Amberwick.← Back to home

Legal

Privacy Policy

Last updated: 14 November 2026

This policy explains what personal data we process when you visit the Amberwick Digital website or get in touch with us, why we do it, and what rights you have. We keep it short because we collect very little.

1. Who we are

Amberwick Digital is a brand of Riddle OÜ, the controller of your personal data.

2. What we collect

When you visit the website

Our hosting provider automatically receives technical data that every browser sends, such as your IP address, browser type, the page requested and the time of the request. This is needed to deliver the website and keep it secure. We do not use this data to identify you or build a profile.

When you email us

If you contact us, we receive your name, email address and whatever you choose to share, for example details about your channel, audience or business.

We do not use contact forms, newsletters, advertising, analytics or tracking tools on this website.

3. Cookies

This website does not set any cookies and does not track you across sites. Because of that, we do not show a cookie banner. If this changes, we will update this policy and ask for your consent where required.

4. Why we use your data and on what legal basis

  • Running and securing the website (server logs): our legitimate interest in providing a working, secure website (Art. 6(1)(f) GDPR).
  • Replying to your message and discussing a possible partnership: taking steps at your request before entering into a contract (Art. 6(1)(b) GDPR), or our legitimate interest in answering enquiries (Art. 6(1)(f) GDPR).

We do not sell your data and do not use it for automated decision-making or profiling.

5. Who processes your data for us

We use a small number of trusted service providers:

  • Vercel Inc. (USA) hosts the website and processes server logs on our behalf.
  • Our email provider stores the messages you send us.

Some providers may process data outside the European Economic Area. Where they do, the transfer is protected by an adequacy decision (such as the EU–U.S. Data Privacy Framework) or by the European Commission's Standard Contractual Clauses.

6. How long we keep it

  • Server logs are kept only for a short period by our hosting provider and then deleted automatically.
  • Emails are kept for as long as needed to handle your enquiry. If we do not start working together, we delete them within 24 months of our last contact. If we do, we keep correspondence for as long as the partnership lasts and as required by accounting and other laws.

7. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • have inaccurate data corrected;
  • have your data deleted;
  • restrict or object to our processing;
  • receive your data in a portable format.

To use any of these rights, email martin@amberwickdigital.com. We will reply within one month.

You can also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee, or with the data protection authority in the country where you live.

8. Changes to this policy

If we change how we handle personal data, we will update this page and the date at the top.