Privacy policy

Last updated: 6 November 2026

Thermodecking OÜ (“we”) runs the website thermowooddecking.com. This policy explains in plain language what personal data we collect through this website, why, and what your rights are. It follows the EU General Data Protection Regulation (GDPR) and the Estonian Personal Data Protection Act.

1. Who is responsible

The controller is Thermodecking OÜ, registry code 16473315, Roseni 9-23, 10111 Tallinn, Estonia. Contact: info@thermowooddecking.com.

2. What we collect

When you request samples or a quote, you give us:

• your name and email address
• your yard or company, and the vessel or project (if you add them)
• the delivery address and anything else you write in the message
• how you found us (if you choose an answer)

When you send the form, our server also records the time, your IP address and browser type, to protect the site from spam and abuse.

No cookies, no analytics. This website sets no cookies, uses no tracking or advertising tools and loads no outside scripts or fonts. Everything is served together with the site.

3. Why we use it

• To send you samples, answer your questions and prepare a quote (steps before a contract, GDPR Art. 6(1)(b)).
• To keep short security logs (our legitimate interest in protecting the site, Art. 6(1)(f)).

We never sell your data and never add you to a mailing list without asking.

4. Who sees it

Only the Thermowood Decking team reads your request. If you order samples or boards, we give your name and delivery address to the courier or freight company that delivers them. Our processors are Cloudflare, Inc., which hosts this website and receives the form, and our Estonian email provider Elkdata OÜ (Veebimajutus), which delivers the form to our inbox and stores our email on servers in the European Union.

5. How long we keep it

Requests and related emails: up to two years, then deleted unless we are working together. Invoices and order documents: as long as Estonian accounting law requires (7 years). Security logs: 30 days.

6. Transfers outside the EU

Our email is stored in the European Union. Cloudflare is a US company with a global network, so the form may pass through servers outside the EU on its way to us. Cloudflare takes part in the EU–US Data Privacy Framework, and Standard Contractual Clauses apply as required by GDPR Chapter V. If we ship samples or boards outside the EU, the delivery details go to the carrier in that country, only to deliver your order.

7. Your rights

You can ask us for a copy of your data, to correct it, delete it, limit its use, give it to you in a portable format, or stop using it. Write to info@thermowooddecking.com; we reply within 30 days.

You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, www.aki.ee) or the authority in your own EU country.

8. Changes

If we change this policy, we update the date at the top of this page.