LEGAL
Last updated: August 12, 2026
The data controller responsible for your personal data is: Eiravox OÜ. Registry code: 17047276 (Estonian Business Register). Registered address: [Registered address, Estonia]. Email: privacy@eiravox.com. For any question about this policy or your data, contact us at the email above.
When you submit a LinkedIn Lead Gen Form or a website form, we collect the information you provide, which may include: first and last name, business email address, job title, company name, and country or location. When you contact us or book a call, we collect the details you share with us, such as email content and scheduling information. Automatically, when you visit our website, we may collect limited technical data — such as IP address, device or browser type, and pages viewed — via cookies and similar technologies. We practise data minimisation: we only ask for the fields we genuinely need, and we do not collect special-category sensitive data through these forms.
To deliver the resource you requested, such as the Regulated AI Playbook: consent — GDPR Art. 6(1)(a). To send related educational and marketing emails about regulated or compliant AI, and occasional updates: consent — Art. 6(1)(a). To respond to your enquiry or a request for a regulated-product assessment or call: steps prior to a contract — Art. 6(1)(b), and/or legitimate interests — Art. 6(1)(f). To maintain business relationships, understand interest in our services, and improve our content: legitimate interests — Art. 6(1)(f). To keep records of consent and protect the security of our systems: legitimate interests — Art. 6(1)(f); legal obligation — Art. 6(1)(c) where applicable. Where we rely on legitimate interests, we have balanced those interests against your rights and use the data only in ways you would reasonably expect in a B2B context. You can object at any time. Where we rely on consent, you can withdraw it at any time without affecting prior processing.
We do not sell your personal data. We share it only with service providers (“processors”) who help us operate, each under a data processing agreement: LinkedIn, when you submit a LinkedIn Lead Gen Form; an email platform such as Mailchimp or HubSpot to store contacts and send emails; a CRM, if any, to manage business contacts and follow-up; Calendly, if you book a call; our website host and analytics providers; and professional advisers and authorities where required by law.
Some of our processors are located outside the European Economic Area, for example in the United States. Where personal data is transferred outside the EEA, we rely on appropriate safeguards under GDPR Chapter V — such as the European Commission’s Standard Contractual Clauses or an adequacy decision. You may request a copy of the relevant safeguards using the contact details above.
Marketing contact data — name, email, company, and job title — is kept while you remain subscribed and for up to [24 months] after your last engagement, then deleted or anonymised. Enquiry and assessment records are kept for up to [24 months] after our last interaction, unless a contract requires longer. Records of consent are kept for [3 years] as proof of lawful processing. If you withdraw consent or ask us to delete your data, we act on it promptly, subject to any legal retention obligations.
Under the GDPR, you have the right to access the personal data we hold about you; rectify inaccurate or incomplete data; erase your data; restrict processing in certain circumstances; receive your data in a portable format; object to processing based on legitimate interests, including direct marketing; withdraw consent at any time where processing is based on consent; and lodge a complaint with a supervisory authority. To exercise any right, email privacy@eiravox.com. You also have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or to the data protection authority in your own EU or EEA country.
Our website uses cookies and similar technologies for basic functionality and, where you consent, analytics. You can control cookies through the cookie banner and your browser settings.
We do not make decisions producing legal or similarly significant effects about you based solely on automated processing.
We use appropriate technical and organisational measures — including access controls, encryption in transit, and logging — to protect your data against unauthorised access, loss, or misuse.
We may update this policy from time to time. The “Last updated” date at the top reflects the latest version, and material changes will be communicated where appropriate.