DATAFOREST Privacy Policy
Last updated: 20 October 2026
DATAFOREST respects your privacy and handles personal data responsibly. This Privacy Policy explains how Dataforest OÜ collects, uses, shares, and protects personal data when you visit dataforest.ai, contact us, submit a project inquiry, schedule a meeting, or interact with our website and business communications.
DATAFOREST provides software development services, including data engineering, data science, AI development, AI agents, web scraping, web development, and custom software development. This Policy covers our website and related business activities and explains what information we collect, why we use it, who receives it, how long we keep it, and what rights you have.
Contact Us About Privacy
1. Who We Are
Dataforest OÜ is a company incorporated under the laws of Estonia.
Registered address: Sakala tn 7-2, 10141 Tallinn, Estonia.
Website: https://dataforest.ai
Privacy contact: info@dataforest.ai
In this Policy, “DATAFOREST,” “we,” “us,” and “our” refer to Dataforest OÜ.
2. What This Policy Covers
This Policy applies to personal data we process when you:
• Visit or browse the dataforest.ai site.
• Submit a project inquiry or contact form.
• Upload a file through the inquiry form in the website footer.
• Schedule a meeting through Calendly.
• Communicate with our team about potential or existing business relationships.
• Subscribe to or receive our marketing communications.
• Interact with our website through cookies, analytics, and advertising technologies.
• Provide feedback or approve a testimonial for publication.
DATAFOREST generally acts as a data controller for these activities. This Policy doesn’t replace privacy notices or data processing agreements that govern personal data processed within a client project.
3. Personal Data We Collect
The information we collect depends on how you interact with us.
• First and last name.
• Email address.
• Telephone number, including country code.
• Company name.
• Job title or professional role, if provided.
• The service or area of interest you select.
• Project requirements, business needs, messages, questions, correspondence, and other information you provide.
• Uploaded files and their contents when you attach a file to the footer inquiry form. The upload limit is 10 MB.
• Meeting information, including your name, email address, selected date and time, time zone, and answers to additional booking questions.
• Technical and browsing information, including IP address, approximate location derived from it, browser and device information, pages visited, referring URLs, traffic sources, dates and times of interactions, cookie identifiers, clicks, scrolling, and other website interactions where the relevant tools are enabled.
• Marketing subscription status, selected subscription categories, communication preferences, and opt-out information.
Please provide only information relevant to your inquiry. Avoid uploading sensitive personal data unless it is necessary and you have an appropriate basis to share it.
4. How We Obtain Personal Data
We obtain it through the following channels:
• Directly from you through website forms, uploaded files, email correspondence, meeting bookings, subscriptions, and other communications.
• Automatically through the website and its configured technologies, which collect technical information and browsing activity according to the tools in use and your cookie choices.
• Through third-party services. HubSpot supports our customer relationship management (CRM) activities, while Calendly provides external meeting scheduling. Analytics and advertising providers may collect information through their technologies when those technologies are enabled.
5. Why We Use Personal Data and Our Legal Bases
Under the General Data Protection Regulation (GDPR), we process personal data on a valid legal basis. The applicable basis depends on the purpose and circumstances.
Where we rely on consent, we request it for the relevant purpose. You can withdraw consent at any time. Withdrawal doesn’t affect the lawfulness of processing carried out before withdrawal.
Non-essential cookies and tracking technologies remain disabled until you give consent.
Where information is necessary to respond to a project inquiry, prepare a proposal, or take steps toward a potential agreement, not providing that information may prevent us from completing the requested interaction.
Where we rely on legitimate interests, those interests include maintaining professional relationships, running and securing the website, preventing misuse, and establishing or defending legal claims. We consider the impact on individuals and their rights when relying on this basis.
6. Inquiries and Meetings
Contact form. When you submit the project inquiry form, your details and any attached file are sent through Formspree and Zapier to our HubSpot CRM. We use them to review your request, contact you, prepare for a discussion, and send an NDA if you asked for one.
Scheduling a call. The “Schedule a call” button opens Calendly, an external booking service. We use your booking details to arrange and prepare for the meeting. Calendly also processes this data under its own privacy policy.
7. Cookies, Analytics, and Advertising Technologies
We use cookies and similar technologies to support website functionality, understand website use, measure marketing performance, and support advertising activities. The technologies currently used on the website include:
Third-party providers may process information under their own privacy terms. You can review the types of cookies we use, their purposes, and available controls through our Cookie Policy.
8. Marketing Communications and Advertising Choices
Where you subscribe to a newsletter or other marketing communication, we use your email address and subscription preferences to send relevant updates. You can unsubscribe using the link in a marketing email, or by contacting info@dataforest.ai.
If you contact DATAFOREST about a potential project, our inbound team uses your contact details and inquiry information to respond, discuss requirements, arrange a meeting, or follow up. Business correspondence relating to a request you made is distinct from promotional communications.
Marketing and advertising technologies are described in Section 8. Where consent is required, we use these technologies only after you give the required consent.
