Privacy Policy

1. General provisions

This policy describes how the operator of investhub.ee (hereinafter "we") collects, uses and protects the personal data of site visitors and users of our paid services. Data is processed in accordance with the EU General Data Protection Regulation (GDPR) and the applicable laws of the Republic of Estonia.

By using the site and the services you accept the terms of this policy. If you do not agree with it, please do not use the site.

2. What data we collect

• Account data: name, email address, login and other details you provide when registering or subscribing.
• Payment details: payments are processed by a third-party payment provider; we do not store full card details and only receive the status, amount and date of a payment.
• Registration data: details provided when signing up for events and webinars (name, email, participation format).
• Technical data: IP address, browser and device information, cookies, site usage data and traffic-source tags (for example, an advertising campaign).

3. Purposes and legal bases of processing

• Performance of a contract: providing access to the services, processing subscriptions and registrations, service notifications (confirmations, invoices, access emails).
• Legitimate interest: keeping the site running and secure, usage analytics, improving the services, measuring advertising effectiveness.
• Consent: marketing emails and advertising cookies. Consent can be withdrawn at any time.
• Legal obligations: retaining accounting records for the periods required by law.

4. Cookies and analytics

The site uses cookies: functional (required to sign in to your account and for the site to work), analytics (help us understand how the site is used) and advertising (let us measure advertising campaigns and show relevant ads on third-party platforms).

Analytics and advertising tools are provided by third-party services and may process anonymised visit data. For some visits arriving from advertising platforms we may record interaction with site pages (navigation, scrolling, clicks) to improve the site; the contents of input fields and payment details are never recorded. You can restrict or disable cookies in your browser settings; functional cookies may still be required for your account area to work.

5. Who we share data with

We do not sell personal data. Data is shared only with processors that keep the services running, and only to the extent their function requires:

• hosting and infrastructure providers;
• payment providers, to process payments and subscriptions;
• email services, for service emails and newsletters;
• video-conferencing services, to run online events;
• analytics and advertising platforms, in anonymised or pseudonymised form;
• public authorities, where required by law.

Data processing agreements are in place with every processor. Some processors may be located outside the European Economic Area; in that case the transfer relies on the safeguards provided for by the GDPR (for example, standard contractual clauses).

6. Retention periods

Account data is kept while the account is active and for a reasonable period after it is closed. Accounting records are kept for the periods required by law. Marketing data is kept until consent is withdrawn. Technical logs and analytics data are kept for the limited period needed for the purposes they were collected for.

7. Your rights

You may at any time:

• request access to your data and a copy of it;
• ask us to correct inaccurate data;
• ask us to erase your data (the "right to be forgotten");
• restrict processing or object to it;
• receive your data in a portable format;
• withdraw consent you previously gave;
• lodge a complaint with a data protection supervisory authority; in Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon).

To exercise your rights, write to us at the address in the "Contacts" section.

8. Security

We apply technical and organisational safeguards: encrypted connections, restricted access to data and separation of permissions within the team. Nevertheless, no method of transmitting data over the internet can guarantee absolute security.

9. Changes to this policy

We may update this policy. The current version is always published on this page together with the date of the last update. We additionally announce material changes to users of the services.

10. Contacts

For questions about personal data processing: hello@investhub.ee