Privacy policy
We explain what personal data we collect, why and how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
This content may be updated before public launch.
1. Data controller
The data controller is SMALL BIG HOUSE OÜ, registry code 17503685, VAT EE102985146, address: Ida-Viru maakond, Jõhvi vald, Jõhvi küla, Kaasiku tn 34, 41541, Estonia. Contact for personal-data matters: info@sbhouse.ee, phone +372 5823 0772.
2. What data we collect
We collect only the data you provide yourself in the request form or in correspondence: • name; • contact details (email and/or phone); • the content of your message and the model/package of interest. In addition, our hosting automatically writes to a technical server log: IP address, browser identifier (user-agent), request time and the address visited. This is used for security and stability and is retained for up to 30 days.
3. Legal basis for processing
We process your data on the following grounds: • GDPR art. 6(1)(b) — pre-contractual steps taken at your request (replying to your enquiry and preparing an offer); • GDPR art. 6(1)(f) — our legitimate interest in communicating with a potential client and keeping the site secure; • GDPR art. 6(1)(c) — legal obligation once a contract is signed (accounting and tax).
5. Retention period
• Enquiries are kept for 12 months from the last contact if no contract is signed. • Once a contract is signed, related documents are kept for 7 years under the Estonian Accounting Act (RaPS § 12). • Technical server logs: up to 30 days. You may request earlier deletion at any time, unless this conflicts with a statutory retention obligation.
6. Your rights
Under GDPR you have the right to: • access your data and receive a copy; • request correction of inaccurate data; • request erasure (the right to be forgotten); • restrict processing or object to it; • withdraw previously given consent; • receive your data in a portable format (data portability). To exercise these rights, contact info@sbhouse.ee. We respond within 30 days.
7. Right to lodge a complaint
If you believe that the processing of your personal data infringes your rights, you may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon): Tatari 39, 10134 Tallinn, info@aki.ee, www.aki.ee.
8. Data security
Data is transmitted between the site and the server over HTTPS/TLS encryption. Access to enquiries is limited to staff who need it for their duties and is password-protected. We apply data minimisation — we collect only what is needed to respond to your enquiry.
10. Changes to this policy
We may update this policy from time to time to reflect the law and our actual practices. Material changes will be communicated through the site. Last updated: 26 June 2026.
Questions
For questions about privacy, terms or your data, please contact us via the contact form.