Privacy Policy

1. Introduction

Paradigm Shift OÜ ("we," "our," or "us") is committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

By accessing or using our website and services, you consent to the practices described in this Privacy Policy.

2. Information We Collect

2.1 Personal Information

We may collect the following types of personal information:

• Contact information (name, email address, phone number)
• Company information (company name, job title)
• Communication preferences
• Information provided in contact forms or inquiries
• Project requirements and business needs

2.2 Technical Information

We automatically collect certain technical information when you visit our website:

• IP address and location information
• Browser type and version
• Operating system information
• Pages visited and time spent on our website
• Referral source and clickstream data
• Cookies and similar tracking technologies

3. How We Use Your Information

We use your personal information for the following purposes:

• To provide and improve our technology consulting services
• To respond to your inquiries and communicate with you
• To send you service-related information and updates
• To personalize your experience on our website
• To analyze website usage and improve our services
• To comply with legal obligations
• To protect our rights and prevent fraudulent activity
• With your consent, to send marketing communications

4. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your personal information based on the following legal grounds:

• Consent: When you explicitly consent to processing
• Contract: To perform our contractual obligations
• Legitimate interests: To improve our services and website functionality
• Legal obligation: To comply with applicable laws

5. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information to third parties. We may share your information in the following circumstances:

• With service providers who assist us in operating our website and business
• When required by law or to comply with legal processes
• To protect our rights, safety, or property
• In connection with a business transfer or merger
• With your explicit consent

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Employee training on data protection
• Secure data storage and backup procedures

7. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law. Typically:

• Contact form submissions: 3 years
• Client project data: Duration of contract plus 7 years
• Website analytics data: 26 months
• Marketing communications data: Until you unsubscribe

8. Your Rights

Under applicable data protection laws, you have the following rights:

• Access: Request copies of your personal information
• Rectification: Request correction of inaccurate information
• Erasure: Request deletion of your personal information
• Restriction: Request limitation of processing
• Data portability: Request transfer of your data
• Objection: Object to processing for certain purposes
• Withdraw consent: Withdraw previously given consent

To exercise these rights, please contact us at [email protected].

9. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your browsing experience. For detailed information about our cookie practices, please refer to our Cookie Policy.

10. International Data Transfers

Your personal information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers, including:

• Adequacy decisions by the European Commission
• Standard Contractual Clauses
• Binding Corporate Rules
• Certification schemes

11. Children's Privacy

Our services are not directed to individuals under the age of 16. We do not knowingly collect personal information from children under 16. If you become aware that a child has provided us with personal information, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes, we will:

• Update the "Last Updated" date at the top of this policy
• Notify you of material changes via email or website notice
• Obtain your consent for material changes where required by law

13. Contact Information

If you have any questions about this Privacy Policy or our data practices, please contact us:

14. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the relevant supervisory authority:

Estonian Data Protection Inspectorate
Website: www.aki.ee
Email: [email protected]