Legal

Privacy Policy

In plain English: this page explains what personal data we collect when you use our website or contact us, why we use it, who we share it with, and the rights you have. We only collect what we need to respond to you and run our website.

Last updated: 5 August 2026

1. Who We Are

Kinstart ("Kinstart," "we," "us," or "our") operates the website at kinstartdigital.com and provides IT consulting, cybersecurity, web development, and agentic AI integration services. For the personal data described in this policy, Kinstart acts as the data controller.

You can reach us about privacy matters by email at privacy@kinstartdigital.com or info@kinstartdigital.com, by phone at +372 (589) 85717, or via our contact page. We are based in Tallinn, Estonia.

2. Personal Data We Collect

We collect only the data we need for the purposes described below.

Information you give us

  • Contact form: your name, email address, and the message content you submit; optionally your phone number, company name, and the service you are interested in.
  • Free cybersecurity readiness self-check: the contact details you provide, your questionnaire answers, the generated maturity summary, and whether you explicitly request a consultation or security updates. When you request security updates, we record the consent time and form source.
  • Direct communications: if you email, call, or message us via WhatsApp, we receive the information contained in that communication.

Information collected automatically

  • Technical data: when you visit the site, our hosting provider may process standard technical information such as your IP address, browser type, device information, and pages requested, primarily in server logs used for security and reliability.
  • Browser storage: we use limited first party browser storage for essential functionality (see our Cookie Policy). We do not currently use advertising or tracking technologies across sites.

3. How and Why We Use Your Data

We use personal data to:

  • Respond to your enquiries and provide the information or consultation you request.
  • Provide and administer our services, including any engagement you enter into with us.
  • Generate the results of the free cybersecurity risk assessment based on the answers you provide.
  • Send security tips and threat intelligence updates only when you explicitly opt in. You may unsubscribe or withdraw consent at any time.
  • Operate, secure, and improve our website, and prevent spam and abuse.
  • Comply with our legal obligations.

Where EU/UK data protection law (the GDPR) applies, our legal bases for processing are typically: your consent (which you can withdraw at any time); the performance of a contract or steps taken at your request before entering into one; our legitimate interests in responding to enquiries, securing our site, and running our business; and compliance with a legal obligation.

Vercel processes website requests and standard service logs on our behalf. SendGrid processes contact-form and self-check notifications and, only when requested, manages the security-updates mailing contact. These providers process data under their own service terms and data-protection commitments.

4. Cookies and Similar Technologies

Our website uses a small amount of essential first party browser storage and may load resources from third parties. We do not currently run advertising cookies. Full details are in our Cookie Policy.

5. Analytics

We do not run website analytics or tracking by default. Our codebase includes an optional Google Analytics integration that is currently disabled and not active. If we enable analytics or any optional tracking in the future, we will update this policy and, where required, ask for your consent first.

6. International Data Transfers

Some of the providers we use to run our website may process data outside the European Economic Area. Where that happens and the GDPR applies, such transfers should be covered by an appropriate safeguard (for example, an adequacy decision or standard contractual clauses).

7. How Long We Keep Data

We keep personal data only for as long as we need it for the purpose it was collected, to maintain our business relationship with you, or to meet legal, accounting, or reporting requirements. When data is no longer needed, we delete or anonymise it.

8. Your Rights

Where EU/UK data protection law applies, you may have the right to:

  • Access the personal data we hold about you.
  • Ask us to correct inaccurate or incomplete data.
  • Ask us to delete your data ("right to erasure").
  • Restrict or object to certain processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time where we rely on consent.
  • Lodge a complaint with your local data protection supervisory authority (in Estonia, the Data Protection Inspectorate / Andmekaitse Inspektsioon).

To exercise any of these rights, contact us at privacy@kinstartdigital.com.

9. How We Protect Your Data

We use reasonable technical and organisational measures to protect personal data, including serving the website over HTTPS and limiting access to the information we receive. No website or method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

10. Children's Privacy

Our website and services are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can remove it.

11. Links to Other Websites

Our website may link to third party websites and platforms that we do not control. This policy does not apply to those sites, and we are not responsible for their content or privacy practices. Please review their policies before sharing your information.

12. Changes to This Policy

We may update this Privacy Policy from time to time as our practices, services, or legal obligations change. When we do, we will revise the "Last updated" date above and post the new version on this page.

13. Contact Us

If you have questions about this policy or how we handle your data, contact us:

See also our Cookie Policy and Terms of Service. This policy is intended to explain our website and service practices in plain language; it is not legal advice and has not been certified as fully compliant by a qualified lawyer.