Privacy Policy

Last updated: 12 May 2026

This Privacy Policy describes how Iluehe OÜ (registry code 14642937, hereinafter "we" or "WebsiteGenie") collects, uses and protects your personal data when you visit websitegenie.eu or use our services.

1. Data controller

Iluehe OÜ
Registry code: 14642937
Address: Maksi tee 4, Viti küla, Harku vald, Harju maakond, 76910, Estonia
Email: info@websitegenie.eu

2. What data we collect

Via the contact form

When you fill in our contact form, we collect the following data:

• Name
• Email address
• Company name (if provided)
• The content of your message

Technical data

When you visit our website, our hosting provider Cloudflare automatically collects:

• IP address
• Browser type and version
• Pages visited and visit time

We use this data only to ensure security and resolve technical issues. We do not use tracking cookies or analytics tools such as Google Analytics.

Spam protection (Cloudflare Turnstile)

To protect the contact form against spam, we use the Cloudflare Turnstile service. It may process limited technical information (e.g. IP address, browser data) to distinguish humans from bots. Turnstile does not track your activity across the web and does not use cookies for profiling.

3. Legal basis and purpose

Legal bases for processing personal data (GDPR Article 6):

• Performance of a contract (Art 6(1)(b)): responding to your enquiry and providing the service.
• Legitimate interest (Art 6(1)(f)): ensuring the security of the website and improving the service.
• Legal obligation (Art 6(1)(c)): for example, retaining accounting-related data as required by law.

4. How long we retain data

• Contact form enquiries: up to one year from resolution of the enquiry. If a client relationship is established, we retain the data in accordance with the agreement.
• Contract-related data: 7 years (as required by Estonian accounting law).
• Cloudflare technical logs: up to 30 days.

5. With whom we share data

We share your data only with the following data processors who help us deliver the service:

• Cloudflare, Inc. — web hosting (Cloudflare Pages), DNS, spam protection (Turnstile). Data is processed in EU data centres.
• Resend.com — email delivery (the contact form content reaches us via Resend). Data is processed in the EU region (Ireland).

All our processors are GDPR-compliant and process data only according to our instructions.

We do not sell or share your data with any third parties for marketing purposes.

6. Your rights

Under the GDPR, you have the following rights:

• To access the data we hold about you
• To request correction or completion of your data
• To request deletion of your data ("right to be forgotten")
• To restrict processing
• To request your data in a portable format (data portability)
• To object to processing
• To lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee)

To exercise your rights, contact us at info@websitegenie.eu. We will respond within 30 days.

7. Data security

We apply reasonable technical and organisational measures to protect your data. All traffic on our website is encrypted (HTTPS), we store credentials securely, and access to your data is limited to authorised persons only.

8. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will announce material changes on the website. We recommend reviewing this page periodically.

9. Contact

For privacy-related questions, please contact:
Email: info@websitegenie.eu