Privacy Policy

Last updated: February 20, 2026

DaVinci Lab OÜ ("DaVinci Lab", "we", "us", or "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect through our websites (including the Pulse Suite and Pulse 360 marketing pages), how we use it, and your rights regarding that data.

1. Data Controller

DaVinci Lab OÜ
Tallinn, Estonia
Email: Contact us

2. What Data We Collect

2.1 Contact Form Submissions

When you submit a contact form on any of our pages, we collect:

  • Full name
  • Email address
  • Company name
  • Message content
  • Whether you opted in to marketing communications

2.2 Resource Registration

When you register to download resources (guides, templates, etc.), we collect:

  • Full name
  • Work email address
  • Company name
  • Whether you opted in to marketing communications

2.3 Communication Data

When you communicate with us via email, chat, or other channels, we may store the content of those communications, including any personal data you share during the conversation, for the purpose of responding to your inquiry and improving our services.

2.4 Cookies & Technical Data

We use the following cookies and technical measures:

  • Resource access cookie — a functional, HTTP-only cookie that remembers your registration so you can download resources without re-registering. It contains no personal data (only a flag value) and expires after one year.
  • Google reCAPTCHA v3 — used on forms to prevent spam. reCAPTCHA may collect technical data (IP address, browser information) according to Google's Privacy Policy.

We do not use analytics tracking cookies or third-party advertising cookies.

3. How We Use Your Data

We process your personal data for the following purposes:

  • To respond to inquiries — when you contact us, we use your data to reply and follow up. Legal basis: legitimate interest.
  • To provide access to resources — your registration data is used to grant and maintain access to downloadable content. Legal basis: contract performance.
  • To send marketing communications — only if you explicitly opted in. You can unsubscribe at any time. Legal basis: consent.
  • To prevent abuse — reCAPTCHA scores help us filter spam and automated submissions. Legal basis: legitimate interest.

4. How We Store & Process Your Data

Form submissions are delivered to our team via Telegram messaging for rapid response. The data is stored within our internal systems and communication channels. We do not sell, rent, or share your personal data with third-party marketers.

Third-party services involved in processing:

  • Telegram — receives form submission notifications (name, email, company, message content, consent status)
  • Google reCAPTCHA — processes technical data for spam prevention
  • Vercel — hosts the website and processes requests (may have access to server logs including IP addresses)

5. Data Retention

We retain your personal data for as long as necessary to fulfill the purposes described above, or as required by law. Specifically:

  • Contact form submissions: retained for the duration of the business relationship or inquiry
  • Resource registration data: retained while your access is active (up to one year)
  • Communication records: retained for the duration of the business relationship
  • Marketing consent records: retained until you withdraw consent

6. Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — ask us to delete your personal data
  • Restriction — ask us to limit how we process your data
  • Data portability — request your data in a structured, machine-readable format
  • Objection — object to processing based on legitimate interest
  • Withdraw consent — withdraw your marketing consent at any time

To exercise any of these rights, please contact us. We will respond within 30 days.

7. Children's Privacy

Our services are not directed at individuals under the age of 16. We do not knowingly collect personal data from children.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

9. Contact & Complaints

If you have questions about this policy or wish to exercise your rights, please contact us.

You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or your local supervisory authority.

← Back to Home