Privacy Policy

Last updated: September 4, 2025

Introduction

Ramonda Digital ("Company", "we", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website (the "Site") or use our services. It also outlines your rights under applicable data protection laws, including the European Union's General Data Protection Regulation (GDPR).

By accessing or using our Site and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with the practices described here, please do not use the Site. We may update this Privacy Policy from time to time (see Changes to this Policy below), and any changes will be effective once posted.

For the purposes of data protection law, Ramonda Digital operates as the "data controller" of your personal information. Our business is based in Estonia, and our contact details are provided at the end of this Policy. We provide digital agency services internationally, including website development, SEO, advertising, content creation, and more (see our Terms & Conditions for a full list of services). In doing so, we may collect personal data from clients, website visitors, and others who interact with us.

Information We Collect

We collect personal data about you in several ways:

Information You Provide Directly: When you interact with our Site or communicate with us, you may choose to provide certain information:
- Contact Forms and Inquiries: If you fill out a contact form on our Site or email us directly, we collect the personal information you provide, such as your name, email address, phone number, company name, and the content of your message. This includes inquiries about our services, requests for quotes, or any general questions.
- Lead Magnets or Downloads: If our Site offers free resources (e.g., e-books, guides, or whitepapers) or newsletters and you sign up to receive them, we will collect your name, email address, and any other information requested (for example, your job title or industry) to deliver the content and follow up with you.
- Service Agreements: When you become a client, we will collect information necessary to perform our services and maintain our business relationship. This can include your business contact details, billing information (such as billing address and relevant financial details for invoicing), and any project-specific information you share with us. Payment card details may be processed via a secure third-party payment provider and are not stored on our servers.
Information We Collect Automatically: When you visit our Site, certain data is collected automatically about your device and interaction with the Site:
- Usage Data: We collect technical information such as your IP address, browser type, device type, operating system, and referring website. We also track your browsing actions and patterns on our Site (for example, pages viewed, time spent on pages, links clicked, and the date/time of your visits).
- Cookies and Similar Technologies: We use cookies and tracking tools (like web beacons or pixels) to enhance your experience and analyze usage of our Site. For instance, we use Google Analytics, which sets cookies to gather information about website traffic and user behavior. These analytics cookies provide us with aggregated data (such as overall visitor numbers, general location, and usage patterns) to help us improve our Site and services. We also employ tools like Google Tag Manager to manage analytics and marketing tags on the Site. Additionally, if we implement advertising or social media pixels (such as Facebook Pixel or LinkedIn Insight Tag) for our own marketing, those may also collect information about your browsing for ad targeting purposes. For detailed information on the cookies we use and your choices regarding cookies, please see our Cookie Policy.
- reCAPTCHA Security: Our contact forms are protected by Google reCAPTCHA to prevent spam and abuse. This tool collects hardware and software information, such as device and application data, and sends it to Google for analysis. This data collection is subject to Google's Privacy Policy and is used only to verify that a real person (not an automated bot) is submitting our forms.
Information from Third Parties: We may receive personal data about you from third-party sources:
- Social Media Interactions: If you engage with us on social media platforms (such as LinkedIn, Facebook, or Twitter) by following our pages, commenting, or messaging us, we may receive your public profile information and any information you provide in your interactions. We will handle that information according to this Privacy Policy.
- Service Providers: We might also obtain information from third-party service providers that help us operate our business. For example, if we use an email marketing platform to send newsletters, that platform may provide us with analytics on who opened an email or clicked a link. If we use a customer relationship management (CRM) system, it may store contact information and communications. These providers are contractually bound to use your data only as directed by us and in compliance with data protection laws.

We do not knowingly collect personal data from children under the age of 16. Our Site and services are not directed to minors. If you are a parent or guardian and believe we have inadvertently collected personal information from a minor, please contact us so we can delete it.

How We Use Your Information

We use the personal information we collect for the following purposes:

Providing and Improving Services: To respond to your inquiries and requests, provide the services you ask for (such as consulting or project deliverables), and manage our relationship (including billing and account management). We also use data to improve and personalize our offerings, for instance by understanding how users interact with our Site and communications.
Communication: To communicate with you about your inquiries, projects, or account, and to deliver any resources or information you requested. We may send service-related announcements or information (for example, if we have an update related to a service you're using or changes to our terms or policies).
Marketing and Newsletters: To send you marketing communications, such as email newsletters, industry updates, or information about our new services or promotions, but only if you have consented to receive such communications or if you are an existing client where lawful to do so. You can opt out of marketing emails at any time by clicking the unsubscribe link in the email or contacting us directly.
Analytics and User Experience: To analyze how visitors use our Site, so we can troubleshoot issues, and improve the Site's design, content, and user experience. For example, we use aggregated data from Google Analytics to identify popular pages or features and to understand overall user engagement.
Security and Abuse Prevention: To protect our Site, business, and users. For instance, information collected via reCAPTCHA is used strictly for preventing spam or malicious activity on our forms. We may also use IP address data and other logs to detect and mitigate fraudulent or unauthorized activities.
Legal Obligations: To comply with applicable legal or regulatory requirements. For example, keeping records for tax purposes, or disclosing information when required by law or lawful requests by public authorities.
Enforcement of Terms: To enforce our Terms & Conditions or to protect our rights, privacy, safety, or property, or those of our clients and other users.

