Legal

Privacy Policy

Last updated: August 11, 2026

1. Who We Are

WeAreFabbrik OÜ ("we", "us", "our") is a software development company registered in Estonia.

2. What Data We Collect

We collect the following personal data when you interact with our website:

Contact Form

When you submit our contact form, we collect:

  • Name
  • Email address
  • Subject of inquiry
  • Project budget range
  • Project timeline
  • Message content

CRA Audit Brief Request

When you request the CRA audit brief, we collect your email address and, optionally, your name, company, and role. These details are stored in our CRM (Attio); the brief itself is delivered via the email service Resend. We send marketing email (CRA updates) only if you explicitly consent via the separate, unchecked checkbox — and you can withdraw that consent at any time.

Scheduling

We use Calendly for call booking. When you book a call, Calendly processes the details you enter under its own privacy policy.

Voice Widget

Some pages embed a conversational widget by ElevenLabs. It loads only after your first interaction with the page. If you talk to the widget, ElevenLabs processes your input under its own privacy policy.

Analytics

With your consent, we use Google Analytics to collect anonymized usage data such as pages visited, time on site, and general location (country level). This data is collected via cookies and is used solely to understand how visitors use our website so we can improve it.

Cookies

We use the following cookies:

  • Essential: Cookie consent preference (stored in your browser's local storage)
  • Analytics (optional): Google Analytics cookies (_ga, _gid) — only set if you accept cookies

3. How We Use Your Data

We use the data we collect for the following purposes:

  • Contact form and brief requests: To respond to your inquiry, provide project estimates, and communicate about potential engagements
  • Analytics data: To understand website usage patterns and improve our site
  • CRA updates: Only with your explicit consent

4. Legal Basis for Processing (GDPR)

We process your personal data based on:

  • Consent (Art. 6(1)(a)): For analytics cookies and CRA updates
  • Pre-contractual steps (Art. 6(1)(b)): For processing contact form and brief requests
  • Legitimate interest (Art. 6(1)(f)): For site security, operation, and spam prevention

5. Data Sharing

We do not sell your personal data. We share data only with the following third-party services that are necessary to operate our website:

  • Vercel: Website hosting platform
  • Resend: Email delivery service used to process contact form submissions and brief requests
  • Attio: CRM used to store brief requests
  • Google Analytics: Website analytics (only with your consent)
  • Calendly: Call scheduling
  • ElevenLabs: Voice widget (only if you use it)

All third-party services are bound by their own privacy policies and data processing agreements.

6. Data Retention

Contact form data is retained for as long as necessary to respond to your inquiry and for any subsequent business relationship. Analytics data is retained according to Google Analytics' default retention settings. You can request deletion of your data at any time by contacting us.

7. Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

  • Access: Request a copy of the personal data we hold about you
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your personal data
  • Restriction: Request restriction of processing
  • Portability: Request your data in a portable format
  • Objection: Object to processing based on legitimate interest
  • Withdraw consent: Withdraw your consent for analytics cookies at any time by clearing your browser's local storage or cookies

To exercise any of these rights, contact us at info@wearefabbrik.com. We will respond within 30 days. You also have the right to lodge a complaint with a data protection supervisory authority — in Estonia, the Andmekaitse Inspektsioon (aki.ee); you may also contact the authority of your country of residence.

8. Data Security

We implement appropriate technical and organizational measures to protect your personal data. Our website is served over HTTPS, and we use trusted third-party services for data processing.

9. International Transfers

Your data may be processed by third-party services located outside the EEA. Where applicable, these transfers are safeguarded by Standard Contractual Clauses or adequacy decisions.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

11. Contact

If you have questions about this Privacy Policy or your personal data, contact us at:

← Back to Home