9. Customer Testimonials, Comments, and Reviews
We publish customer testimonials, comments, or reviews only when they have been approved for publication. An approved testimonial can include the testimonial itself and details you authorize us to publish, such as your name, professional role, company, or photo.
We use approved testimonials for website content and business communications. We don’t assume that information provided privately is approved for public publication.
10. Who We Share Personal Data With
Our service providers process personal data on our behalf under data processing agreements. We do not sell your personal data.
• CRM provider: HubSpot, for managing inquiries and business contacts.
• Form processing and automation providers: Formspree and Zapier, to receive, route, and deliver inquiry submissions.
• Scheduling provider: Calendly, for booking and managing meetings.
• Website hosting and infrastructure provider: Webflow.
• Email and communications providers, where needed to support business correspondence.
• Analytics providers: Google and Microsoft, where the corresponding technologies are used.
• Advertising providers: LinkedIn, Meta, and Google, where we use their advertising technologies.
• Professional advisers, such as legal or accounting advisers, where access is necessary for their work.
• Authorities and other recipients: Public authorities, courts, or other parties where disclosure is required by law or necessary to establish, exercise, or defend legal claims.
11. International Data Transfers
Some of our service providers, including HubSpot, Google, Microsoft, Meta, LinkedIn, Calendly, Formspree, and Zapier, process personal data outside the European Economic Area, mainly in the United States.
For these transfers, we rely on the EU–US Data Privacy Framework where the provider is certified, or on Standard Contractual Clauses approved by the European Commission. You can contact us for further information about applicable transfer safeguards.
12. How Long We Keep Personal Data
We keep personal data only as long as we need it for the purposes described in this Policy:
• Inquiries and uploaded files: until the inquiry is resolved, and for up to 1 year after our last contact if no engagement follows.
• Business contacts: for the duration of our business relationship and afterward as required by accounting and tax law.
• Newsletter data: until you unsubscribe. We keep a record of your opt-out so we do not contact you again.
• Analytics and advertising data: according to each tool’s retention settings and your cookie choices.
• Security and diagnostic logs: for as long as needed to maintain security, investigate incidents, and meet applicable obligations.
When the applicable retention period expires, we delete, anonymize, or otherwise dispose of personal data according to our retention procedures and applicable law. Some information may remain in backups for a limited period or as needed to comply with the law, resolve disputes, or establish, exercise, or defend legal claims.
13. How We Protect Personal Data
We protect personal data with technical and organizational measures, including access controls, encrypted transmission, and confidentiality obligations for our team. No system is completely secure, but we work to keep our safeguards appropriate to the risks. If a data breach occurs, we will notify you and the supervisory authority where the law requires it.
14. Your Privacy Rights and Choices
Depending on your location, applicable law, and the circumstances of processing, you have rights concerning your personal data.
• Access: Request confirmation of whether we process your personal data and obtain access to it.
• Correction: Ask us to correct inaccurate or incomplete personal data.
• Deletion: Request deletion where the applicable legal conditions are met.
• Restriction: Ask us to restrict processing in certain circumstances.
• Portability: Receive certain personal data in a structured, commonly used, machine-readable format, where the right applies.
• Objection: Object to processing based on legitimate interests or to direct marketing, subject to applicable law.
• Consent withdrawal: Withdraw consent at any time where processing relies on consent.
• Complaint: Lodge a complaint with the competent data protection supervisory authority.
You can exercise your rights by emailing info@dataforest.ai. Please describe your request and provide enough information for us to understand it. We may ask for additional information where reasonably necessary to verify your identity and protect personal data from unauthorized disclosure.
We respond to requests to exercise privacy rights within one month under the GDPR. Where a legally permitted extension applies, we notify you within the initial response period and explain the reason.
15. Children’s Privacy
DATAFOREST’s website is intended for a professional and business audience and is not directed at children under 16. We don’t knowingly seek to collect personal data from children under 16 through the website. If you believe a child has provided personal data to us, contact info@dataforest.ai so we can assess the situation and take appropriate action under applicable law.
16. External Websites and Third-Party Services
Our website may link to external websites or services, including Calendly and third-party platforms used for analytics, advertising, or communications. When you follow an external link or interact with a third-party service, that provider may process your personal data under its own privacy terms. We don’t control every aspect of a third-party’s website or data processing practices.
17. Changes to This Policy
We update this Policy when our website, business activities, technologies, or legal obligations change. We publish the revised version on this page and update the “Last updated” date. Where required by law, we provide additional notice of material changes or seek consent for new processing activities.
18. Contact Details and Complaints
If you have questions about this Policy, want to exercise your privacy rights, or wish to raise a concern about how we process personal data, please contact us:
Dataforest OÜ
Sakala tn 7-2
10141 Tallinn
Estonia
Email: info@dataforest.ai
We’d love to hear from you
Share project details, like scope or challenges. We'll review and follow up with next steps.
