Skip to content
Akende Pesu

Privacy policy

Effective from 6 October 2026.

This policy explains what personal data we receive through akende-pesu.ee, why and on what legal basis we use it, who we share it with, how long we keep it and what rights you have.

Who processes your data

The controller is KoristusPro OÜ (registry code 16531432), Estonia. For any questions about personal data, write to [email protected] or call +372 5503 777.

What data we receive

  • Your request. Name and phone number (required) and, if you choose, e-mail, the address of the property, the selected service, preferred date, a comment and up to 5 photos. We downscale photos and strip technical data from them (including where they were taken); only our staff can see them. With the request we also store the site language, the page it was sent from, advertising tags (UTM) if you came from an ad, and the time and version of your consent.

  • Spam protection. To limit the number of requests from one address, we store an irreversible hash of your IP address instead of the address itself.

  • Technical data. When you open the site, your browser sends your IP address, browser type and the requested address. Our hosting provider and Cloudflare process them to deliver pages and protect the site from attacks.

  • Cookies and analytics — only with your consent, see below.

We do not ask for or process special categories of data (such as health or beliefs) — please do not include them in the comment.

Purposes and legal bases

  • Responding to your request, quoting a price, agreeing on a time and doing the work — steps taken at your request before entering into a contract and performance of the contract (GDPR Art. 6(1)(b)). By sending the form you also confirm your consent to the processing of your data to respond to the request.

  • E-mails about your request (confirmation, "in progress", "done") — if you gave your e-mail; the same basis. We do not send marketing e-mails.

  • Protecting the site from spam and abuse — our legitimate interest (Art. 6(1)(f)).

  • Analytics and ad measurement — your consent (Art. 6(1)(a)), which you can withdraw at any time.

  • Accounting — if a contract is concluded, we keep invoice data as required by the Accounting Act (Art. 6(1)(c)).

Who receives the data

We never sell personal data. Only our staff who need the data to handle your request, and service providers processing it on our behalf, have access:

  • the hosting provider whose server runs the site and the database;

  • Cloudflare — site delivery and protection against attacks;

  • Telegram — a notification about a new request is sent to our team's work chat;

  • an e-mail service (e.g. SMTP2GO) — sending e-mails about your request;

  • Google (Google Analytics, Google Tag Manager), Microsoft (Clarity) and Meta (Meta Pixel) — only if you have allowed analytics or marketing cookies;

  • Google Maps — the map on the Contact page.

We disclose data to public authorities only when required by law.

Transfers outside the EU

Some providers (Cloudflare, Google, Microsoft, Meta, Telegram, SMTP2GO) may process data outside the European Economic Area. Such transfers are based on a European Commission adequacy decision (including the EU–US Data Privacy Framework) or on the EU standard contractual clauses.

How long we keep the data

  • Requests — 12 months, after which they are anonymised automatically: name, phone, e-mail, address, comment and photos are deleted, while the date, service and language remain for statistics. Earlier at your request.

  • If you are a regular customer, we may keep your contact details longer, for as long as we continue working with you. You can ask us to delete them at any time.

  • Contract and invoice data — 7 years, as required by the Accounting Act.

  • The cookie that stores your cookie choice — 6 months; analytics cookie lifetimes are listed below.

Cookies

Necessary (always on):

  • aknapesu_consent — remembers your cookie choice, 6 months;

  • __cf_bm — may be set by Cloudflare to protect the site from bots, up to 30 minutes.

Analytics (with your consent): Google Analytics (_ga, _ga_*, up to 2 years), Microsoft Clarity (_clck — 1 year, _clsk — 1 day).

Marketing (with your consent): Meta Pixel (_fbp, 3 months).

Tracking scripts are not loaded before you consent. You can change your choice at any time via the "Cookie settings" link at the bottom of the page; if you decline, we delete the analytics cookies.

The Google map on the Contact page is loaded from Google's servers: Google receives your IP address and may set its own cookies (see Google's privacy policy).

Your rights

You have the right to:

  • know what data we hold about you and get a copy of it;

  • have inaccurate data corrected;

  • request erasure of your data or restriction of its processing;

  • object to processing based on our legitimate interest;

  • receive your data in a machine-readable format (data portability);

  • withdraw your consent at any time — this does not affect processing before the withdrawal.

Write to [email protected] — we will reply within one month. We may ask you to confirm your identity so that your data does not end up with someone else.

If you believe we are violating your rights, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, [email protected], www.aki.ee).

Security

The site works only over HTTPS. Access to requests is limited to a small number of staff, the admin login is protected by two-factor authentication and secret keys are stored encrypted.

Changes

We may update this policy, for example when we start using new services. The current version is always on this page, with its date at the top.