Privacy Policy

1. Introduction

Barefoot Performance Marketing OÜ ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal data when you visit our website or use our services.

2. Data Controller

The data controller responsible for your personal data is:

Barefoot Performance Marketing OÜ
Tallinn, Estonia
Email: [email protected]

3. Data We Collect

We may collect the following types of personal data:

• Contact information: Name, email address, company name, phone number when you contact us or fill out forms
• Usage data: Information about how you use our website, collected via analytics tools
• Technical data: IP address, browser type, device information

4. Contact and Lead Forms

When you submit a form on our website (contact form, checklist download, free ads check), we process:

• Your details: Company or website, business email address, your message and, optionally, your budget range
• Campaign parameters from the page URL (for example utm_source, utm_campaign), so we know which ad your request came from
• Technical data: IP address, browser identifier (user agent) and timestamp, to protect against abuse and spam

Your details are stored in our form database with the hosting provider Supabase and delivered to us via the email provider Resend. Both providers process the data on our behalf; this may involve processing outside the EU. The legal basis is the handling of your request (Art. 6(1)(b) GDPR) and our legitimate interest in preventing abuse (Art. 6(1)(f) GDPR). We use your details only to handle your request and delete them once they are no longer needed for that purpose.

5. How We Use Your Data

We use your personal data for the following purposes:

• To respond to your inquiries and provide our services
• To send you information about our services (with your consent)
• To improve our website and services
• To comply with legal obligations

6. Legal Basis for Processing

We process your personal data based on:

• Consent: When you opt-in to receive communications
• Contract: When necessary to provide services you've requested
• Legitimate interest: For website analytics and security
• Legal obligation: When required by law

7. Data Sharing

We do not sell your personal data. We may share data with:

• Service providers who help us operate our business (e.g., email providers, analytics services)
• Legal authorities when required by law

8. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or as required by law.

9. Your Rights

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request erasure of your data
• Restrict processing of your data
• Data portability
• Object to processing
• Withdraw consent at any time

To exercise these rights, contact us at [email protected].

10. Cookies

Our website uses cookies and similar technologies. We use:

• Essential cookies: Required for the website to function
• Analytics cookies: To understand how visitors use our site (with consent)

You can manage cookie preferences through your browser settings.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Email: [email protected]