Privacy

Last updated: 2 November 2026.

Who is responsible for your data?

reforge OÜ · registry code 17500505
Varjula, Orguse küla, Rapla vald, Rapla maakond, 79409, Estonia.

Privacy questions and data requests: info@reforge.ee. Company details: Estonian e-Business Register.

When you make an enquiry

The form prepares an email draft on your device. The website does not send the form contents to a server or store them. If you choose to send the email, you use your own email service; Reforge receives it in a mailbox served by Purelymail.

We use your contact details and message to respond and discuss potential work. Where you ask for steps towards a contract to which you would be a party, we rely on taking those steps at your request. For company representatives and other business enquiries, we rely on our legitimate interest in handling relevant correspondence. Security and abuse prevention rely on our legitimate interest in protecting the service.

An enquiry does not subscribe you to marketing or confirm an appointment. Please leave out passwords, health information, identity documents and confidential client material. Access is limited to authorised people handling the enquiry and service providers needed to process it.

Visiting the website

Netlify hosts the website and may process IP addresses, requested URLs, request times and browser information to deliver pages and protect the service.

Optional website analytics

Only with your consent, we send the page category, language, website name, general referral category and selected link actions to PostHog EU Cloud. We do not send full URLs, query strings, form contents, health-check answers or contact details. IP storage and location enrichment are disabled; there is no advertising tracking or session replay.

A random reference exists only in the open page’s memory. It is not a visitor account or a shared identifier across Reforge websites. Your analytics acceptance or rejection is stored in this website’s browser storage for up to 180 days. Use “Analytics preferences” in the footer to withdraw consent just as easily; this stops further collection but does not erase previously sent events. Browser Do Not Track and Global Privacy Control preferences block collection.

We use these statistics to improve the website and prepare aggregate reports. Counts represent consented events, not unique people, customers or confirmed orders. The provider plan supports up to one year of query history; this is not a promise of automatic deletion. We regularly review analytics retention and provider terms. PostHog: privacy · data processing agreement. EU hosting does not exclude international processing by the provider’s subprocessors.

External links take you to services with their own privacy notices. Linked articles, videos and booking widgets are not embedded in this website.

Providers and international processing

Netlify and Purelymail may process data outside the European Economic Area, including in the United States. Purelymail is provided by Add Rabbit LLC, whose public documentation locates its servers in the US. Netlify publishes a data processing agreement and subprocessor list. Those documents do not mean that the transfer assessment for Reforge’s particular setup is already complete.

• Netlify data processing agreement · subprocessors and security documents
• Purelymail privacy notice · server location

How long is information kept?

Enquiries that do not lead to work are kept in email for up to 12 months after the last substantive exchange and reviewed quarterly; unnecessary information is removed sooner. Information needed for a contract, dispute or legal obligation is retained separately for a justified period.

Retention is managed manually, rather than by automatic expiry. Provider security logs and backups have separate terms; Purelymail’s 30-day diagnostic-log period is not an automatic deletion period for emails.

Your rights and choices

You can request access, correction, erasure or restriction of your data, and object to processing based on legitimate interests. Where applicable, you can request data portability. The scope of these rights depends on the processing basis and the law. Contact info@reforge.ee; we may need reasonable identity verification before disclosing data.

You may also complain to the Estonian Data Protection Inspectorate or the competent supervisory authority in your country of residence.

If we add tracking or change how data is used, we will update this notice and request consent where required before that processing begins.