Privacy policy

1. Data controller

Pohja Studio (Borignis OÜ)
Registration number: 16627712
Address: Maarjamõisa tee 35-9, 73501 Aravete, Estonia
Email: info@pohjastudio.fi
Phone: +358 40 054 7270

2. Contact person for privacy matters

Boris Penkin, info@pohjastudio.fi

3. Personal data we process

Through the contact form we process the following data:

• Name and email address
• Company name (optional)
• Phone number (optional)
• The content of your message
• IP address and technical log data (Supabase infrastructure)

Analytics identifiers (Google Analytics, Meta Pixel) are collected only with your consent.

4. Purpose and legal basis of processing

• Responding to quote requests: legal basis is entering into a contract (GDPR art. 6(1)(b))
• Developing the website: legal basis is legitimate interest (art. 6(1)(f))
• Marketing and analytics: legal basis is consent (art. 6(1)(a))

5. Retention period

Contact form data is kept for at most 2 years from the last contact. Analytics data is deleted according to Google’s and Meta’s own retention policies.

6. Recipients and transfers of data

Personal data is processed by the following sub-processors:

• Supabase Inc. (database service, USA/EU): protected by the EU–US Data Privacy Framework
• Anthropic PBC (AI service, USA): processes messages from the quote request form and the sales tool (via the Claude model). Data is not used to train models. Protected by SCCs and Anthropic’s DPA.
• Resend Inc. (email service, USA): protected by SCCs
• Vercel Inc. (hosting, USA/EU): protected by SCCs
• Google LLC (analytics, with the user’s consent)
• Meta Platforms Inc. (marketing, with the user’s consent)

Data is not disclosed to third parties for marketing purposes without your consent.

7. Your rights

You have the right to:

• Access the data stored about you (right of access)
• Request the correction of inaccurate data
• Request the deletion of your data (“right to be forgotten”)
• Restrict processing
• Have your data transferred to another controller (data portability)
• Withdraw your consent at any time
• Lodge a complaint with the competent data protection authority

The controller’s lead supervisory authority is the Estonian data protection authority (Andmekaitse Inspektsioon, aki.ee). You can also contact the data protection authority of your own country of residence (Finland: tietosuoja.fi).

We respond to requests without undue delay, at the latest within 30 days. Contact: info@pohjastudio.fi

8. Cookies

We use cookies for site functionality and analytics. You can read more in our cookie policy.

9. Data security

Data is stored in an encrypted database (Supabase, AES-256 at rest, TLS 1.3 in transit). Access to the data is limited to those who need it.

10. Changes to this policy

We reserve the right to update this policy. Significant changes will be announced on the website. The current version is always available at pohjastudio.fi/en/privacy.