Privacy
consult.eldris.ai is operated by EldrisAi OÜ (Reg. No 17298529, Ruunaoja tn 3, Tallinn, 11415, Estonia), the controller of the personal data you give us here. We handle it under the EU GDPR and the UK GDPR.
What we collect
- Who is buying: company or personal legal name, trading name, registration and VAT numbers, the business owner's name and your address.
- Contact details: name, job title, email and phone.
- Your products, the links to where you sell, which Eldris services you have or need, your answers and your questions.
- The documents you upload.
- Payment confirmation from Stripe. We never see or store your card details.
Why, and on what legal basis
To deliver the consultation you bought: to review your case, write your report and answer your follow-up questions. This is necessary to perform our contract with you (GDPR Article 6(1)(b)). Your documents are stored privately and used only to prepare your consultation. We do not sell your data.
Who processes it for us
- Stripe: payments.
- Google Analytics: website statistics, only if you accept.
- Supabase: our database and private document storage.
- Cloudflare: hosting of this website.
Some of these providers are based outside the EEA and the UK. Where data is transferred, we rely on an adequacy decision or the European Commission's Standard Contractual Clauses.
How long we keep it
We delete your documents and answers 90 days after we send your report. Payment records are kept for as long as accounting law requires.
On this website
This site sets no advertising cookies. Your answers in the consultation form are saved in your own browser so you don't lose them if you leave the page. Videos are embedded from YouTube's privacy-enhanced domain (youtube-nocookie.com); YouTube may store data in your browser when a video loads or plays. Our home page, requirements guide and data pages also load Google's "preferred source" button script from news.google.com.
Analytics, only if you say yes
We use Google Analytics 4 to count visits and see which pages people read. We ask first: until you accept, nothing is loaded from Google, no analytics cookie is set and no measurement is sent. If you accept, Google Analytics sets cookies in your browser and receives your truncated IP address, the pages you view, and general details such as your device, browser, approximate location and where you arrived from. We never send it your name, your email or your documents, and advertising and personalisation signals are switched off.
The legal basis is your consent (GDPR Article 6(1)(a)). You can withdraw it at any time with the link in the footer of every page; declining changes nothing else about the site. Google acts as our processor and may transfer data outside the EEA and the UK under the European Commission's Standard Contractual Clauses. Analytics data is deleted after 14 months. You can also install Google's opt-out add-on.
Statistics we publish
We publish anonymised, aggregated statistics about the questions businesses ask us, for example how many enquiries raised a particular topic. They are counts only: no name, company, address or message text is published, small groups are withheld, and no one can be identified from them.
Your rights
You can ask for a copy of your data, or for it to be corrected or deleted, at [email protected].
You can also complain to a supervisory authority: in Estonia, the Andmekaitse Inspektsioon (aki.ee); in the UK, the Information Commissioner's Office (ico.org.uk).