Privacy Policy
Last updated: 22 April 2026
This Privacy Policy explains how Chamelio OÜ, trading as TransformWebsites, collects, uses, and protects personal data when you visit our website at transformwebsites.com or engage our services. We comply with the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.
1. Data Controller
The data controller responsible for your personal data is:
- Chamelio OÜ
- Estonian Limited Company (registry code 17103572)
- EU VAT EE102795462
- Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia
- Email: hello@transformwebsites.com
2. Personal Data We Collect
We collect personal data only where necessary, in the following situations:
a. When you visit our website
- Technical data: IP address, browser type and version, device information, time-zone setting, operating system, and pages visited
- Usage data: how you interact with our pages, scroll depth, clicks, and referring URL
- Cookies and similar technologies (see our Cookie Policy)
b. When you book a discovery call or request a free preview
- Name, email address, business name
- Website URL and information you choose to share about your business
- Calendar availability data (when booking via our scheduling tool)
c. When you become a Client
- Billing details: legal name, billing address, VAT number where applicable, bank or card information processed by our payment provider
- Project content you supply: copy, brand assets, login credentials, customer data shared for migration purposes
- Correspondence with us
3. Why We Process Your Data and Legal Bases
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Operating the website and providing requested information | Legitimate interests (Art. 6(1)(f)) |
| Responding to enquiries and providing the Services | Performance of a contract (Art. 6(1)(b)) |
| Issuing invoices, accounting and tax obligations | Legal obligation (Art. 6(1)(c)) |
| Analytics and improving the website | Consent (Art. 6(1)(a)) where required, otherwise legitimate interests |
| Marketing emails to existing clients about similar services | Legitimate interests, with opt-out option in every message |
| Defending against legal claims | Legitimate interests (Art. 6(1)(f)) |
4. Who Has Access to Your Data
We share personal data only with carefully selected third parties who help us operate the business. These include:
- Vercel Inc. (USA) — website hosting
- Sanity.io (Norway/EU) — content management system
- Calendly — discovery call scheduling
- Wise Payments Ltd. — card and bank payment processing
- Google LLC — analytics (GA4) and Google Workspace email
- PostHog — product analytics (where enabled)
- Lemlist — outbound email outreach (where applicable)
- Our accountants and legal advisers, bound by professional confidentiality
Where data is transferred outside the European Economic Area, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
5. How Long We Keep Your Data
- Website analytics: retained for up to 14 months
- Enquiries that do not become clients: retained for up to 24 months
- Client project records: retained for the duration of the engagement plus 7 years to meet Estonian accounting and tax obligations
- Marketing email lists: until you unsubscribe
6. Your Rights (GDPR)
You have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate or incomplete data
- Request deletion of your data, subject to our legal retention obligations
- Restrict or object to certain processing
- Receive your data in a portable format
- Withdraw consent at any time, where processing is based on consent
- Lodge a complaint with the Estonian Data Protection Inspectorate (aki.ee) or your local data-protection authority
To exercise any of these rights, email hello@transformwebsites.com. We will respond within 30 days.
7. Security
We use industry-standard security measures including HTTPS encryption, access controls, and least-privilege principles. No system is perfectly secure, but we work to protect your data against unauthorised access, loss, or disclosure.
8. Children
Our services are not directed to children under 16 and we do not knowingly collect personal data from them.
9. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version is always available at this URL, and the "Last updated" date at the top reflects the most recent change.
10. Contact
For any privacy-related question, email hello@transformwebsites.com.