Skip to content

Privacy Policy

Last Updated: September 15, 2026

1. Introduction

This Privacy Policy explains how Artelogic OÜ (trading as unicrew) (“we”, “us”, “our”) collects, uses, and protects your personal data. We are committed to safeguarding your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and the EU General Data Protection Regulation (EU GDPR).

This policy applies to visitors to our website and clients who use our services.

2. Data Controller

Artelogic OÜ (trading as unicrew)
Registry code: 16127919
Registered address: Harju maakond, Tallinn, Kesklinna linnaosa, Narva mnt 13, 10151, Estonia
Email: info@unicrew.com

3. Information We Collect

We collect personal data to provide our services and improve our website. This includes:

  • Information you give us: When you submit inquiries via our contact form or email us, we collect your full name, email address, phone number, location, and the content of your communication.
  • Business Cooperation Data: Information regarding products, services, or technical specifications necessary for our mutual collaboration or contracts.
  • Technical Data (Automatically Collected): When you visit our website, we automatically collect technical information, including your IP address, browser type and version, operating system, visit duration, pages visited, and the source/medium of your visit.
  • Approximate Location (Automatically Derived): Our hosting provider derives an approximate city, region and country from your IP address at the moment you connect. Where you send us an enquiry, that approximate location and your device's time zone are included in the notification our team receives, so that we can route your enquiry to the right people and contact you at a reasonable hour. It is an estimate from your network connection, not a precise location, and we do not use any device location service.
  • Visit Context Sent With an Enquiry (only with your analytics consent): If you have accepted analytics cookies, your browser keeps a list of the pages you viewed during that browsing session, along with the page you arrived on and the website or campaign you arrived from. That list is held only in your browser, only for that session, and is discarded when you close the tab. It is sent to us only if you choose to submit a form, and only as part of that enquiry, so that whoever replies can see what you were reading. If you decline analytics cookies, or later withdraw that consent, this list is never created and any existing one is erased.

4. Legal Basis for Processing

Under the UK and EU GDPR, we must have a legal basis to process your data. We rely on the following:

  • Legitimate interests (Art. 6(1)(f)): responding to an enquiry you send us, including the approximate location and time zone described in section 3, and keeping a record of that correspondence. Our interest is in answering business enquiries competently; we have weighed it against your interests and the data involved is what a reply requires. You can object at any time under section 9.
  • Legitimate interests (Art. 6(1)(f)): detecting and investigating abuse of our forms, which is why the IP address and browser user agent are recorded with a submission and erased after 90 days (section 8).
  • Consent (Art. 6(1)(a)): analytics and marketing cookies, and the visit context described in section 3 that is sent with an enquiry only where analytics consent was given. You can withdraw consent at any time through the "Cookie settings" control in our footer, and withdrawal is as easy as giving it.
  • Performance of a contract (Art. 6(1)(b)): delivering services you or your organisation have engaged us for, and the correspondence and Business Cooperation Data that go with it.
  • Legal obligation (Art. 6(1)(c)): accounting and tax records, and the consent records described in section 5.4, which Art. 7(1) requires us to be able to produce.

5. Cookies and Analytics

Our website uses cookies to enhance user experience and analyze traffic.

5.1 Cookie Consent

Strictly necessary cookies (required for the site to work) are set based on our legitimate interest. Marketing and Analytical cookies are only set if you explicitly consent via our Cookie Banner.

5.2 Google Analytics

We use Google Analytics, a service by Google, Inc., to analyze website usage.

  • Data Processed: IP address (anonymized), usage metrics, and session data.
  • Location: Data is transmitted to and stored by Google on servers in the United States.
  • Safeguards: We have entered into a Data Processing Agreement with Google, which relies on the EU-US Data Privacy Framework and Standard Contractual Clauses (SCCs) to ensure your data remains protected when transferred to the US.

5.3 HubSpot

We use HubSpot for online marketing, email automation, and contact management.

  • Data Processed: Contact form submissions, email engagement (open rates/clicks), and website activity.
  • Location: Data is stored on HubSpot servers, primarily in the United States.
  • Safeguards: Transfers to HubSpot are protected by Standard Contractual Clauses (SCCs) and their participation in the Data Privacy Framework.

