Privacy Policy

When you start a free trial we collect your full name, business email address, company name, and country. Phone number and commodities of interest are optional. We use this data to configure your indicators and deliver the service. The lawful basis is performance of a contract (Article 6(1)(b) GDPR). You are initiating a service and we need these details to provide it.

When you send us a message we collect your full name, email address, inquiry category, and message content. We use this to respond to your inquiry. The lawful basis is legitimate interests (Article 6(1)(f) GDPR). We have a legitimate interest in responding to business inquiries directed to us.

If you tick the optional marketing checkbox on the Contact form, we use your name and email address to send you market reports, offers, and news. The lawful basis is consent (Article 6(1)(a) GDPR). The checkbox is unticked by default. You can withdraw consent at any time by clicking unsubscribe in any email.

If you accept marketing cookies, our advertising pixels collect pages visited, events triggered, approximate location, device type, and (where you have consented) hashed email for custom audience matching. The lawful basis is consent (Article 6(1)(a) GDPR). These pixels are only activated after you accept marketing cookies via our cookie banner.

If you accept analytics cookies, Google Analytics collects anonymised usage data including pages visited, session duration, approximate location at country and city level, and device type. The lawful basis is consent (Article 6(1)(a) GDPR). Analytics tracking is only activated after you give consent via our cookie banner.

These cookies are required for the Cookiebot consent banner to function. They remember your cookie preferences. No consent is needed for these.

Google Analytics 4, operating under Consent Mode v2. Only activated if you accept analytics cookies. Collects anonymised data on pages visited, session duration, and approximate location. Requires your consent.

Meta Pixel (Facebook and Instagram Ads), Google Ads conversion tag, and LinkedIn Insight Tag. Only activated if you accept marketing cookies. Used for conversion measurement, ad performance reporting, and building lookalike or retargeting audiences on those platforms. Managed via Cookiebot Consent Mode v2 (ad_storage signal). Requires your consent.

To manage or withdraw your cookie consent, click “Cookie settings” in the footer of any page. You may also manage cookies directly through your browser settings at any time.

Website hosting. GoDaddy hosts the SpotPriceDesk website and processes server logs and form submission data that passes through their infrastructure. Based in the USA; transfers protected by Standard Contractual Clauses (SCCs).

Google Analytics 4 processes anonymised website usage data when you consent to analytics cookies. The Google Ads conversion tag processes advertising performance data when you consent to marketing cookies. IP anonymisation is enabled. Based in the USA; transfers protected by SCCs and the EU–US Data Privacy Framework.

Cookie consent management. Cookiebot stores your cookie preferences and manages the Consent Mode v2 signals that gate analytics and advertising cookies. Based in Denmark, EU — no international transfer required.

Advertising and WhatsApp. The Meta Pixel processes website visitor data for Facebook and Instagram ad conversion measurement and audience targeting, when you consent to marketing cookies. Meta also processes phone numbers and names for subscribers who have selected the WhatsApp Business delivery add-on. Based in the USA; transfers protected by SCCs.

LinkedIn Ads. The LinkedIn Insight Tag measures ad conversions and supports audience targeting for LinkedIn Ads campaigns, when you consent to marketing cookies. LinkedIn’s EU entity is based in Dublin, Ireland — no international transfer is required.

For the duration of the customer relationship, plus 6 months after cancellation or the end of the last paid period.

12 months from the date of the inquiry, or until you ask us to delete it, whichever comes first.

Until you unsubscribe, or 24 months of inactivity (no opens or clicks), whichever comes first.

7 years from the invoice date, as required by Estonian accounting law (Raamatupidamise seadus).

14 months, the default Google Analytics retention setting. Data is anonymised and aggregated.

12 months from the date of your consent, after which the cookie banner will reappear to refresh your preferences.

Request a copy of the personal data we hold about you.

Ask us to correct inaccurate or incomplete data.

Ask us to delete your data. Note: we may need to retain certain records for legal or contractual reasons (see Section 7).

Ask us to pause processing your data in certain circumstances, for example while a dispute is being resolved.

Receive your data in a structured, machine-readable format and transfer it to another provider.

Object to processing based on legitimate interests. We will stop unless we can demonstrate compelling grounds that override your interests.

Where processing is based on consent (marketing emails, analytics cookies, or advertising cookies) you may withdraw at any time. Withdrawal does not affect any processing carried out before withdrawal.

You have the right to complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) at www.aki.ee, or to the supervisory authority in your country of residence.