Privacy notice

Who is responsible

The controller for the data described here is Humanize Health OÜ, registered in Estonia under registry code 16378091 (VAT EE102442456), at Sepapaja 6, Tallinn 15551, Estonia.

For anything to do with your data — access, correction, deletion, or a question about this notice — write to [email protected]. It reaches a person, not a queue.

What the contact form collects

Your name

To address a reply to you

Your email address

To reply. It is set as the reply-to on the email we receive.

Your message

It is the enquiry. Please do not include health data or anything confidential.

The country your request came from

Derived by Cloudflare from your IP address and included in the notification email, to help judge context and spot abuse. The IP address itself is not stored by us.

Please keep enquiries free of patient data, health information about identifiable people, and anything covered by a confidentiality obligation. An email form is the wrong channel for it, and if a conversation needs that material we will agree a proper route first.

Why we are allowed to process it

Answering an enquiry you chose to send rests on our legitimate interest in responding to people who contact us, and where the exchange concerns possible work together, on steps taken at your request before entering a contract. We do not rely on consent for this, which is why the form asks you to confirm you have read this notice rather than to consent to processing — the two are different things, and consent you cannot refuse without losing the service would not be freely given anyway.

Analytics is the exception. It runs on consent alone, it is off until you say otherwise, and you can withdraw it at any time using the Analytics control in the footer of any page.

Who else handles it

We keep the list short deliberately. Fonts are self-hosted rather than loaded from Google, and there are no embedded widgets, trackers, or advertising tags anywhere on the site.

The site itself is served by Contabo GmbH (Germany), on infrastructure located in the EU. We never sell personal data, and we do not share it for anyone else's marketing.

How long it is kept

Enquiries stay in the mailbox for as long as the conversation is live, and are deleted within 24 months of the last exchange unless they became part of a client relationship with its own records. Brevo holds transactional sending logs for a limited period set by them. Analytics data is retained according to the property's configured retention window. Server and CDN logs are short-lived and used for security and diagnosis.

Your rights

Under the GDPR you can ask for a copy of your data, ask us to correct or delete it, ask us to restrict how we use it, object to processing based on legitimate interest, and ask for it in a portable form. Where processing rests on consent, you can withdraw it at any time without affecting what happened before.

Write to [email protected] and we will respond within one month. If you are not satisfied, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), or to the authority in the country where you live or work.

What we do not do

• No advertising, retargeting, or third-party tracking of any kind.
• No automated decision-making and no profiling.
• No selling or renting of personal data.
• No newsletter list — writing to us does not subscribe you to anything.
• The site is not directed at children and we do not knowingly collect their data.

Cookies

No cookies are set until you accept analytics. The full list of what can be stored on your device is on the cookie notice.

Changes

If this notice changes materially, the date at the top changes with it. There is no version history published, so if the specifics matter to you, keep a copy of what you read.