Privacy Policy

1. Who We Are

Aleve Business Solutions OÜ is the data controller responsible for personal data processed through this website and our business activities.

2. Personal Data We Collect

Depending on how you interact with Aleve, we may collect:

• Identity data, including your name and job title.
• Business data, including company name, website, industry and business requirements.
• Contact data, including email address, telephone number and postal address.
• Enquiry data, including messages, service interests and information you provide through forms or calls.
• Contract and transaction data relating to proposals, agreements, services, invoices and payments.
• Technical data, including IP address, browser type, device type, operating system, referring URLs and website activity.
• Marketing and communication preferences.
• Support and correspondence records.
• Any other personal data you voluntarily provide to us.

Please do not provide sensitive or special-category personal data unless it is genuinely necessary and we have specifically requested it.

3. How We Collect Personal Data

We may collect personal data:

• Directly from you when you complete a form, book a call, email, telephone or communicate with us.
• When you enter into a contract or purchase a service.
• Automatically through cookies, analytics, security logs and similar technologies.
• From business partners, professional advisers, referral sources or publicly available business information.
• From connected tools and service providers used to deliver our services, where legally permitted.

4. How We Use Personal Data

We use personal data to:

• Respond to enquiries and arrange strategy calls.
• Understand your business needs and prepare recommendations or proposals.
• Provide websites, CRM, automation, AI, marketing and related business services.
• Manage client relationships, onboarding, delivery, support and account administration.
• Process invoices, payments, accounting and tax records.
• Operate, secure, maintain and improve our website and digital systems.
• Measure website performance and understand how visitors use our website.
• Send service communications and, where permitted, marketing communications.
• Prevent fraud, misuse, security incidents and unlawful activity.
• Comply with legal, regulatory, accounting and contractual obligations.
• Establish, exercise or defend legal claims.

5. Legal Bases for Processing

We process personal data only where a lawful basis applies. Depending on the activity, this may include:

• Contract: processing necessary to take steps at your request before entering into a contract or to perform a contract.
• Legal obligation: processing required to comply with accounting, tax, corporate, regulatory or other legal duties.
• Legitimate interests: processing necessary for our legitimate business interests, including responding to business enquiries, managing customer relationships, improving services, maintaining security and protecting legal rights, provided those interests do not override your rights.
• Consent: where you have freely given consent, including for certain marketing or non-essential cookies. You may withdraw consent at any time.

6. When We Share Personal Data

We may share personal data with carefully selected recipients where necessary, including:

• Website hosting, cloud infrastructure and IT support providers.
• CRM, automation, email, communications and customer-support platforms.
• Payment processors, banks, accountants and professional advisers.
• Analytics, advertising and cookie-management providers, where consent is required and obtained.
• Developers, contractors and specialist partners involved in delivering agreed services.
• Public authorities, regulators, courts or law-enforcement bodies where required by law.
• A purchaser, investor or successor in connection with a lawful business sale, merger or restructuring.

Service providers acting as processors are expected to handle personal data only under our instructions, protect it appropriately and use it only for the agreed purpose.

7. International Data Transfers

Some service providers may process personal data outside the European Economic Area. Where this occurs, we use appropriate safeguards required by data-protection law, such as an adequacy decision, approved standard contractual clauses or another legally recognised transfer mechanism.

8. How Long We Keep Personal Data

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, accounting, tax, contractual and security requirements.

• General enquiries are normally retained only while the enquiry remains relevant and for a reasonable follow-up period.
• Client, contract, invoicing and accounting records are retained for the applicable statutory period.
• Marketing records are retained until consent is withdrawn, you unsubscribe or the data is no longer required, while limited suppression records may be kept to respect your preference.
• Technical and security records are retained for a proportionate period unless needed for investigation or legal purposes.

Retention periods may be extended where necessary to resolve a dispute, comply with law or establish, exercise or defend legal claims.

9. Data Security

We use appropriate technical and organisational measures designed to protect personal data against accidental loss, unauthorised access, alteration, disclosure or destruction. Measures may include access controls, authentication, encryption where appropriate, backups, service-provider controls and security monitoring.

No internet-based system is completely secure. While we take reasonable steps to protect information, we cannot guarantee absolute security.

10. Your Data-Protection Rights

Subject to applicable law, you may have the right to:

• Request access to your personal data.
• Request correction of inaccurate or incomplete data.
• Request deletion of personal data in certain circumstances.
• Request restriction of processing.
• Object to processing based on legitimate interests or to direct marketing.
• Request portability of data you provided to us where the legal conditions apply.
• Withdraw consent at any time without affecting earlier lawful processing.
• Request information about safeguards used for international transfers.
• Lodge a complaint with a competent data-protection supervisory authority.

We may need to verify your identity before acting on a request. We normally respond within the period required by applicable law. Requests may be refused or charged only where the law permits, including where a request is manifestly unfounded or excessive.

11. Cookies and Similar Technologies

Our website may use essential cookies required for security and functionality, together with optional analytics, preference or marketing cookies where configured. Non-essential cookies should only be used where the required consent has been obtained.

12. Marketing Communications

We may send relevant business communications where you have consented or where another lawful basis permits this. You may unsubscribe at any time by using the unsubscribe option in a message or contacting us at info@aleve-es.com.

We do not sell personal data to third parties.

13. Children’s Privacy

Our website and services are intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us so that we can review and, where appropriate, delete it.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, systems, legal requirements or business practices. The latest version will be published on this page with the revised date shown above.

15. Contact and Complaints

For privacy questions, requests or complaints, contact:

You also have the right to complain to the data-protection authority in the country where you live or work, or where you believe an infringement occurred. As Aleve Business Solutions OÜ is established in Estonia, the Estonian Data Protection Inspectorate may also be a relevant supervisory authority.

This page is intended to provide clear information about our privacy practices and should be reviewed periodically against the actual tools, cookies, CRM systems, payment providers and processing activities used by the business.