Privacy notice

We collect only what we need to build your documents, and we delete it after 90 days. No tracking cookies, no ads, no analytics services.

Who is responsible

Elbek (Søren Elbek, sole trader), Myllyväenkatu 10 D 3, 00920 Helsinki, Finland, business ID 3570992-5. Email: [email protected].

The free check

The checker runs in your browser. Your answers are stored in your browser's session storage on your device only. They are not sent to us. They disappear when you close the tab.

When you order

We store your checker answers and what you type in the order form: your name, email, the account name, optionally the email or phone number of the account, a profile link, your own explanation and business details. We also store your consent to immediate delivery, with the time, your IP address and your browser's user agent, as proof. We use this to build and deliver your documents and, if you bought Full Escalation or Business, to send you deadline reminders (legal basis: performance of a contract, GDPR Art. 6(1)(b), and our legitimate interest in being able to prove your consent, Art. 6(1)(f)). Your order form draft is kept only in your browser's session storage until you close the tab.

Please don't include health, sexual, political or religious details in your own explanation unless you need them.

Never type a password into any field. We don't need it and we never ask for it.

When you email us

If you write to us, we store your email, your address, any attachments and our answers, to answer you and to handle your order (Art. 6(1)(b), or our legitimate interest in answering questions, Art. 6(1)(f)). Emails are deleted 12 months after they were sent.

How long we keep it

Your case data and documents are deleted automatically 90 days after your order. You can delete them earlier with the button on your download page. Unpaid orders are deleted after two days. Database backups are kept for 7 days and then deleted. For bookkeeping we keep a payment record without the case content (order reference, product, amount, date, country, Stripe payment ID) for the period Finnish accounting law requires.

Who else sees it

• Stripe (payments). Stripe is an independent controller for your payment details; we never see your card number.
• Resend (sends and receives our emails), as our processor.
• Google (Gmail, our mailbox: order notices and copies of emails you send us arrive there).
• Cloudflare (delivers the website and protects it against attacks), based on our legitimate interest in a secure site (Art. 6(1)(f)).

Stripe, Resend, Google and Cloudflare are US companies. Where data reaches the US, the transfer is based on the EU-US Data Privacy Framework or the EU standard contractual clauses. We don't sell data and we don't share it with platforms. We never contact a platform about you.

Cookies

We set one cookie, `lang`, only if you use the language switcher, to remember your language. Agency customers who sign in get a session cookie that keeps them signed in. Both are strictly necessary. No tracking or advertising cookies.

Your rights

You can ask for access to your data, correction, deletion, restriction and portability, and you can object. Write to [email protected]. You can also complain to a data protection authority, for example the Finnish Data Protection Ombudsman (tietosuoja.fi) or the authority where you live.