Privacy Policy

1. Introduction

Estonia e-Residency Digital Agency ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

We comply with the General Data Protection Regulation (GDPR), the Estonian Personal Data Protection Act, and other applicable data protection laws. By using our services, you consent to the data practices described in this policy.

2. Information We Collect

We collect several types of information for various purposes to provide and improve our services to you.

Personal Data

While using our services, we may ask you to provide us with certain personally identifiable information, including but not limited to:

• Full name and contact information (email, phone number, address)
• Business information (company name, registration details)
• Identification documents (for e-Residency applications)
• Payment information (processed securely through third-party providers)
• Communication preferences

Usage Data

We may also collect information on how our services are accessed and used:

• IP address, browser type, and version
• Pages visited, time and date of visits, time spent on pages
• Device information and operating system
• Other diagnostic data

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our website and hold certain information. You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

3. How We Use Your Information

We use the collected data for various purposes:

Purpose	Legal Basis
To provide and maintain our services	Performance of contract
To process e-Residency applications and company formations	Legal obligation and performance of contract
To notify you about changes to our services	Performance of contract
To provide customer support	Legitimate interest
To gather analysis or valuable information to improve our services	Legitimate interest
To monitor the usage of our services	Legitimate interest
To detect, prevent and address technical issues	Legitimate interest
To send marketing communications (with consent)	Consent

4. Data Sharing and Disclosure

We may share your personal information in the following situations:

With Service Providers

We may share your information with third-party vendors who perform services on our behalf, such as:

• Payment processors (Wise, PayPal, etc.)
• Email marketing services
• Analytics providers
• Hosting providers

For Legal Requirements

We may disclose your personal information where required to do so by law or in response to valid requests by public authorities (e.g., Estonian Tax and Customs Board, Police and Border Guard Board).

Business Transfers

In connection with any merger, sale of company assets, or acquisition, your personal information may be transferred.

With Your Consent

We may disclose your personal information for any other purpose with your explicit consent.

5. Data Retention

We will retain your personal data only for as long as is necessary for the purposes set out in this Privacy Policy. We will retain and use your data to the extent necessary to comply with our legal obligations (for example, if we are required to retain your data to comply with applicable Estonian laws), resolve disputes, and enforce our legal agreements and policies.

For e-Residency and company formation services, we are required by Estonian law to retain certain documents for specified periods, typically up to 10 years.

6. Your Data Protection Rights

Under GDPR and Estonian data protection laws, you have certain rights regarding your personal data:

• Right to Access: You have the right to request copies of your personal data.
• Right to Rectification: You have the right to request correction of inaccurate or incomplete information.
• Right to Erasure: You have the right to request deletion of your personal data under certain conditions.
• Right to Restrict Processing: You have the right to request restriction of processing your personal data.
• Right to Data Portability: You have the right to request transfer of your data to another organization.
• Right to Object: You have the right to object to our processing of your personal data.
• Right to Withdraw Consent: You have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

To exercise any of these rights, please contact us using the information provided in the "Contact Us" section below.

7. International Data Transfers

Your information, including personal data, may be transferred to — and maintained on — computers located outside of your country where data protection laws may differ from those in your jurisdiction.

If you are located outside Estonia and choose to provide information to us, please note that we transfer the data to Estonia and process it there. Your consent to this Privacy Policy followed by your submission of such information represents your agreement to that transfer.

We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy, including implementing appropriate safeguards for international data transfers.

8. Security of Data

The security of your data is important to us. We implement appropriate technical and organizational measures to protect your personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal data, we cannot guarantee its absolute security.

9. Children's Privacy

Our services are not directed to anyone under the age of 18 ("Children"). We do not knowingly collect personally identifiable information from anyone under the age of 18. If you are a parent or guardian and you are aware that your child has provided us with personal data, please contact us.

10. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date at the top of this Privacy Policy.

You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.