Privacy Policy

1. Introduction

Huboxt OÜ (registration number 16410303) ("we," "our," or "us") is committed to protecting and respecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you voluntarily provide to us, including:

• Name and contact information (email address, phone number, mailing address)
• Company name and job title
• Project requirements and business information
• Communication preferences
• Any other information you choose to provide

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and location information
• Browser type and version
• Operating system
• Pages visited and time spent on our website
• Referring website addresses
• Device information

2.3 Cookies and Similar Technologies

We use cookies and similar tracking technologies to enhance your experience on our website. For detailed information about our cookie usage, please refer to our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services
• To respond to your inquiries and communicate with you
• To process your requests for quotes or consultations
• To improve our website and services
• To send you marketing communications (with your consent)
• To comply with legal obligations
• To protect our rights and prevent fraud

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

• Consent: When you have given clear consent for us to process your personal data for specific purposes
• Contract: When processing is necessary for the performance of a contract with you
• Legal Obligation: When we need to comply with legal requirements
• Legitimate Interests: When we have a legitimate business interest that doesn't override your privacy rights

5. Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties except in the following circumstances:

• Service Providers: We may share information with trusted third-party service providers who assist us in operating our website and conducting our business
• Legal Requirements: We may disclose information when required by law or to protect our rights
• Business Transfers: In the event of a merger, acquisition, or sale of assets
• Consent: When you have given explicit consent for specific sharing

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data
• Regular security assessments
• Access controls and authentication
• Employee training on data protection
• Secure data transmission protocols

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Generally:

• Contact form submissions: 3 years
• Client project data: 7 years after project completion
• Marketing communications: Until you unsubscribe
• Website analytics data: 26 months

8. Your Rights Under GDPR

If you are a resident of the European Economic Area (EEA), you have the following rights:

• Right of Access: You can request a copy of your personal data
• Right to Rectification: You can request correction of inaccurate data
• Right to Erasure: You can request deletion of your data
• Right to Restrict Processing: You can request limitation of data processing
• Right to Data Portability: You can request transfer of your data
• Right to Object: You can object to processing based on legitimate interests
• Right to Withdraw Consent: You can withdraw consent at any time

9. International Data Transfers

As we are based in Estonia (EU) and primarily serve clients in Azerbaijan, your personal data may be transferred to and processed in countries outside the EEA. We ensure adequate protection through:

• Standard Contractual Clauses approved by the European Commission
• Adequacy decisions by the European Commission
• Other appropriate safeguards as required by GDPR

10. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If we become aware that we have collected personal information from a child under 16, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of any material changes by posting the updated policy on our website and updating the "Last updated" date.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

13. Supervisory Authority

If you believe we have not handled your personal data in accordance with this Privacy Policy or applicable data protection laws, you have the right to lodge a complaint with the relevant supervisory authority:

Estonian Data Protection Inspectorate
Website: www.aki.ee