Last updated: 6 August 2026
KLAP Technologies OÜ ("KLAP", "we", "us") is the controller responsible for the personal data described in this policy.
This policy covers personal data we collect as a controller — meaning data about visitors to klap.cc, people who contact us, people who book meetings with us, and our clients and prospective clients.
It does not cover personal data we handle on behalf of our clients when delivering services. In those engagements we act as a processor and process data only on our client's documented instructions, under a separate data processing agreement. If you are a customer or contact of one of our clients, please refer to that organisation's privacy policy.
Identity data — first name, last name, job title, company name.
Contact data — email address, telephone number.
Communication data — the content of enquiries, emails, and messages you send us.
Booking data — where you schedule a meeting with us, the details you provide to our scheduling provider, including your name, email, selected time, time zone, and any notes.
Technical data — IP address, browser type and version, device and operating system, referring URL, information about how you use our website, and the approximate city, region, and country derived from your IP address when you submit a form.
We do not intentionally collect special category data (such as health, biometric, or political data), and we ask that you do not include it in enquiries.
Directly from you — when you complete the contact form, book a meeting, email us, or correspond with us by phone.
Automatically — as you browse klap.cc, through cookies and similar technologies. See Cookies below.
From third parties — our website host and scheduling provider generate technical and booking data in the course of providing their services to us. We may also collect business contact details from public sources such as LinkedIn or company websites when researching prospective clients.
| Purpose | Data used | Legal basis |
|---|---|---|
| Responding to your enquiry | Identity, contact, communication | Steps at your request prior to entering a contract (Art. 6(1)(b)) |
| Scheduling and holding meetings | Identity, contact, booking | Steps at your request prior to a contract, or legitimate interests (Art. 6(1)(b)/(f)) |
| Delivering our services and managing the client relationship | Identity, contact, communication | Performance of a contract (Art. 6(1)(b)) |
| Business development and contacting prospective clients | Identity, contact | Legitimate interests — growing our business and reaching organisations likely to benefit from our services (Art. 6(1)(f)) |
| Operating, securing, and improving the website | Technical | Legitimate interests — keeping our site functional, secure, and useful (Art. 6(1)(f)) |
| Analytics and measuring website performance | Technical | Consent (Art. 6(1)(a)) |
| Meeting accounting, tax, and other legal obligations | Identity, contact, transaction | Legal obligation (Art. 6(1)(c)) |
Purpose
Responding to your enquiry
Data used
Identity, contact, communication
Legal basis
Steps at your request prior to entering a contract (Art. 6(1)(b))
Purpose
Scheduling and holding meetings
Data used
Identity, contact, booking
Legal basis
Steps at your request prior to a contract, or legitimate interests (Art. 6(1)(b)/(f))
Purpose
Delivering our services and managing the client relationship
Data used
Identity, contact, communication
Legal basis
Performance of a contract (Art. 6(1)(b))
Purpose
Business development and contacting prospective clients
Data used
Identity, contact
Legal basis
Legitimate interests — growing our business and reaching organisations likely to benefit from our services (Art. 6(1)(f))
Purpose
Operating, securing, and improving the website
Data used
Technical
Legal basis
Legitimate interests — keeping our site functional, secure, and useful (Art. 6(1)(f))
Purpose
Analytics and measuring website performance
Data used
Technical
Legal basis
Consent (Art. 6(1)(a))
Purpose
Meeting accounting, tax, and other legal obligations
Data used
Identity, contact, transaction
Legal basis
Legal obligation (Art. 6(1)(c))
Where we rely on legitimate interests, we have considered whether those interests are overridden by your rights, and you can object at any time (see Your Rights).
Where we rely on consent, you can withdraw it at any time without affecting the lawfulness of processing carried out beforehand.
Some of our service providers process personal data outside the European Economic Area, principally in the United States, as set out in the table above. Where personal data is transferred outside the EEA, we rely on one of the following safeguards:
You can request details of the safeguards applying to a particular transfer by emailing hello@klap.cc.
| Data | Retention period |
|---|---|
| Enquiries that do not lead to an engagement | 12 months from last contact, in both our mailbox and the database behind our forms |
| Booking records | 12 months from the meeting date, held in Cal.com |
| Client records and correspondence | Duration of the engagement, then 3 years |
| Accounting and transaction records | 7 years, as required by the Estonian Accounting Act |
| Website analytics data | 2 months by default in Google Analytics, or up to 14 months where configured |
Data
Enquiries that do not lead to an engagement
Retention period
12 months from last contact, in both our mailbox and the database behind our forms
Data
Booking records
Retention period
12 months from the meeting date, held in Cal.com
Data
Client records and correspondence
Retention period
Duration of the engagement, then 3 years
Data
Accounting and transaction records
Retention period
7 years, as required by the Estonian Accounting Act
Data
Website analytics data
Retention period
2 months by default in Google Analytics, or up to 14 months where configured
We delete or anonymise data once these periods expire, unless we are required to retain it for longer to establish, exercise, or defend legal claims.
We maintain technical and organisational measures appropriate to the risk, including encryption of data in transit, access controls limiting data to personnel who need it, and vetting of the service providers we use. No system is completely secure, but we take reasonable steps to protect your data and will notify you and the supervisory authority of a personal data breach where the law requires.
Under the GDPR you have the right to:
To exercise any of these, email hello@klap.cc. We will respond within one month, and there is no fee. We may need to verify your identity before acting on a request.
We do not carry out automated decision-making producing legal or similarly significant effects.
Our website links to third-party websites and social media platforms. We do not control those sites and are not responsible for their privacy practices. We encourage you to read their privacy notices.
Our website and services are directed at businesses and are not intended for children. We do not knowingly collect data from children. If you believe a child has provided us with personal data, contact hello@klap.cc and we will delete it.
If you have a concern about how we handle your personal data, please contact us first at hello@klap.cc — we would like the chance to resolve it.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate:
Andmekaitse Inspektsioon
Tatari 39, 10134 Tallinn, Estonia
Email: info@aki.ee
Phone: +372 627 4135
Web: www.aki.ee
If you are in another EEA country, you may complain to your local supervisory authority instead.
We may update this policy from time to time. The current version is always available at klap.cc/en/legal/privacy, with the date it was last updated shown at the top. Where changes are significant, we will take reasonable steps to notify you.