Privacy policy

This policy explains how OEJ OÜ processes personal data connected with visits to oej.ee, enquiries and support payments, and how the PII Guard browser demo works. Data processing for client projects is agreed separately.

1. Controller

The controller is OEJ OÜ, registry code 17394015, VAT ID EE102940327, address Harju maakond, Tallinn, Kesklinna linnaosa, Toompuiestee 21, 10137, Estonia. Contact: info@oej.ee.

2. Enquiries and email

When you submit the contact form, I process your name, email address, selected enquiry topic and message. The form sends this information through Cloudflare to Brevo's email service. The message is delivered to info@oej.ee and forwarded through Cloudflare Email Routing to the Gmail mailbox used by OEJ. Email sent directly to info@oej.ee is forwarded to the same mailbox.

OEJ does not pass incoming enquiries or emails to AI assistants for processing.

Do not include passwords, personal identification numbers or confidential client information.

3. Website operation, security and analytics

I use Cloudflare Web Analytics for aggregate information about visits and website performance. This analytics service does not use cookies. Your browser loads Cloudflare's analytics script and sends visit and performance measurements to the service. The website does not use advertising cookies.

Website delivery and security checks are separate: Cloudflare may process information such as your IP address, browser details and request time for these purposes. Cookieless analytics does not mean that visiting the website involves no personal-data processing.

4. PII Guard browser demo

The PII Guard browser demo processes entered text and replacement mappings in your browser. The demo code does not send them to OEJ's server or an AI service and does not save them in persistent browser storage.

The filter does not detect every personal identifier. Add missed names or other identifiers manually and review the result. If you copy text into another application or AI service, that service's data-processing terms apply. Loading the page can still generate ordinary hosting, security and analytics requests.

The downloadable PII Guard tool and the browser demo are different implementations. The downloadable tool's behaviour and limitations are described in its README and SECURITY files. Read about the tool and its limitations.

5. Support payments

To make a support payment, you are redirected to a payment page hosted by Stripe. You do not enter your full card number or card security code on oej.ee. Stripe processes the information needed to handle the payment under its privacy terms.

Stripe issues payment receipts. OEJ processes payment-related information to administer the payment, handle any refunds and meet accounting obligations. For payment questions, contact info@oej.ee.

6. Purposes and legal bases

• Responding to enquiries and discussing possible work: steps before entering into a contract, or OEJ OÜ’s legitimate interest in responding to an enquiry.
• Providing services and communicating with clients: performance of a contract.
• Website operation, security and aggregate usage information: OEJ OÜ’s legitimate interest in keeping the website working and improving its usability.
• Accounting and statutory obligations: compliance with a legal obligation.

7. Retention

I retain enquiries and correspondence for 90 days and then delete them. This period does not apply to documents I must retain to meet a legal obligation. Accounting and contract-related data are retained for the periods required by law. To ask about retention of information connected with your enquiry, contact info@oej.ee.

8. Service providers and processing locations

I do not sell personal data. I use Cloudflare for website delivery, security, analytics and email routing; Brevo for delivering contact-form messages; Google's Gmail for my mailbox; and Stripe for payments. Services and data processing for client projects are agreed separately.

These providers may also process data outside the European Economic Area. The website, email and payment services must not be understood as involving EU-only processing. An EU-only processing requirement for a client solution is a separate agreement that must be met by the entire service chain for that solution.

Provider terms: Cloudflare, Brevo, Google and Stripe.

9. Your rights

You have the right to request access to your personal data and to have it corrected. Subject to the conditions set out in law, you may also request erasure, restriction of processing or data portability, and object to processing. Where processing is based on consent, you may withdraw it without affecting the lawfulness of earlier processing.

Contact info@oej.ee. You may lodge a complaint with the Estonian Data Protection Inspectorate.