Privacy Policy

Nexbit OÜ ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.

We comply with the General Data Protection Regulation (GDPR) and Estonian data protection laws. Please read this policy carefully to understand our practices regarding your personal data.

The data controller responsible for your personal data is:

When you submit a lead form or contact us, we collect:

• Email address
• Message content
• Any other information you choose to provide in your message

We automatically collect certain information when you visit our website through cookies and similar technologies:

• IP address
• Browser type and version
• Device information
• Pages visited and time spent on pages
• Referring website
• User interactions and behavior on our site
• Geographic location (country/city level)

We process your personal data for the following purposes:

• Lead Management: To respond to your inquiries and provide information about our services
• Analytics: To understand how visitors use our website and improve our services
• Marketing: To measure the effectiveness of our marketing campaigns
• Website Functionality: To remember your preferences and settings
• Security: To maintain the security and integrity of our website

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: For analytics and marketing cookies (GA4, Facebook Pixel)
• Legitimate Interests: For website functionality and security
• Contractual Necessity: When processing lead inquiries to provide requested information

We use Google Analytics 4 (GA4) to analyze website traffic and usage patterns. GA4 collects information about your visits, including pages viewed, time spent, and interactions. This data helps us improve our website and services.

For more information about how Google uses data, visit: Google Privacy Policy

We use Facebook Pixel to measure the effectiveness of our advertising campaigns and understand user behavior. The pixel tracks conversions, optimizes ads, and builds targeted audiences for future campaigns.

For more information, visit: Facebook Data Policy

You can manage your cookie preferences at any time through our cookie consent banner. You can also disable cookies through your browser settings, though this may affect website functionality.

We do not sell, trade, or rent your personal information to third parties. We only share data with:

• Service Providers: Google Analytics and Facebook, as described in section 6
• Legal Requirements: When required by law or to protect our rights

These service providers process data on our behalf and are bound by data protection agreements.

We retain your data as follows:

• Lead Form Data: Until your inquiry is resolved or for up to 2 years for potential business purposes
• Analytics Data: Controlled by Google Analytics (typically 14-50 months) and Facebook (as per their policies)
• Cookie Consent Data: Stored locally in your browser until you clear it or withdraw consent

As a data subject in the European Union, you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Restriction: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured format
• Right to Object: Object to data processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent for analytics and marketing cookies at any time

To exercise any of these rights, please contact us at info@nexbit.ee. We will respond to your request within 30 days.

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Secure server infrastructure
• Encrypted data transmission (HTTPS)
• Regular security assessments
• Access controls and authentication

Some of our service providers (Google, Facebook) may transfer and process data outside the European Economic Area (EEA). These transfers are protected by appropriate safeguards such as Standard Contractual Clauses approved by the European Commission and adequacy decisions.

Our website is not intended for children under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us immediately.

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or our data practices, please contact us: