Legal - Privacy Policy

Privacy Policy - (EN)

Last updated: (insert date)

Alcanca Group OU (“Alcanca,” “we,” “our”) values your privacy and is committed to protecting your personal data in accordance with Regulation (EU) 2016/679 (GDPR) and Estonian data-protection law. This Privacy Policy explains who we are, what data we collect, why, how long we keep it, with whom we share it, and what rights you have.

1. Who we are

Alcanca Group OU, registered in Estonia under number (insert Business Registry Code) with its address at (insert full address), acts as data controller for alcanca.com and ai.alcanca.com.

Privacy contact: [email protected] | Phone: (insert)

2. Data we collect

– Identification: first and last name

– Contact details: e-mail address and mobile number

– Business company name, website URL, monthly revenue, business challenge description

– Preferences: preferred contact method

– Technical data (via cookies): IP address, browser type, pages visited, timestamps

3. Purposes and legal bases

1. Responding to contact requests – Art. 6 (1)(b) GDPR (pre-contractual steps)

2. Direct marketing and lead qualification – Art. 6 (1)(a) GDPR (consent)

3. Analytics and site optimization – Art. 6 (1)(a) GDPR (consent for non-essential cookies)

4. Internal automation (AlcancaAI) for lead scoring – Art. 6 (1)(f) GDPR (legitimate interest in operational efficiency)

4. Recipients and international transfers

Data may be processed by cloud hosting, marketing automation, web-hosting, and payment processors (Stripe, Revolut). Where processors are located outside the EEA, we rely on Standard Contractual Clauses to ensure equivalent protection.

5. Retention

– Unconverted leads: up to 24 months after last meaningful interaction

– Clients: during the contractual relationship plus 10 years for tax and archiving

– Cookies: as detailed in our Cookie Policy

6. Your rights

You can exercise your right of access, rectification, erasure, restriction, portability, or objection by contacting [email protected]. We reply within 7 business days. You may also lodge a complaint with the Estonian Data Protection Inspectorate.

7. Security

We apply appropriate technical and organisational measures, including encryption, access controls, and periodic permission reviews.

8. Changes

We may amend this policy. We will notify you by e-mail at least 15 days in advance.