Privacy Policy — VANTAGE//

Last updated: 22 May 2025 Doc ref: JU-PRIV-2025

This Privacy Policy explains how Jurisalou OÜ ("Jurisalou", "Company", "we", "our", or "us") collects, uses, stores, shares, and protects personal data when you access or use our website, services, communications, and related functionality (collectively, the "Services").

We are committed to protecting your privacy and processing personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the Estonian Personal Data Protection Act, and other applicable laws.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

00 / Company information

Jurisalou OÜ
Harju maakond, Tallinn, Kesklinna linnaosa, Juhkentali tn 8, 10132
Estonia
Company Registration No.: 17274121

General inquiries: support@jurisalou.com
Privacy inquiries: privacy@jurisalou.com
Legal inquiries: legal@jurisalou.com

01 / Personal data we collect

We may collect and process the following categories of personal data.

Information you provide directly

full name;
email address;
phone number;
company or organization details;
billing or payment information;
communications and inquiries;
documents or materials voluntarily submitted through the Services.

Technical and usage information

IP address;
browser type and version;
operating system;
device identifiers;
website interaction data;
pages visited;
session information;
referral URLs;
cookie and analytics data.

Information from third parties

We may receive information from:

analytics providers;
payment processors;
authentication providers;
publicly available sources;
business partners;
fraud prevention and security providers.

02 / How we use personal data

We use personal data for legitimate business and operational purposes, including:

providing and maintaining the Services;
responding to inquiries and support requests;
communicating with users;
improving website functionality and user experience;
monitoring security and preventing fraud or abuse;
complying with legal and regulatory obligations;
processing transactions and payments;
maintaining internal records and operational administration;
enforcing our Terms of Use and legal rights.

Where permitted by applicable law, we may also use personal data for:

analytics and performance optimization;
service development and testing;
marketing and promotional communications.

03 / Legal bases for processing

Under GDPR and applicable European data protection laws, we process personal data based on one or more of the following legal grounds:

your consent;
performance of a contract;
compliance with legal obligations;
legitimate interests pursued by Jurisalou;
protection against fraud, abuse, and security threats.

Where processing is based on consent, you may withdraw consent at any time without affecting the lawfulness of prior processing.

We do not sell personal data.

We may share personal data with trusted third parties where reasonably necessary for business, legal, operational, or security purposes. Recipients may include:

hosting and infrastructure providers;
analytics providers;
payment processors;
communication and customer support providers;
legal, accounting, and professional advisers;
fraud prevention and cybersecurity providers;
regulators, courts, law enforcement authorities, or governmental bodies where legally required.

All third-party service providers are expected to maintain appropriate confidentiality and security safeguards.

05 / International data transfers

Your personal data may be processed or transferred outside the European Economic Area ("EEA"). Where international transfers occur, we implement appropriate safeguards in accordance with GDPR requirements, including:

adequacy decisions approved by the European Commission;
Standard Contractual Clauses (SCCs);
additional contractual, technical, and organizational safeguards.

06 / Data retention

We retain personal data only for as long as reasonably necessary to:

provide the Services;
comply with legal obligations;
resolve disputes;
enforce agreements;
maintain legitimate business records;
ensure security and fraud prevention.

Retention periods may vary depending on:

the nature of the information;
legal and regulatory requirements;
operational necessity.

When personal data is no longer required, it is securely deleted, anonymized, or otherwise disposed of.

07 / Security measures

We implement appropriate technical and organizational measures designed to protect personal data against:

unauthorized access;
disclosure;
alteration;
misuse;
accidental loss;
destruction.

Security measures may include:

encryption;
access controls;
monitoring systems;
secure infrastructure;
internal confidentiality procedures.

However, no internet-based system or transmission method can be guaranteed to be completely secure.

08 / Cookies and similar technologies

We use cookies and similar technologies to:

operate and secure the Services;
remember preferences;
analyze usage patterns;
improve functionality and performance.

Additional information regarding cookie usage is available in our Cookie Policy.

09 / Your rights

Subject to applicable law, you may have the following rights regarding your personal data:

right of access;
right to rectification;
right to erasure ("right to be forgotten");
right to restrict processing;
right to object to processing;
right to data portability;
right to withdraw consent;
right to lodge a complaint with a supervisory authority.

To exercise your rights, please contact us at privacy@jurisalou.com. We may request verification of identity before processing certain requests.

10 / Marketing communications

Where permitted by applicable law, we may send informational, service-related, or marketing communications. You may opt out of marketing communications at any time by:

following unsubscribe instructions;
adjusting account preferences where available;
contacting us directly.

Operational or legally required communications may still be sent where necessary.

11 / Third-party websites

Our Services may contain links to third-party websites or services. We are not responsible for:

third-party privacy practices;
external website content;
third-party security measures.

Users should independently review the applicable policies of external services.

12 / Children's privacy

Our Services are not intended for individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that personal data has been collected from a child without appropriate legal basis or parental authorization where required, we will take reasonable steps to delete such information.

13 / Changes to this Privacy Policy

We may update this Privacy Policy periodically to reflect:

legal or regulatory developments;
operational changes;
security enhancements;
changes to our Services.

Updates will be published on this page together with the revised "Last updated" date. Continued use of the Services following publication of updates constitutes acknowledgment of the revised Privacy Policy.

14 / Contact information

Jurisalou OÜ
Harju maakond, Tallinn, Kesklinna linnaosa, Juhkentali tn 8, 10132
Estonia