1. Who we are
YOULANDER OÜ, a private limited company (osaühing) under Estonian law, registered in the Estonian Commercial Register under no. 17029195, registered office Sepapaja tn 6, Lasnamäe linnaosa, 15551 Tallinn, Harju maakond, Estonia, VAT no. EE102758399, e-mail: contact@youlander.com. Privacy contact: contact@youlander.com. As a company established in the European Union, we apply the EU General Data Protection Regulation (GDPR) to all personal data we handle, including data about people in the United States.
2. What we process and why
| Purpose | Data | Legal basis (GDPR Art. 6) | Retention |
|---|---|---|---|
| Payment and invoicing | Name, e-mail, billing address, country, amount; card data handled by Stripe only | Contract; legal obligation (accounting) | 7 years after the end of the financial year (Estonian Accounting Act § 12) |
| Building the website | Brief content, business contact details, files (logo, photos), e-mail, phone | Contract | 12 months after delivery |
| Support and complaints | E-mail exchanges | Contract; legitimate interest | 3 years after the last exchange |
| Business prospecting by e-mail (free homepage mockup) | Business name, business e-mail, phone, business address and trade license number as published by the City of New York, trade, borough | Legitimate interest (Art. 6(1)(f)) | Until opt-out, then kept on a do-not-contact list; otherwise deleted after 12 months |
| Proof of acceptance (terms, start of work) | Timestamp, boxes ticked, e-mail | Legal obligation; legitimate interest (proof) | 5 years |
3. Where prospect data comes from
For businesses in New York City, we use the public NYC Open Data dataset "DOB License Info" published by the NYC Department of Buildings (data.cityofnewyork.us), which lists licensed trades (for example master plumbers and electricians) with their business contact details. We only contact businesses whose listed e-mail address appears to be a business address, and we check that the business does not already have a website. We do not collect data from Google Maps.
4. Marketing e-mails and opt-out
Our prospecting e-mails are identified as advertisements, show our postal address (YOULANDER OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia) and comply with the U.S. CAN-SPAM Act. To stop receiving them, reply STOP (or "unsubscribe") to any message, or write to contact@youlander.com. We honor opt-out requests within 10 business days and keep your business e-mail on a do-not-contact list so we do not write to you again.
5. AI-assisted production
Your brief may be shared with AI tool providers acting as processors. Where the option exists, we configure them so your data is not used to train their models. Every deliverable is reviewed by a human. Please do not include sensitive data or other people's personal data in the brief.
6. Recipients and processors
- Stripe (payments)
- Hosting and e-mail: Hostinger International Ltd., 61 Lordou Vironos Street, Lumiel Building, 4th floor, 6023 Larnaca, Cyprus — www.hostinger.com
- Generative AI tools (drafting help), with human review
Some processors may handle data outside the European Economic Area (for example in the United States) under the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
7. Your rights
You may ask us for access to, correction or deletion of your data, restrict or object to its use, and receive a copy of it (GDPR Art. 15–21). Contact contact@youlander.com; we reply within one month. You may also complain to the Estonian Data Protection Inspectorate (aki.ee).
8. Cookies
This site uses no advertising or analytics cookies and loads no third-party resources. Stripe checkout pages may set cookies strictly necessary for payment security and fraud prevention.
9. Security
All traffic is encrypted (HTTPS). Access to briefs and files is limited to the people producing your site.