WE CARE ABOUT YOUR PRIVACY

Effective from 07.2026

​

Ruut24 OÜ (reg. no. 16730568, Mustamäe tee 55-224, 10621 Tallinn, Estonia; info@ruut24.com) processes your personal data when you visit our website, send us an enquiry or are our customer.

​

What data we collect and why

​

Enquiry and order forms and emails

Name, email, phone, company and the files you send — in order to answer your enquiry and provide the service (preparing and performing the contract).

​

Invoice and payment data

Name and invoice details — for accounting (legal obligation, retained for 7 years).

​

Web statistics and marketing

We use Google Analytics to measure visits and the Meta (Facebook) marketing pixel to measure advertising performance — these start only after you have given consent in the cookie banner. In addition we use Microsoft Clarity, which measures how the site is used (including anonymised session recordings) and starts as soon as the page opens. Consent can be withdrawn at any time in the site's cookie settings or in your browser.

​

How you found us

If you have allowed these technologies (cookies and other browser storage technologies), your browser remembers the path of the first Ruut24 page measured after you gave your consent for statistics, and separately the domain name of the first external website measured after you gave your consent for marketing. If there is no valid external referring website, or your browser does not pass it on, we store only a note that it is missing. This lets us measure which of our pages and which external campaigns bring enquiries. We do not store the full web address or search terms for this purpose. These notes are kept in your browser for up to 30 days. When you send us a form, these values are added to the enquiry and kept with it for up to 90 days, after which only aggregate statistics remain. You can withdraw your consent at any time in the site's cookie settings: the note is then deleted from your browser and nothing further is collected. If you would like us to remove the source data from an enquiry you have already sent, write to info@ruut24.com — we will do so without delay.

​

Business contacts and direct marketing

We may collect business contact data (name, job title, work email, company) from companies' public websites in order to introduce our services which relate to that contact's professional duties. The legal basis is our legitimate interests. We send up to three short emails and every email offers the option to opt out of further contact — an opt-out applies permanently. Contacts who have not replied are deleted within 12 months at the latest. You have the right to object to direct marketing at any time.

​

Use of an AI assistant

To handle enquiries faster, we may use an AI service (Anthropic Claude) when processing correspondence. Your messages are used only to summarise the enquiry in our working tool; they are NOT used to train AI models, and a data processing agreement is in place with the provider.

​

Who else processes the data

We use service providers who process data on our behalf under contract: Microsoft (email, file management and web analytics), Merit Tarkvara (accounting), Wix (website, forms and chat), Google (web statistics), Meta (marketing pixel), Anthropic (AI assistant), Instantly (sending emails to business contacts). Where data is processed outside the European Union, protection is ensured by the EU standard contractual clauses. Data is not sold or shared for marketing purposes.

​

How long we keep data

Accounting documents for 7 years (law). Enquiries and quotes for up to 3 years after the last contact. Other data is deleted once it is no longer needed. Business contacts who have not responded, for up to 12 months.

​

Your rights

You have the right to access your data, request correction or erasure, restrict processing, object, and withdraw consent. Write to info@ruut24.com — we reply within 30 days at the latest. If you believe your rights have been infringed, you may contact the Estonian Data Protection Inspectorate (aki.ee) or your local data protection authority.