Privacy Policy

1. Introduction

STACC OÜ ("we," "our," or "us") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

2. Information We Collect

2.1 Personal Information

We may collect personal information that you provide directly to us, including:

• Name and contact information (email address, phone number, mailing address)
• Company or organization information
• Professional background and expertise
• Project requirements and specifications
• Communication preferences
• Payment and billing information

2.2 Automatically Collected Information

When you visit our website, we may automatically collect certain information, including:

• IP address and location information
• Browser type and version
• Operating system
• Pages viewed and time spent on our website
• Referring website information
• Device identifiers

3. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and improve our research and development services
• To communicate with you about our services and respond to inquiries
• To process payments and manage billing
• To send you marketing communications (with your consent)
• To comply with legal obligations and regulations
• To protect our rights and interests
• To analyze website usage and improve user experience

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

4.1 Service Providers

We may share information with trusted third-party service providers who assist us in operating our business, such as:

• IT and website hosting services
• Payment processing services
• Professional advisors (lawyers, accountants)
• Research collaborators (with your explicit consent)

4.2 Legal Requirements

We may disclose your information if required by law, regulation, or legal process, or to protect our rights, property, or safety, or that of others.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and employee training
• Secure backup and recovery procedures

6. Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience. You can control cookie settings through your browser preferences. For more information, please see our Cookie Policy.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

• Right to access and receive a copy of your personal information
• Right to rectify inaccurate or incomplete information
• Right to erase your personal information
• Right to restrict or object to processing
• Right to data portability
• Right to withdraw consent

8. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specific retention periods include:

• Client project data: 7 years after project completion
• Marketing communications: Until you unsubscribe
• Website analytics data: 26 months
• Financial records: As required by Estonian law

9. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

10. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected information from a child under 18, we will take steps to delete such information.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on our website and updating the "Last updated" date. Your continued use of our services after the changes take effect constitutes acceptance of the revised policy.

12. Contact Information

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

13. Governing Law

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of Estonia and applicable European Union data protection regulations, including the General Data Protection Regulation (GDPR).