1. Controller
YOULANDER OÜ, a private limited company (osaühing) under Estonian law, registered in the Estonian Commercial Register under no. 17029195, registered office Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia, VAT no. EE102758399, e-mail: contact@youlander.com. Data protection contact: contact@youlander.com.
2. What we process and why
| Purpose | Data | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Payment and invoicing | Name, e-mail, billing address, country, amount; card data handled by Stripe only | Contract; legal obligation (accounting) | 7 years after the end of the financial year (Estonian Accounting Act § 12) |
| Building the website | Brief content, business contact details, files (logo, photos), e-mail, phone | Contract | 12 months after delivery |
| Support and complaints | E-mail exchanges | Contract; legitimate interest | 3 years after the last exchange |
| Business prospecting by e-mail (free homepage mockup) | Business name, public business e-mail, town, trade, public rating | Legitimate interest (GDPR Art. 6(1)(f)), subject to the e-marketing rules of the recipient's country; objection at any time by replying STOP | Until objection, then kept on a do-not-contact list; otherwise deleted after 12 months |
| Proof of consent (terms, immediate start) | Timestamp, boxes ticked, e-mail | Legal obligation; legitimate interest (proof) | 5 years |
Business prospecting by e-mail — sources. We may contact businesses once by e-mail to offer a website with a free homepage mockup. Data: business name, published business e-mail address, town, trade. Sources: in France, the public ADEME directory of RGE-certified companies; in Belgium, the Crossroads Bank for Enterprises (BCE/KBO, FPS Economy, “Public Search”); and information the business itself has made public. In Belgium we only contact legal entities, at the impersonal e-mail address they have published themselves (e.g. info@ or contact@), in line with the Belgian Royal Decree of 4 April 2003 on e-mail advertising; no data about natural persons (managers, directors, self-employed people) taken from the BCE/KBO is used for prospecting. You can object at any time by replying STOP or writing to contact@youlander.com. If you are established in Belgium you may also complain to the Belgian Data Protection Authority (dataprotectionauthority.be).
3. AI-assisted production
Your brief may be shared with AI tool providers acting as processors. Where the option exists, we configure them so your data is not used to train their models. Every deliverable is reviewed by a human. Please do not include sensitive data or third parties' personal data in the brief.
4. Recipients and processors
- Stripe (payments) — Stripe Payments Europe Ltd., Dublin, Ireland
- Hosting and e-mail: Hostinger International Ltd., 61 Lordou Vironos Street, Lumiel Building, 4th floor, 6023 Larnaca, Cyprus — www.hostinger.com
- Generative AI tools (drafting help), with human review
Some processors may handle data outside the European Economic Area (e.g. in the United States) under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
5. Your rights
You have the rights of access, rectification, erasure, restriction, objection and portability (GDPR Art. 15–21). Contact contact@youlander.com; we reply within one month. You may complain to the Estonian Data Protection Inspectorate (aki.ee) or to your local authority (e.g. the ICO in the UK, ico.org.uk).
6. Cookies
This site uses no advertising or analytics cookies and loads no third-party resources. Stripe checkout pages may set cookies strictly necessary for payment security and fraud prevention.
7. Security
All traffic is encrypted (HTTPS). Access to briefs and files is limited to the people producing your site.