Privacy Policy

1. Data Controller

The data controller responsible for your personal data is OUTSOURCE+, headquartered in Tallinn, Estonia. If you have any questions about how we handle your data, you can reach us at hello@outsource.plus or by phone at +372 5191 6511.

2. Information We Collect

We collect information in the following ways:

Information you provide

• Contact details (name, email, phone, company) when you fill out our contact form or send us a brief
• Communication content when you email, call, or WhatsApp us
• Billing information if you engage our services

Information collected automatically

• Technical data: IP address, browser type, device, operating system
• Usage data: pages visited, time spent, referring URLs
• Cookies and similar technologies — see our Cookies Policy for details

3. How We Use Your Information

We use your personal data to:

• Respond to your inquiries and provide the services you request
• Manage projects, contracts, and invoices
• Improve our website, services, and marketing
• Send occasional updates about our work (only if you opt in)
• Comply with legal obligations under Estonian and EU law

4. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases:

• Consent — for marketing communications and non-essential cookies
• Contract — to deliver services you have engaged us for
• Legitimate interest — for improving our services, security, and analytics
• Legal obligation — for tax, accounting, and regulatory requirements

5. Sharing & Third Parties

We do not sell your personal data. We may share information with trusted service providers who help us operate — including hosting, analytics, email delivery, payment processing, and legal or accounting professionals. All third parties are contractually bound to protect your data and use it only for the specific service they provide to us.

6. Data Retention

We retain personal data only for as long as needed for the purposes described in this policy, or as required by law. Typically:

• Contact form submissions: up to 24 months
• Client project data: for the duration of the engagement plus 7 years (accounting requirement)
• Marketing lists: until you unsubscribe
• Analytics data: up to 26 months

7. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of the data we hold about you
• Rectification — correct inaccurate or incomplete data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — limit how we process your data
• Portability — receive your data in a machine-readable format
• Object — object to processing based on legitimate interests or direct marketing
• Withdraw consent — at any time, where processing is based on consent

To exercise any of these rights, contact us at hello@outsource.plus. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).

8. Security

We use industry-standard technical and organizational measures to protect your data, including encrypted connections (HTTPS), access controls, and secure hosting infrastructure. No method of transmission over the internet is 100% secure, but we work continuously to safeguard your information.

9. International Transfers

Some of our service providers may process data outside the European Economic Area (EEA). Where this happens, we ensure appropriate safeguards are in place — such as Standard Contractual Clauses approved by the European Commission — to protect your data.

10. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our services, technology, or the law. When we do, we'll update the "Last updated" date at the top. Significant changes will be communicated more prominently.

11. Contact Us