Privacy Policy
Last updated: March 2025
1. Who we are
This website is operated by SoftPotential OÜ, registration number 14565562, registered at Kakumäe tee 226, Harju maakond, Haabersti linnaosa, Tallinn 13516, Estonia. We are the data controller for personal data processed through innerly.me.
For privacy-related enquiries, contact us at info@innerly.me.
2. What data we collect
- Contact form: name, email address, and message content when you use our contact form.
- Analytics: anonymised usage data (pages visited, session duration, device type) via Google Analytics 4, only if you consent.
- Technical data: IP address, browser type, and referral source — processed automatically by our hosting provider (Vercel).
3. Legal basis for processing
- Contact form data: processed on the basis of your consent (Article 6(1)(a) GDPR) and our legitimate interest in responding to your enquiry.
- Analytics: processed only with your explicit consent (Article 6(1)(a) GDPR). You can withdraw consent at any time.
- Technical/server logs: processed on the basis of legitimate interest (Article 6(1)(f) GDPR) for security and stability purposes.
4. How we use your data
- To respond to your contact form messages.
- To understand how visitors use our website and improve our content (analytics, with consent only).
- To ensure the security and proper functioning of our website.
5. Third parties
- Vercel — website hosting (USA). Processes server logs. Vercel is certified under the EU-US Data Privacy Framework.
- Resend — email delivery for contact form submissions. Your message is transmitted to our inbox and is not stored by Resend after delivery.
- Google Analytics 4 — website analytics, only activated with your consent. Data may be transferred to the USA under Google's standard contractual clauses.
We do not sell your personal data to third parties.
6. Data retention
- Contact form messages are retained in our inbox for as long as necessary to handle your enquiry, and deleted within 12 months.
- Analytics data is retained for 14 months in Google Analytics, then automatically deleted.
- Server logs are retained for up to 30 days by Vercel.
7. Your rights
Under GDPR you have the right to:
- Access the personal data we hold about you.
- Rectification of inaccurate data.
- Erasure ("right to be forgotten").
- Restriction of processing.
- Data portability.
- Object to processing based on legitimate interest.
- Withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise any of these rights, email info@innerly.me. You also have the right to lodge a complaint with your local data protection authority.
8. Cookies
We use the following cookies:
| Cookie | Purpose | Duration |
|---|---|---|
| innerly_cookie_consent | Stores your cookie preference (Essential) | 1 year (localStorage) |
| _ga, _ga_* | Google Analytics — site usage analytics (Analytics, consent required) | 14 months |
You can withdraw your analytics consent at any time by clearing your browser's local storage or cookies, which will cause the cookie banner to reappear.
9. Changes to this policy
We may update this policy from time to time. The date at the top of this page reflects the most recent revision. Continued use of the website after changes constitutes acceptance of the updated policy.