5.4 Record of Your Cookie Choice

When you accept or reject cookies, and whenever you change that choice later, we keep a record of the decision. Data protection law requires us to be able to show that consent was given, refused or withdrawn, and a setting kept only in your own browser would not show it.

  • Data Processed: a random identifier held in your browser, the date and time of the decision, whether you accepted, rejected or withdrew, which cookie categories it covered, the version of the cookie banner and of this policy at the time, whether you decided in the banner or through the "Cookie settings" link in our footer, and the address of the page you were on (without any query string).
  • Not Processed: we do not store your IP address, your browser user agent, your country, or any name or email address with this record, and we do not connect it to any enquiry you send us. The identifier tells one browser from another; it does not identify you. Clearing your browser storage erases it, and you are simply asked again.
  • Legal Basis: our legal obligation to be able to demonstrate consent (Article 6(1)(c) of the UK and EU GDPR, read with Article 7(1)). The record is kept whether you accept or reject, because a refusal matters as much as a consent.
  • Location: our own website database, run for us by Cloudflare. It is not shared with Google, HubSpot or any other third party.

Your choice lasts 12 months, and then we ask again. We also ask again if we change the banner or this policy in a way that alters what you agreed to, because a consent given against different wording does not cover new wording.

6. Recipients / processors

We may share personal data with service providers who help us operate our website and business (hosting/CDN, website maintenance, email and communications tools, analytics providers, CRM/marketing tools), under contracts requiring appropriate security and confidentiality.

7. International Data Transfers

Because we use service providers like Google and HubSpot, your personal data may be transferred to, and stored at destinations outside the UK and the European Economic Area (EEA), specifically the United States.

We rely on the EU-U.S. Data Privacy Framework (where applicable) and/or Standard Contractual Clauses / UK IDTA for transfers to the US.

8. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for.

  • Client Data (Financial/Contracts): Retained for 7 years after the end of the financial year to comply with the Estonian Accounting Act and relevant UK tax standards.
  • Marketing Data: Retained until you withdraw consent or unsubscribe.
  • Contact Inquiries: Retained for 5 years to reference past communications for business continuity.
  • Form Security Data (the IP address and browser user agent recorded with a form submission): Retained for 90 days for the sole purpose of detecting and investigating form abuse, then erased. The enquiry itself is kept under the Contact Inquiries period above.
  • Consent Records (the record of your cookie choice, section 5.4): Retained for 3 years from the decision, then erased. That is longer than the 12-month life of the choice so we can still evidence a consent that was in force.
  • Approximate Location and Visit Context (section 3): These appear in the notification email sent to our team when you submit an enquiry. We do not store them in our enquiry database, so they are retained only for as long as that email is, under the Contact Inquiries period above. The browser-held session list is erased when you close the tab, and immediately if you withdraw analytics consent.

9. Your Rights

Under the UK and EU GDPR, you have the following rights regarding your data:

Right to Access: Request a copy of the personal data we hold about you.

Right to Rectification: Request corrections to inaccurate or incomplete data.

Right to Erasure (“Right to be Forgotten”): Request deletion of your data where there is no good reason for us to continue processing it.

Right to Restrict Processing: Ask us to suspend the processing of your data.

Right to Object: Object to processing based on legitimate interests or direct marketing.

Right to Data Portability: Request transfer of your data to you or a third party.

Right to Withdraw Consent: Where we rely on consent, you may withdraw it at any time.

Right to Lodge a Complaint If you believe we have violated your privacy rights, you have the right to lodge a complaint with a supervisory authority:

  • n Estonia: The Data Protection Inspectorate (AKI) (www.aki.ee).
  • In the UK: Information Commissioner’s Office (ICO) (www.ico.org.uk).
  • In the EU: Your local Data Protection Authority.

10. Children’s Privacy

We do not knowingly collect data from children under the age of 13. If we discover such data has been collected without parental consent, we will delete it immediately.

11. Changes to This Policy

We may update this policy periodically. Any changes will be posted on this page with an updated revision date.

12. Contact Us

Address: Artelogic OÜ, Tallinn, Narva mnt 13, 10151, Estonia

Email: info@unicrew.com

Address: Artelogic OÜ, Tallinn, Narva mnt 13, 10151, Estonia