Privacy & cookie policy

The controller for the personal data covered by this notice is IZALL.COM OÜ, an Estonian company, registry code 11086660.

This notice covers only the public marketing website. Other product deployments have their own processing contexts and privacy information. Illustrations on these pages are not live recordings, video meetings, or customer dashboards.

When you open a page

Cloudflare hosts and protects this website. Delivering a page involves processing network and request information, such as your IP address, requested URL, time, browser information, and security signals. Relevant operational or security records may be retained under the service configuration. The purpose is to deliver the requested website and prevent abuse; our GDPR basis is our legitimate interest in a functioning, secure website, Article 6(1)(f).

When you accept Analytics

Google Analytics 4 measures visited pages, page titles, referring pages, visit and session identifiers, browser and device information, approximate location, and enabled engagement events such as scrolling, outbound link clicks, and file downloads. Page URLs may include query parameters. Please do not include personal or confidential information in website URLs.

We use these statistics to understand and improve website content. The basis is your consent, Article 6(1)(a) GDPR. Our implementation disables Google Signals and advertising personalisation. We do not deliberately send your name, email address, or message content to Analytics. Pseudonymous identifiers can still be personal data.

When you contact us

If you email or call us, we receive the details you provide, such as your name, business contact details, organisation, enquiry, and related correspondence. We use them to respond and handle the relationship. Article 6(1)(b) applies where processing is necessary to take steps towards a contract with you; business enquiries made on an organisation's behalf are generally handled under our legitimate interest, Article 6(1)(f). Legal obligations may require retaining particular records under Article 6(1)(c).

Providing enquiry details is voluntary, but we need a way to respond. This website has no account registration, checkout, or enquiry submission form. Opening an email or telephone link uses your chosen communications application. We do not use website data for automated decisions with legal or similarly significant effects.

Cookies are small files stored by your browser. Local storage is a different browser storage mechanism. EU rules and Estonian Data Protection Inspectorate guidance require consent for optional tracking technologies; the exception for strictly necessary access is limited to delivering communications or a service you request.

Necessary operational storage supports security and remembers your privacy choice. Analytical cookies are optional and require acceptance before Google Analytics loads.

Cloudflare may use additional short-lived challenge cookies when security checks are triggered. These are not Google Analytics cookies. Their duration follows Cloudflare's configured security settings and the browser's expiry handling.

• Before a choice: Google Analytics is not loaded and the website does not send Google Analytics measurement events.
• Necessary only: Google Analytics remains off. The website stays available.
• Accept analytics: Google Analytics loads and starts recording the current page and subsequent page visits.
• Withdraw later: open Cookie Settings and choose Necessary only. The website disables Analytics, removes its first-party cookies, and reloads to stop the loaded Google runtime.
• Accept again: collection starts again from that point. Activity during the declined period is not replayed.

You can open Cookie Settings in the footer or use the button above. Withdrawal does not affect the lawfulness of earlier consent-based processing and does not automatically erase previously collected data. You can request erasure separately where applicable.

Your choice is saved in this browser. Other browsers and devices need their own choice. If browser storage is unavailable, the choice applies only while the current page session remains open; a new visit starts without Analytics. Clearing site data removes the saved preference.

Declining Analytics does not stop the network processing needed to serve the website. It also does not block the Google Fonts and Unsplash requests described below, which can occur before an Analytics choice.

Access is limited to people who need it for the relevant purpose and service providers involved in hosting, security, Analytics, or business communications. Processing by a service provider is governed by the arrangements and disclosures applicable to the relevant service.

• Cloudflare: website hosting, traffic delivery, and security.
• Google Analytics: optional audience and engagement statistics after consent. Google privacy information.
• Google Fonts: the current stylesheet requests fonts from Google. Requests may occur before an Analytics choice and expose network information, including your IP address, to the provider.
• Unsplash: some illustrative preview images load from images.unsplash.com. Requests may occur before an Analytics choice and disclose request information such as your IP address and browser details.
• Communications providers: email and telephone providers process enquiries when you contact us through those channels.

Some providers may process information outside the European Economic Area. Where a transfer takes place, it relies on a GDPR Chapter V mechanism, such as an adequacy decision under Article 45 or appropriate safeguards under Article 46, together with any required supplementary measures. You can contact us for information about the safeguards applicable to a particular transfer. Consent to Analytics alone does not establish those safeguards.

Browser storage lifetimes are listed above. They are separate from the periods for keeping information in provider systems or our correspondence records.

We keep personal data in website enquiries and related correspondence for up to 12 months from collection or the last relevant contact, as applicable. We then delete or anonymise it, unless a longer period is required for statutory record-keeping duties or to establish, exercise, or defend legal claims. Analytics cookies and saved consent choices apply for up to 12 months, as described above.

Google Analytics has separate server-side retention settings: event data are retained for 2 months and user data for 14 months, with the user-data period reset on new activity. These periods are separate from the 12-month browser-cookie and enquiry periods. Standard aggregated reports are not subject to those user/event retention controls. Cloudflare security records and provider backups follow the applicable service schedules.

Depending on the processing and the applicable conditions, you can request access to your personal data, correction, erasure, restriction, and data portability. You can withdraw consent at any time. You may object on grounds relating to your situation to processing based on legitimate interests; any objection to direct marketing must be respected.

Send requests to info@izall.com or the postal address above. We may need proportionate information to establish your identity or locate the relevant record. We do not ask you to send identity documents unless necessary.

GDPR generally requires a response within one month of receiving a request. A permitted extension of up to two further months for complex or numerous requests must be explained within the first month. Requests are normally free of charge, subject to the exceptions in GDPR.

You can complain to Estonia's Data Protection Inspectorate (Andmekaitse Inspektsioon), or the competent supervisory authority where you live, work, or consider an infringement occurred. See the authority's procedure for the information it needs.

We will update this policy when our processing changes. Material changes to consent-based collection may require a fresh choice.

This policy is informed by GDPR, Estonia's Personal Data Protection Act, and the rules on access to information on a user's device under Estonia's Electronic Communications Act. A provider's description of its service does not replace an assessment of our own use.

• General Data Protection Regulation (EU) 2016/679 — particularly Articles 5, 6, 7, 12–22 and 44–49.
• ePrivacy Directive 2002/58/EC — Article 5(3), and Estonian Data Protection Inspectorate guidance on cookies.
• Estonian Personal Data Protection Act and Electronic Communications Act — current Estonian consolidated texts at the policy date.
• EDPB guidance on device access and similar technologies.
• Google Analytics cookie documentation.
• Cloudflare cookie documentation.
• Google Fonts privacy information and Unsplash privacy information.