Privacy policy

Alekstra Oy (Business ID 1885374-9, Kumitehtaankatu 5, 04260 Kerava, Finland) is the data controller for personal data processed through this website, and is responsible for our European business. Our affiliate Alekstra Inc (One Liberty Plaza, 165 Broadway, 23rd Floor, New York, NY 10006) is responsible for our United States business; if you are a US resident, the US State Privacy Notice sets out the additional rights you have and how to use them. Together we are “Alekstra”, “we”. We operate from the European Union and keep personal data within the EU by default. For privacy matters, whichever entity you are dealing with, contact us at privacy@alekstra.ai.

• Information you give us. When you request an Alekstra audit we collect your first and last name, work email, company, your message, and the timestamp at which you confirmed this policy.
• Analytics and usage data. We set first-party cookies that record a visitor and session identifier, the pages you view, and the marketing campaign that referred you (UTM parameters), so we can understand how the site is used. If you are in the EU/EEA or UK, none of this happens until you accept; in the United States it runs on arrival and you can opt out. Either way, “Cookie preferences” in the footer lets you change your choice, and opting out deletes these cookies.
• Technical data. Our hosting and form processing record limited technical information (such as IP address and browser type) to keep the service secure and to prevent spam and abuse. Our hosting provider also collects cookieless, anonymised aggregate page-view statistics that cannot be linked to you.
• Email link tokens. If you arrive here from a link in an email we sent you, the link may carry an opaque token that tells us which recipient the visit came from, so we can connect your visit and any enquiry you submit to our earlier outreach. The token contains no personal data itself and is removed from your address bar on arrival.
• Cost-calculator figures, only if you send them The calculators on our service pages run entirely in your browser. Moving the sliders sends nothing. If you press the button to send your figures to us, we receive the numbers you entered and which areas the calculator highlighted, tied to the same visitor identifier as your other activity — so we can understand your estate before we speak. Nothing is sent if you have not accepted cookies, have opted out, or your browser sends a Global Privacy Control signal.

• To respond to your enquiry and for B2B outreach — under European law, our legitimate interests (GDPR Art. 6(1)(f)) in handling business contact requests, balanced against your rights. In the United States, Alekstra Inc handles your request under US state privacy law, which does not work through lawful bases.
• Analytics, usage and email-link measurement — in the EU/EEA and UK, your consent (GDPR Art. 6(1)(a) and the ePrivacy rules); nothing is set until you accept and you may withdraw at any time. In the United States, Alekstra Inc is the responsible business and US state privacy law applies rather than the GDPR — those laws do not work through lawful bases. Cookies are set when you arrive, you may opt out at any time, and we honour the Global Privacy Control signal automatically.
• Security and anti-abuse — our legitimate interest in protecting the service.

We keep enquiry and lead data only as long as necessary to respond to you and to manage any resulting business relationship, after which it is deleted or anonymised. Analytics data is retained for the period described in our cookie policy. Security logs are kept for a short period consistent with their purpose.

We use a small number of carefully selected processors to run the site — including our hosting provider (Vercel, EU region), DNS provider (AWS Route 53), and our customer-engagement/CRM platform. Each processes personal data only on our instructions and under a data-processing agreement. Where any transfer outside the EU/EEA occurs, we rely on appropriate safeguards such as Standard Contractual Clauses.

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• object to or restrict our processing;
• data portability;
• withdraw consent at any time (without affecting prior processing).

To exercise any of these rights, contact us at the address below. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto).

Questions about this policy or your data? Email privacy@alekstra.ai.