Legal Bases for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the UK, we process your personal data under the following legal bases, as permitted by the GDPR:

Contractual Necessity: We process personal data to fulfill our contracts with clients or to take steps at your request prior to entering into a contract. For example, if you request a proposal or become a client, processing your contact and payment information is necessary to provide our services.
Consent: We rely on your consent for certain types of processing. For instance, we will send you marketing emails or newsletters only if you have given explicit consent (or if you're a client, as allowed under e-privacy laws). We also obtain your consent via the cookie banner before setting analytics or marketing cookies on your device.
Legitimate Interests: We may process personal data for our legitimate business interests, provided those interests are not overridden by your data protection rights. This includes using contact information to respond to inquiries (it's in our interest to communicate with potential clients), analyzing Site usage to improve our services, and using security measures like reCAPTCHA to protect our platform. When we rely on legitimate interests, we consider and balance any potential impact on your rights.
Legal Obligation: In some cases, we need to process certain data to comply with a legal obligation, such as maintaining financial records for accounting purposes or providing information to authorities if legally required.

You have the right to withdraw consent at any time for processing that is based on your consent. If you withdraw consent, it will not affect the lawfulness of processing we carried out prior to withdrawal, nor will it affect processing under other bases (like contractual necessity or legitimate interests).

How We Share Your Information

We treat your personal data with care and confidentiality. We do not sell your personal information to third parties. However, we may share your information in the following scenarios:

Service Providers: We share data with trusted third-party vendors who perform services on our behalf. These include:
- Hosting and IT Providers: Companies that host our website or provide IT infrastructure, ensuring our Site is running securely and efficiently.
- Analytics and Marketing Tools: As mentioned, we use Google Analytics (and potentially other analytics or marketing services) to understand Site traffic. These service providers process data on our behalf for analytics purposes. Similarly, if we use an email marketing platform to send newsletters or updates, that platform will handle your email address and newsletter activity.
- Payment Processors: If you make payments to us online, those transactions are handled by third-party payment gateways (for example, a credit card processing service or PayPal). Such providers will process payment data securely in accordance with their own privacy policies. We do not receive or store your sensitive payment card details from these processors (aside from confirmation of payment).
- CRM and Project Management Tools: We may use customer relationship management systems or project management tools to organize client information and project details. Personal data may be stored in these systems for our business purposes.
- Business Partners and Subcontractors: With your knowledge, we might collaborate with partners or subcontractors to deliver certain aspects of a service (for example, working with a freelance designer or developer on a project). In such cases, if they need access to some of your information, we will ensure they are bound by confidentiality and data protection obligations.
Legal Requirements and Protection: We may disclose your information if required to do so by law or in response to valid requests by public authorities (e.g., law enforcement or regulatory bodies). We may also share information if we believe in good faith that such action is necessary to (i) comply with a legal obligation, (ii) protect and defend the rights or property of Ramonda Digital, (iii) prevent or investigate possible wrongdoing in connection with the Site or our services, (iv) ensure the personal safety of users or the public, or (v) protect against legal liability.
Business Transfers: In the event that Ramonda Digital undergoes a business transaction such as a merger, acquisition, or asset sale, or in the unlikely event of bankruptcy, user information may be transferred as part of that deal. We would ensure the confidentiality of any personal data involved in such transactions and provide notice before it is transferred or becomes subject to a different privacy policy.

Whenever we share data with service providers, we strive to only share the minimum information necessary and to ensure that they handle your data securely and in compliance with applicable privacy laws. We require service providers to use personal data only for the purposes of providing services to us and to implement appropriate security measures.

Data Retention

We keep your personal data only for as long as necessary to fulfill the purposes for which it was collected, including any legal, accounting, or reporting requirements.

If you contact us with an inquiry but do not become a client, we may retain your contact information and message for a reasonable period (for example, up to 1 year) in case you have follow-up questions or to keep a record of our communication.
For clients, we retain personal data for the duration of the business relationship and thereafter as needed for legal or business purposes. This could include maintaining records of services provided or payment transactions for a number of years to comply with tax and financial regulations.
If you subscribed to our newsletter or marketing communications, we will keep your contact details until you unsubscribe or ask us to delete your information. If you opt out of marketing, we may keep your email on a suppression list to ensure we respect your choice.
Web analytics data (collected via cookies) is retained as per Google Analytics' standard retention periods (which we may set, e.g., 14 months or as otherwise configured) and is maintained in aggregate form.
Any data collected via Google reCAPTCHA is used for security verification in real time and is generally not stored by us beyond that purpose.

