Privacy Policy

Last reviewed: 28 October 2026

1. Data controller

Alphatesi OÜ (registry code: 16925548; VAT ID: EE102766297), registered in Estonia, is the controller of the personal data described in this policy. For privacy enquiries or to exercise your data protection rights, contact info@alphatesi.eu.

2. Personal data we process

Depending on how you use the website and our services, we may process:

• Contact and enquiry details: name, email address, telephone number, messages, requested service, academic subject, deadlines and other information you provide.
• Service-related information: consultation arrangements, communications, instructions, documents, drafts, feedback and delivery history.
• Billing information: invoice details, payments and transaction references.
• Applications to collaborate: contact details, qualifications, professional experience and CVs, where the relevant form is available.
• Technical information: IP address, browser/device information, security logs and cookie preferences; analytics or advertising identifiers only where those features are enabled with the required consent.

We usually obtain information directly from you. We may also receive service communications or payment confirmations from authorised recipients. Please do not submit unnecessary sensitive information or personal data belonging to others.

3. Why we use your data and on what legal basis

• Enquiries, quotations, consultations and delivery of agreed services: steps requested before a contract or performance of a contract (Article 6(1)(b) GDPR).
• Invoicing, accounting and statutory records: compliance with legal obligations (Article 6(1)(c)).
• Customer correspondence outside a contract, website security, fraud prevention and protection of legal claims: our legitimate interests in running a secure business and addressing enquiries or disputes (Article 6(1)(f)), balanced against your rights.
• Assessment of collaboration applications: requested pre-contractual steps (Article 6(1)(b)) or, where applicable, our legitimate interest in recruitment (Article 6(1)(f)).
• Optional analytics, advertising and marketing communications: consent where required (Article 6(1)(a)) and applicable electronic-communications rules. Declining optional cookies does not prevent you from requesting a quotation.

4. Who may receive your data

Access is restricted to authorised staff and, where required, academic consultants or editors involved in your requested service. Relevant data may also be processed by categories of service providers supporting hosting and IT security, communications and customer administration, payments, accounting and optional website analytics or advertising. Public authorities may receive information when legally required. Providers acting on our behalf are subject to appropriate confidentiality, security and data-processing obligations. We do not sell personal data.

Location of processing: personal data relating to this website is processed within the European Economic Area (EEA) and is not transferred to recipients outside the EEA.

5. How long we keep data

We retain information only for as long as necessary for its purpose:

• Enquiries that do not lead to a service: up to 12 months from the last substantive contact.
• Customer correspondence and operational records: up to 3 years after the last relevant interaction or service completion.
• Academic drafts and working files: normally 90 days after final delivery, unless a revision, dispute or legal duty requires longer.
• Unsuccessful collaboration applications: up to 6 months after the selection process ends.
• Routine technical/security logs: normally 90 days, unless an incident requires investigation.
• Accounting and supporting business documents: generally 7 years from the end of the relevant financial year; records covered by applicable special EU VAT schemes: 10 years from the end of the transaction year.

Where required by law or to resolve an actual legal claim, relevant information may be kept longer. Browser cookie preferences are described in our separate Cookie Policy.

6. Your privacy rights

Subject to GDPR conditions, you may request access to, correction or deletion of your data, restriction of processing, data portability, or object to processing based on legitimate interests. You can withdraw consent at any time without affecting earlier lawful processing.

Contact info@alphatesi.eu; we normally respond within one month, subject to lawful extensions. You may also complain to the competent data-protection authority, including the Estonian Data Protection Inspectorate (www.aki.ee).

7. Forms, security and automated decisions

Fields marked as required are needed to respond to or fulfil your request; without them we may be unable to provide the requested service. Billing data may be required by law. Other information is optional. We take appropriate technical and organisational steps to protect information and limit access. We do not use solely automated decisions producing legal or similarly significant effects on visitors.

8. Cookies and updates

Essential technologies support website functions and security. Optional analytics and advertising require the applicable consent. You can change your choices through Cookie settings in the footer. See our Cookie Policy for details.

We may update this policy when our processing or legal obligations change. The date of the current version is shown above.