps cookies to a minimum. We do not use advertising, marketing, or analytics cookies.

Strictly necessary. A small amount of local storage remembers your light or dark theme choice and your cookie preference. These are essential to how the site works and do not require consent.

Third party, on interaction.If you open the booking widget, Cal.com may set its own cookies to run the scheduler. These load only when you use booking, and are governed by Cal.com’s own privacy notice.

You can accept or decline non-essential cookies using the banner shown on your first visit, and you can clear stored preferences at any time in your browser settings.

We use a small set of established service providers as processors. Each handles data only on our instructions.

• Vercel — website hosting and delivery.
• Supabase — secure storage of enquiry and subscriber records.
• Resend — sending our email notifications and newsletter.
• Cal.com — the booking scheduler.

Some providers may process data outside the European Economic Area. Where they do, transfers are covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses or an adequacy decision.

We keep enquiry data for as long as needed to handle your request and any resulting work, then for a reasonable period for our records, after which it is deleted. Newsletter data is kept until you unsubscribe. You can ask us to delete your data sooner at any time.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it;
• receive your data in a portable format;
• withdraw consent at any time, where we rely on consent.

To exercise any of these, email privacy@ekblabs.io. If you believe we have mishandled your data, you can complain to your local data protection authority. Our supervisory authority is Andmekaitse Inspektsioon (Estonian Data Protection Inspectorate), aki.ee.

We use reputable providers, restrict who can reach the data, and design our systems so records stay on controlled paths. No method of transmission or storage is perfectly secure, but we take reasonable measures to protect your data.

This site and our services are aimed at businesses, not children, and we do not knowingly collect data from anyone under 16.

We may update this policy as our services or the law change. The date at the top shows the latest version. Material changes will be reflected here.

For any question about this policy or your data, email privacy@ekblabs.io, or start from the contact page.