When we no longer have a legitimate need to keep your personal data, we will securely delete or anonymize it. If deletion or anonymization is not immediately feasible (for example, because the data is stored in backup archives), we will store it securely and isolate it from further processing until deletion is possible.

Data Security

We take reasonable and appropriate measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction. These measures include:

Using secure, encrypted connections (HTTPS) on our Site to transmit data.
Limiting access to personal data to employees, contractors, and agents who need to know such data to perform their duties, and who are subject to confidentiality obligations.
Utilizing security features provided by our third-party service providers (such as secure data centres, encryption, and access controls).
Maintaining procedures to handle any suspected data breach, including notifying you and relevant authorities of breaches as required by law.

However, please note that no method of transmission over the Internet or method of electronic storage is completely secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You share information with us at your own risk, and we encourage you to take steps to protect yourself online (such as using strong passwords and not sharing confidential information in unprotected channels).

International Data Transfers

Since Ramonda Digital operates internationally and uses service providers in various countries, your personal data may be transferred to and processed in countries outside of your own. This includes countries outside the European Economic Area ("EEA") that may have different data protection laws than your country of residence.

Whenever we transfer personal data out of the EEA, we take steps to ensure that adequate safeguards are in place to protect the information. For example:

We may transfer data only to countries that have been deemed to provide an adequate level of data protection by the European Commission.
For transfers to the United States or other countries not deemed adequate, we rely on approved mechanisms such as Standard Contractual Clauses (SCCs) or binding corporate rules, as appropriate, to ensure your data is afforded a similar level of protection as under EU law.
Our third-party service providers are likewise expected to implement safeguards when processing EU personal data internationally, in line with GDPR requirements.

By using our Site or engaging our services, you acknowledge that your information may be transferred to our facilities and those third parties with whom we share it, as described in this Policy, even if they are located in other countries. We will always protect your data in accordance with this Privacy Policy wherever it is processed.

Your Data Protection Rights

If you are in the EU/EEA, UK, or other regions with similar data protection laws, you have certain rights regarding your personal data. These rights may include:

Right to Access: You have the right to request a copy of the personal data we hold about you and to obtain information about how we process it.
Right to Rectification: You can ask us to correct any inaccurate or incomplete personal information we have about you.
Right to Erasure: You have the right to request that we delete your personal data under certain circumstances (for example, if the data is no longer necessary for the purposes it was collected, or if you withdraw consent and no other legal basis for processing exists).
Right to Restrict Processing: You can request that we limit processing of your data in certain situations, such as if you contest its accuracy or object to our processing.
Right to Data Portability: You have the right to request a copy of the personal data you provided to us in a structured, commonly used, machine-readable format, and to have that data transmitted to another data controller where technically feasible.
Right to Object: You may object to our processing of your personal data when we rely on legitimate interests as the legal basis, if you believe your rights outweigh our interests. You also have the right to object to direct marketing at any time.
Right to Withdraw Consent: If we are processing your personal data based on your consent, you can withdraw that consent at any time.
Right to Lodge a Complaint: If you believe we have infringed your data protection rights, you have the right to lodge a complaint with a supervisory authority. For example, in Estonia, you can contact the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or in the country where you reside.

To exercise any of these rights, please contact us using the contact details at the end of this Policy. We may need to verify your identity before fulfilling certain requests, to ensure that we do not disclose personal data to the wrong person. We will respond to your request within the timeframe required by law (typically within one month for GDPR-related requests, with the possibility to extend by two further months for complex requests).

Please note that some rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required to keep by law or have compelling legitimate interests to keep.

Cookies and Tracking Technologies

As noted above, we use cookies and similar technologies on our Site to enhance your experience and collect information. For more details on the types of cookies we use, what they do, and how you can control them, please refer to our Cookie Policy.

In general, you can set your browser to refuse all or some browser cookies, or to alert you when cookies are being sent. However, if you disable or refuse cookies, please note that some parts of our Site (such as video content or interactive features) might become inaccessible or not function properly. Our cookie banner allows you to consent to or reject non-essential cookies as required under GDPR; essential cookies (such as those necessary for site functionality or security) are used regardless of consent.

Changes to this Policy

We may update this Privacy Policy from time to time in response to evolving legal, technical, or business developments. When we update our Privacy Policy, we will post the new version on this page and update the "Last updated" date at the top. If changes are significant, we may also notify you by additional means (for example, by sending you an email notification if you are a client or have subscribed to our communications).

We encourage you to review this Policy periodically to stay informed about how we are protecting your information. Your continued use of the Site or our services after any changes to this Privacy Policy will be deemed acceptance of the updated policy.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:

Ramonda Digital (Data Controller)
Harju maakond, Tallinn, Kesklinna linnaosa, Ahtri tn 12, 15551, Estonia
Email: contact@ramondadigital.com

We will address your inquiry as promptly as possible. By communicating with us regarding privacy, you consent to our processing of your personal data for the purpose of responding to you and resolving your inquiry.