Privacy Policy

1. Data Controller

The controller responsible for your personal data collected through this website is:

For any questions regarding the processing of your personal data, please contact us at slowlivingmahu@gmail.com.

2. Personal Data We Collect

2.1 Enquiry form

When you submit an enquiry through our website, we collect the following data you voluntarily provide:

• First and last name
• Email address
• Country of residence
• Area of interest (house type / purchase or rental)
• Message content (optional)

2.2 Analytics data (Google Analytics 4)

We use Google Analytics 4 (GA4) to understand how visitors use our website. GA4 collects data such as:

• Pages visited and time spent
• General geographic location (country/city level, derived from anonymised IP)
• Device type, browser and operating system
• Referring website or search term
• Scrolling and interaction events

IP addresses are anonymised before any processing by Google. No data collected by GA4 is used to identify you personally.

2.3 Cookies

Our website uses the following types of cookies:

You can opt out of Google Analytics tracking at any time via the Google Analytics opt-out browser add-on.

3. Legal Basis for Processing

4. How We Use Your Data

We use the personal data you submit via the enquiry form exclusively to:

• Respond to your enquiry personally and promptly
• Arrange a private on-site visit if requested
• Send you relevant project information you have asked for

We do not use your data for automated decision-making or profiling. We do not sell or rent your personal data to any third party.

5. Data Retention

Enquiry data is retained for up to 3 years from the date of your enquiry, or until you request deletion — whichever comes first. After this period, your data is permanently deleted.

Analytics data (GA4) is retained for 14 months in accordance with Google's default data retention settings, after which it is automatically deleted.

6. Third-Party Processors

We share data with the following trusted third-party service providers who act as data processors under GDPR:

Google's privacy policy is available at policies.google.com/privacy.

7. Your Rights

Under the General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act, you have the following rights:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate data
• Right to erasure — request deletion of your data ("right to be forgotten")
• Right to restriction — request that we limit how we use your data
• Right to data portability — receive your data in a structured, machine-readable format
• Right to object — object to processing based on legitimate interest
• Right to withdraw consent — where processing is based on consent, you may withdraw it at any time

To exercise any of these rights, contact us at slowlivingmahu@gmail.com. We will respond within 30 days.

If you believe your data has been processed unlawfully, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): www.aki.ee.

8. Data Security

We take appropriate technical and organisational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. Our website is served over HTTPS.

9. Changes to This Policy

We may update this privacy policy from time to time to reflect changes in our practices or applicable law. The date at the top of this page will always indicate when the policy was last revised. We encourage you to review this page periodically.

10. Contact

All privacy-related enquiries should be directed to: