Last Updated: April 11, 2025

Orgcäos OÜ, operating as Orgcaos Purpose-Driven Design Studio ("Orgcaos," "we," "us," or "our"), is committed to protecting your privacy and ensuring the security of your personal data. This GDPR Privacy Policy ("Policy") explains how we collect, use, store, disclose, and protect your personal data when you visit our Website (https://orgcaos.com and https://orgcaos.ee, collectively the "Website"), submit inquiries through our contact forms, or engage our creative design services ("Services"). Our Website, hosted on Webflow, serves as a portfolio platform showcasing our branding and web design work, case studies, blog content, and client testimonials.

As a company registered in Estonia (registry code: 16321350, legal address: Vahtrepa küla, Liiva, Hiiumaa vald, Hiiu maakond, 92318, Estonia), we operate in full compliance with the General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679), the Estonian Personal Data Protection Act, and other applicable EU and Estonian laws. This Policy applies to all users ("you," "User," or "Client") accessing our Website or Services, regardless of their location, with specific protections for individuals in the European Economic Area (EEA).

By using our Website or Services, you acknowledge that you have read, understood, and agree to the practices described in this Policy. If you do not agree with this Policy, please do not use our Website or provide us with any personal data.

1. Definitions

To ensure clarity, the following terms have the meanings set forth below:

• Personal Data: Any information relating to an identified or identifiable natural person ("data subject"), as defined in Article 4(1) of the GDPR, such as names, email addresses, IP addresses, or device identifiers.
• Processing: Any operation performed on Personal Data, including collection, storage, use, disclosure, or deletion, as defined in Article 4(2) of the GDPR.
• Controller: The entity that determines the purposes and means of Processing Personal Data, in this case, Orgcäos OÜ, as defined in Article 4(7) of the GDPR.
• Processor: An entity that Processes Personal Data on behalf of the Controller, such as our Third-Party Service providers, as defined in Article 4(8) of the GDPR.
• Website: Refers to https://orgcaos.com, https://orgcaos.ee, and all associated subdomains and pages operated by Orgcäos OÜ.
• Services: Creative design services provided by Orgcäos OÜ, including branding, web design, graphic design, and multimedia design, as described at https://www.orgcaos.com/services
• Third-Party Services: External tools integrated into the Website, including Microsoft Clarity, Google Tag Manager, Google Ads, Google Search Console, Google Analytics, and Meta Pixels.

2. Our Role as Data Controller

Orgcäos OÜ acts as the Data Controller for Personal Data collected through the Website and Services, determining the purposes and means of Processing. In certain cases, we engage Third-Party Services as Data Processors to assist with analytics, marketing, or Website functionality. All Processors are carefully vetted to ensure GDPR compliance, and we enter into Data Processing Agreements (DPAs) with them, as required by Article 28 of the GDPR.

3. Personal Data We Collect

We collect and Process Personal Data in a lawful, fair, and transparent manner, in accordance with Article 5 of the GDPR. The types of Personal Data we collect depend on how you interact with our Website or Services. Below is a detailed breakdown:

3.1 Data You Provide Voluntarily

• Contact Forms: When you submit an inquiry via our contact form (https://www.orgcaos.com/contact), we collect:
  • First name
  • Email address
  • Company name or details (optional, e.g., organization, collective, or side hustle)
  • Message (e.g., project details, such as a rebrand or website design)
• Service Engagements: When you contract our Services, we may collect additional information, such as:
  • Full name
  • Billing address
  • Phone number (if provided)
  • Payment details (processed via secure third-party payment providers)
  • Project-specific information (e.g., brand preferences, design briefs)