Privacy Policy

    Your privacy matters. Learn how we collect, use, and protect your data.

    Last updated: December 2024

    Data Controller

    Meaningful Governance Advisory OÜ ("MGA", "we", "us") is the data controller for personal data processed through this website.

    What Data We Collect

    Contact Form Submissions

    When you submit our contact form, we collect:

    • Name and job title
    • Email address and phone number (optional)
    • Organization name and type
    • Geographic region
    • Your message and areas of interest

    Purpose: To respond to your inquiry and provide relevant information about our services.

    Legal Basis: Legitimate interest in responding to business inquiries (GDPR Art. 6(1)(f)).

    Download Forms

    When you download resources, we may collect your name and email through ActiveCampaign forms. This data is processed by ActiveCampaign under their privacy policy.

    Cookie Consent Records

    We store records of your cookie preferences to demonstrate GDPR compliance.

    Cookies & Tracking

    Essential Cookies

    Required for the website to function. Includes session management and sidebar state preferences.

    Marketing Cookies (Consent Required)

    ActiveCampaign Site Tracking: Tracks page visits for marketing automation. Only loaded with your consent.

    Functional Cookies (Consent Required)

    Google reCAPTCHA: Protects forms from spam. Only loaded on download pages with your consent.

    You can manage your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer.

    Your GDPR Rights

    Under the GDPR, you have the right to:

    • Access: Request a copy of your personal data
    • Rectification: Request correction of inaccurate data
    • Erasure: Request deletion of your data ("right to be forgotten")
    • Restrict Processing: Request we limit how we use your data
    • Data Portability: Receive your data in a machine-readable format
    • Object: Object to processing based on legitimate interests
    • Withdraw Consent: Withdraw consent at any time for consent-based processing

    Exercise Your Rights

    Submit a data access, export, or deletion request through our secure form:

    Data Retention

    • Contact submissions: Retained for 3 years or until you request deletion
    • Consent records: Retained for 5 years to demonstrate GDPR compliance
    • Privacy request logs: Retained for 3 years for compliance documentation

    Third-Party Services

    • Supabase: Database and authentication services (EU data processing)
    • ActiveCampaign: Email marketing and site tracking (with consent).Privacy Policy
    • Resend: Transactional email delivery.Privacy Policy
    • Google reCAPTCHA: Form protection (with consent).Privacy Policy

    Contact Us

    For privacy-related inquiries or to exercise your rights:

    You also have the right to lodge a complaint with a supervisory authority in your country of residence.

    We value your privacy

    We use cookies to enhance your browsing experience and analyze site traffic. By clicking "Accept All", you consent to our use of cookies.Read our Privacy Policy