Let’s talk

Legal

Privacy & cookies

Last updated: 23 September 2026

This policy explains how Pakoo Creative Studio (“Pakoo”, “we”, “us”) handles personal data when you visit pakoocreative.com (the “Website”) or contact us. We respect your privacy and process personal data in line with the EU General Data Protection Regulation (GDPR) and the applicable laws of the Republic of Estonia.

1. Who is responsible for your data

The data controller is Pakoo Creative Studio, Tallinn, Estonia. For any privacy question or request, write to hello@pakoocreative.com.

2. What data we collect

The Website has no contact forms, user accounts, newsletters or analytics tools. We only process personal data in the following cases:

  • When you contact us by email, phone or social media: your name, email address or phone number, company name, and anything you choose to share in your message.
  • Technical data that our hosting provider records automatically when you open the Website: IP address, date and time of the request, browser type and the page requested (server logs).

We do not collect special categories of personal data and we do not use your data for automated decision-making or profiling.

3. Why we use it and on what legal basis

  • To reply to your enquiry and prepare an offer or agreement: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
  • To provide our services under a signed agreement and to invoice for them: performance of a contract (Art. 6(1)(b)) and legal obligations such as accounting rules (Art. 6(1)(c)).
  • To keep the Website secure and working: our legitimate interest (Art. 6(1)(f)).

4. How long we keep it

We keep correspondence for as long as needed to handle your enquiry and any resulting project, and in any case no longer than three years after our last contact, unless a longer period is required by law (for example, accounting documents are kept for the period required by Estonian accounting legislation). Server logs are kept by the hosting provider for a limited period for security purposes.

5. Who we share it with

We do not sell your personal data. We share it only with service providers that help us run our business, such as our email and hosting providers, and only to the extent they need it. These providers process data on our behalf and under appropriate data protection terms. We may also disclose data if required by law.

6. Third-party content

  • YouTube videos. Videos on the Website are embedded in privacy-enhanced mode (youtube-nocookie.com). The YouTube player is loaded only after you press play; until then no data is sent to YouTube for playback. Video preview images are stored on our own server. Once you start a video, YouTube (Google Ireland Limited) may process your data and set cookies according to the Google Privacy Policy.
  • Social media links. Links to Facebook, Instagram, LinkedIn, X and YouTube are plain links. No data is sent to these networks unless you click a link and visit their site, where their own privacy policies apply.

7. International transfers

Some of our service providers (for example, email or hosting providers, and YouTube if you play a video) may process data outside the European Economic Area, for example in the United States. In such cases, transfers rely on safeguards recognised by the GDPR, such as the EU–U.S. Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

8. Cookies

The Website itself does not set any cookies and does not use analytics or advertising trackers, so we do not ask for cookie consent. Cookies may only be set by YouTube after you choose to play an embedded video (see section 6). You can block or delete cookies at any time in your browser settings.

9. Your rights

Under the GDPR you have the right to:

  • access the personal data we hold about you;
  • ask us to correct inaccurate data;
  • ask us to delete your data or restrict its processing;
  • object to processing based on our legitimate interests;
  • receive your data in a portable format;
  • lodge a complaint with a supervisory authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee), but you may also contact the authority in your own country.

To exercise your rights, email hello@pakoocreative.com. We will answer within one month.

10. Children

The Website is intended for businesses and is not directed at children under 16. We do not knowingly collect their personal data.

11. Changes to this policy

We may update this policy from time to time. The current version is always available on this page, with the date of the last update shown at the top.