Who we are
Verticulate is a private limited company registered in Estonia. We are responsible for the personal data described on this page. You can reach us at hello@verticulate.io.
What this policy covers
This policy covers the personal data we collect through verticulate.io and the emails you send us. It does not cover the systems we build for clients. In those systems the data belongs to the client, and we use it only on the client’s instructions. Our Trust & Security page explains how that works.
What we collect
When you use the contact form
To reply and prepare the discovery call, we collect:
- your name and work email address;
- your company’s website and size;
- what is taking the most time in your business, if you tell us;
- how you heard about us, if you tell us;
- the date and time you sent the form.
When you subscribe to the newsletter
We collect your email address, the page you subscribed from, and the date and time.
When you email us
We keep your message and your contact details so we can reply and keep a record of the conversation.
When you visit the website
Like most websites, our hosting provider records technical data when a page is requested, such as your IP address, browser type and the page address. It is used only to keep the website running and secure.
This website sets no analytics, advertising or tracking cookies. The cookie policy explains what that means in practice.
Why we use it, and our legal basis
| Purpose | Why we are allowed to |
|---|---|
| Replying to your inquiry and preparing the discovery call | Steps you asked us to take before a contract, and our legitimate interest in answering inquiries |
| Sending the newsletter | Your consent, which you can withdraw at any time |
| Keeping the website secure and working | Our legitimate interest in running a secure website |
| Keeping business and accounting records once you become a client | Our legal obligations under Estonian law |
We do not sell your personal data, and we do not use it to make automated decisions about you.
How long we keep it
- Contact form submissions and emails: up to 24 months after our last contact, unless you become a client.
- Client records: for as long as the contract runs, then for as long as Estonian accounting law requires, currently seven years for accounting records.
- Newsletter: until you unsubscribe. After that we keep only your email address on a do-not-send list, so you are not added again by mistake.
- Server logs: for the period our hosting provider sets.
Who else handles it
A small number of providers run the website and our email for us. They may use the data only on our instructions and must keep it secure.
- Website hosting and form storage: Vercel
- Email and newsletter delivery: the email service we use to reply to you and to send the newsletter
If a provider handles data outside the European Economic Area, the transfer is covered by a European Commission adequacy decision, such as the EU–US Data Privacy Framework, or by the Commission’s standard contractual clauses.
Your rights
You can ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete your data;
- restrict how we use it, or object to our using it, including for direct marketing at any time;
- send your data to you or to another company in a portable format;
- withdraw consent you have given, such as for the newsletter.
Email hello@verticulate.io to use any of these rights. We reply within one month. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at aki.ee, or to the data protection authority where you live.
Changes to this policy
We update this page when what we collect, or how we use it, changes. The date at the top shows the latest version.



