Privacy Policy

This Privacy Policy explains how Biotik OÜ collects, uses and protects your personal data when you use this website or contact us, and the rights you have under the GDPR and UK GDPR.

Who we are

This website is operated by Biotik OÜ (“Biotik”, “we”, “us”), a company registered in Estonia (registry code 14744371, VAT EE102168154). For any privacy matter you can reach us at hi@biotik.design.

• Tallinn — Sepapaja 6, 11415, Tallinn, Estonia
• London — 3rd Floor, 86–90 Paul Street, London, EC2A 4NE, United Kingdom

For the personal data described below, Biotik OÜ is the data controller.

Information we collect

Information you give us

When you contact us — for example through our enquiry form or by email — we collect the information you choose to share, such as your name, email address, company and the contents of your message.

Information we collect automatically

Like most websites, we may collect limited technical information when you visit, such as your device and browser type, approximate location (from your IP address), pages viewed and referring source. This is used to keep the site secure and to understand, in aggregate, how it is used.

Cookies and analytics

We aim to keep cookies to a minimum. We use only cookies that are strictly necessary for the site to function, plus — where enabled — privacy-friendly analytics to measure traffic in aggregate. Non-essential cookies are only set with your consent, and you can change your choice at any time in your browser settings.

How we use your information and our legal bases

We process personal data under the EU General Data Protection Regulation (GDPR) and, for UK visitors, the UK GDPR. We use your information to:

• respond to your enquiries and provide our services — on the basis of taking steps at your request and performing a contract;
• operate, secure and improve this website — on the basis of our legitimate interests;
• send you information you have asked for — on the basis of your consent; and
• meet legal and accounting obligations — on the basis of legal obligation.

Sharing your information

We do not sell your personal data. We share it only with trusted service providers who help us run our business and website (for example email, hosting and analytics providers), acting as our processors under contract, and where required by law. Where we use such providers, they may process data on servers inside or outside the European Economic Area.

International transfers

Where personal data is transferred outside the EEA or the UK, we rely on appropriate safeguards — such as the European Commission’s Standard Contractual Clauses or an adequacy decision — to protect it.

How long we keep it

We keep personal data only for as long as we need it for the purposes above, then delete or anonymise it. Enquiry and client correspondence is typically retained for the duration of our relationship and a reasonable period afterwards to meet legal and accounting requirements.

Your rights

Under the GDPR / UK GDPR you have the right to access, correct, erase, restrict or object to the processing of your personal data, and to data portability, as well as the right to withdraw consent at any time. To exercise any of these, email hi@biotik.design.

You also have the right to complain to a supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon); in the UK, the Information Commissioner’s Office (ICO).

Security

We take reasonable technical and organisational measures to protect personal data against loss, misuse and unauthorised access. No method of transmission over the internet is completely secure, however, and we cannot guarantee absolute security.

Children

This website is not directed at children, and we do not knowingly collect personal data from anyone under 16.

Changes to this policy

We may update this policy from time to time. The date at the top shows when it was last revised; material changes will be reflected here.

Contact

Questions about this policy or your data? Email hi@biotik.design.