Privacy
Last updated: 15 October 2026
This notice explains what happens to personal data when you use this website or make an enquiry. It is written to be read rather than to be survived, and it is short because very little data is collected.
Who is responsible
BMDA OÜ, registry code 17035793, Hobujaama 4, Tallinn 10151, Estonia. Contact: privacy@bmdadvisory.com. Under the General Data Protection Regulation this entity is the data controller.
What is collected
- Enquiries. If you use the contact form: your name, email address, and optionally your company and telephone number, together with whatever you write in the two questions.
- Email and telephone. If you contact me directly, whatever that message contains.
- Server logs. The hosting provider records requests, including IP address and browser type, for security and reliability.
There is no analytics, no advertising and no tracking on this site. No cookies are set. Typefaces are served from this domain rather than from a third party, so visiting the site makes no request to anyone else.
Why, and on what legal basis
- To answer your enquiry and, where relevant, to take steps before entering into a contract. Article 6(1)(b) GDPR, and legitimate interests under Article 6(1)(f) where no contract follows.
- To keep the site available and secure. Legitimate interests, Article 6(1)(f).
Please do not send confidential or commercially sensitive material through the form. Send it once we have spoken and agreed how.
How long it is kept
Enquiries that do not lead to work are deleted within 12 months. Where an engagement follows, records are kept for the period required by Estonian accounting and tax law, currently seven years. Server logs are retained by the hosting provider for a short period, typically no more than 30 days.
Who else processes it
- Netlify, Inc. — website hosting and contact form submissions. Based in the United States; transfers are covered by the European Commission’s standard contractual clauses.
- Microsoft 365 (Microsoft Ireland Operations Limited) — email correspondence, including anything you send as an attachment.
Data is not sold, rented, or shared for marketing. Nothing is passed to anyone else except where the law requires it.
Your rights
You may request access to your data, correction of it, erasure of it, restriction of its processing, a copy of it in portable form, and you may object to processing based on legitimate interests. Write to privacy@bmdadvisory.com and you will have a reply within one month.
If you are not satisfied with the response you may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee, or to the supervisory authority where you live.
Changes
If this notice changes, the date at the top changes with it.