Privacy policy

Who we are

Onesoftware OÜ (1ne), Järvevana tee 9, Tallinn 11314, Estonia, is the controller for personal data described here. Contact:[email protected].

What we use and why

Enquiries. We use the name, email, company and message you provide, or your email in the reach-out form, to respond and discuss our services. Our basis is our legitimate interest in handling business enquiries, or taking steps towards a contract where you request this for yourself. Providing details is voluntary, but we need the required form fields to process your request.

Business outreach. We use professional contact details, roles, public business and website information, research notes and correspondence to identify relevant business opportunities and offer our services. Details come from business websites, public professional listings, directories (including Google Maps), or directly from you. Our basis is our legitimate interest in relevant business development, subject to your rights; we need consent where electronic marketing rules require it. You can ask for the source of your details and object to marketing at any time by replying or emailing us.

Security. Cloudflare Turnstile processes your IP address, browser and device signals to detect bots and protect our forms. Our basis is our legitimate interest in preventing spam and abuse. SeeCloudflare’s Turnstile privacy notice.

We also process records where necessary to meet legal obligations or pursue or defend legal claims. We do not make solely automated decisions with legal or similarly significant effects.

Analytics and cookies

We use PostHog analytics to understand visits and improve this website. It records pages and referrers, browser and device information, visitor and session identifiers, portfolio interactions, and form outcomes and errors. Form events can include your company and are linked to your visitor ID. Session recording and automatic click capture are disabled.

This website uses cookies and browser storage. PostHog uses ph_*_posthog cookies (a default rolling lifetime of 365 days), local storage (until cleared) and session storage (for the browser tab session) to recognise visitors and sessions. Non-essential analytics storage and the associated analytics run only with your consent. Use Cookie settingsin the footer to accept, reject or withdraw consent. We remember either choice in local storage for 180 days; this preference is necessary to respect your choice.

Turnstile uses security signals; an additional clearance cookie depends on Cloudflare configuration. SeeCloudflare’s noticeand PostHog’s privacy informationfor their own processing.

Providers and transfers

Onesoftware OÜ hosts this website on its own hardware. Our authorised team and providers supporting analytics, security and email can access relevant data. Form submissions are emailed to us usingMigadu-Mail GmbH. We may also disclose data to advisers or authorities where necessary for legal obligations or claims.

Migadu is based in Switzerland, which has EU adequacy recognition. Cloudflare may process data outside the EEA, including in the US; itsdata processing termsdescribe transfer safeguards, including standard contractual clauses. Contact us for information or a copy of the safeguards relevant to your data.

How long we keep data

Retention depends on the enquiry or business relationship, whether outreach remains relevant, our need to investigate security or service issues, and applicable record-keeping duties or legal claims. Analytics is retained for as long as needed to assess and improve website performance. We keep a minimal opt-out record for as long as needed to respect marketing objections.

Your rights

Where applicable, you can request access, correction, deletion, restriction or portability, and object to processing based on legitimate interests. You can object to direct marketing at any time. Where we rely on consent, you can withdraw it without affecting earlier lawful processing. Email[email protected].

You can complain to a supervisory authority where you live, work or believe an infringement occurred, including theIrish Data Protection Commissionor the Estonian Data Protection Inspectorate.