Privacy policy.

1. Who we are

This website and the consulting services offered through it are operated by PüreProposals OÜ, trading as Pure Proposals. We are the data controller for the personal data described in this policy.

• Registered address: Tööstuse tn 75-71, Tallinn 10416, Estonia
• Estonian registry code: 17489815
• VAT number: EE102984370
• Email: hello@pureproposals.com

For any privacy question, or to exercise the rights in section 8, email us at hello@pureproposals.com. We answer within 30 days.

2. What we collect

Information you give us

When you book a discovery call or email us, we receive your name, email address, and anything you choose to tell us about your company, your sales process and your PandaDoc setup. Booking forms may also capture a phone number and time zone. We do not run newsletter sign-up or gated-download forms on this site, so this is the only routine way we collect contact details.

Website analytics

We use DataFast, a privacy-focused analytics tool, to understand which pages are useful. It reports in aggregate: page views, referring site, approximate country, browser and device type. It does not build advertising profiles and does not track you across other websites.

Technical and security logs

Our hosting and CDN layer records standard request data, including IP address, user agent and request time. This is used to serve the site, filter bots and abusive traffic, and diagnose faults. These logs are short-lived and are not used for marketing.

Advertising measurement

We are not running advertising or remarketing tags on this site at the time of the last update above. If that changes, we will update this policy before those tags go live and will ask for consent where the law requires it.

3. Cookies

We set no advertising or cross-site tracking cookies of our own. The booking widget on our contact page is embedded from Cal.com and may set cookies necessary for scheduling to work. You can block cookies in your browser: the site will still function, though the booking embed may not.

4. Why we use your data, and our legal basis

• To respond to your enquiry and deliver our services: performance of a contract, or steps taken at your request before entering one.
• To keep the site secure and measure how it performs: our legitimate interest in running a working, non-abused website.
• To send you a proposal or follow up on a call you booked: performance of a contract, or our legitimate interest in continuing a conversation you started.
• To meet accounting and tax obligations: compliance with a legal obligation.

We do not sell personal data, and we do not send unsolicited marketing to people who have not contacted us.

5. Client systems and client data

Our work involves configuring PandaDoc, CRMs and connected tools inside a client's own account. Any personal data in those systems, including the client's customers and prospects, remains the client's data. We act as a processor on the client's instructions: we access only what the engagement requires, we do not use that data for our own purposes, and we do not copy it out of the client's systems except where necessary to build or test what was agreed. Access is removed at the end of the engagement on request.

6. Who we share data with

We use a small number of service providers who process data on our behalf under contract:

• Cal.com: discovery call scheduling.
• Cloudflare: DNS, CDN and security filtering for this website.
• Hetzner: server hosting for this website, in the EU.
• DataFast: website analytics.
• PandaDoc: where we send you a proposal or agreement for signature.
• Our email, accounting and payment providers: for correspondence and invoicing.

We will name the specific providers in any category on request. We also disclose data where we are legally required to, for example to tax authorities or in response to a lawful order.

7. International transfers and retention

Some of the providers above are based outside the European Economic Area, mainly in the United States. Where data leaves the EEA we rely on the transfer mechanisms those providers offer, such as the European Commission's standard contractual clauses or an adequacy decision.

We keep enquiry and call-booking records for up to 24 months from our last contact, unless you ask us to delete them sooner. Contracts, invoices and accounting records are kept for seven years, as Estonian accounting law requires. Analytics data is aggregate and is not tied to an identifiable person.

8. Your rights

Under the GDPR you can ask us to give you a copy of the personal data we hold about you, correct it, delete it, restrict how we use it, or send it to another provider. You can object to processing we base on legitimate interests, and you can withdraw consent at any time where consent is the basis we relied on. Email hello@pureproposals.com and we will action it.

If you are unhappy with how we have handled your data, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the supervisory authority where you live.

9. Security

The site is served over HTTPS. Access to client systems and to our own accounts is restricted to the people working on an engagement and is protected by unique credentials and multi-factor authentication where the platform supports it. We collect as little personal data as we can, which is the most effective control of all.

10. Children

Our services are sold to businesses. This site is not directed at children and we do not knowingly collect data from anyone under 16.

11. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top of it. Material changes affecting existing clients will be raised with them directly.

Questions about this policy or our terms of service? Email hello@pureproposals.com.