Who is responsible
Shmanmon OÜ is the controller responsible for the personal data described in this notice.
- Legal name
- Shmanmon OÜ
- Registry
- Estonian Commercial Register, code 17563670
- Address
- Sepapaja tn 6, 15551 Tallinn, Estonia
- Contact
- hello@shmanmon.com
What we collect and why
Contact inquiries
When you use our contact form, we collect your name, email address, selected service, message, the page from which you sent the inquiry, and your company name if you choose to provide it. We use this information to respond, understand your needs, and discuss a possible engagement.
Website delivery and security
Like most hosting services, our infrastructure receives technical request data such as IP address, browser information, requested page, and time of access. This is used to deliver the website, maintain reliability, prevent abuse, and troubleshoot technical problems.
Analytics and cookies
We use Plausible Analytics to understand aggregate website use, including page views, referral sources, approximate location, browser, operating system, and device type. Plausible derives location from an incoming IP address but does not store the raw IP address or full user-agent string. Its daily, site-specific visitor identifier cannot be used to recognize someone on a later day or across websites.
After Formspree confirms a successful submission, we send a Contact Inquiry conversion event to Plausible. We do not include your name, email address, company, message, or selected service in that analytics event.
Plausible does not use cookies, browser local storage, or other persistent identifiers. We do not use advertising pixels or cross-site tracking, so no cookie consent banner is shown.
Our legal bases
- Steps requested before entering a contract, when you ask us to assess or discuss a potential project.
- Our legitimate interests in answering business inquiries, measuring and improving aggregate website performance, operating a secure website, preventing abuse, and keeping appropriate business records.
- Compliance with legal obligations where records must be kept or information must be provided to an authority.
Service providers and transfers
We use a small number of providers to operate the website:
- Formspree, Inc. processes contact form submissions and delivers them to us. Formspree hosts its service in the United States and states that it relies on EU Standard Contractual Clauses for transfers as a data processor.
- Google Firebase Hosting delivers the website and processes incoming request IP addresses for security, abuse prevention, and service usage information. Google states that Hosting retains IP data for a few months and may process data on global infrastructure under its data processing terms.
- Plausible Insights OÜ, based in Estonia, provides privacy-friendly aggregate analytics as our data processor. Plausible states that website visitor data is processed and stored entirely within the European Union and is not used for advertising or profiling.
- Our email provider processes messages so that we can receive and respond to your inquiry.
We may also disclose information where required by law or where necessary to establish, exercise, or defend legal claims. We do not sell personal data.
Provider information is available in Formspree’s security statement and Firebase’s privacy documentation, as well as Plausible’s data policy.
How long we keep information
Inquiries that do not become client engagements are deleted no later than 12 months after our last exchange. If an inquiry leads to a project, relevant communications and records may be retained for the duration of the business relationship and afterward for applicable contractual, accounting, and legal record-keeping periods.
Technical hosting logs follow the provider retention described above. Aggregate analytics are retained while the site remains active in our Plausible account, subject to the retention period of our subscription. We may retain limited information longer where necessary to meet a legal obligation or resolve a dispute.
Your choices and rights
Providing information through the form is voluntary. We need a name, email address, service selection, and message to process and answer an inquiry; the company field is optional.
Depending on the circumstances, you may ask us to:
- give you access to personal data we hold about you;
- correct inaccurate or incomplete information;
- delete or restrict the use of your information;
- provide eligible information in a portable format; or
- stop processing based on our legitimate interests.
Send requests to hello@shmanmon.com. We may need to verify your identity before acting on a request. You may also lodge a complaint with the Estonian Data Protection Inspectorate or your local data protection authority.
Automated decisions and changes
We do not use the information described here for automated decision-making or profiling. We will update this notice if our website, providers, or data practices materially change and will publish the new revision date on this page.