Website Privacy Policy

This Website Privacy Policy explains how Pali ("we," "us," "our") collects, uses, and protects your personal data when you visit our marketing website at meetpali.com. This policy applies only to the website; if you use the Pali mobile application, please refer to our App Privacy Policy. Pali is operated by RLGrowth OÜ, an Estonian private limited company (registry code 17607918, registered office: Harju maakond, Tallinn, Kesklinna linnaosa, Tartu mnt 67/1-13b, 10115 Estonia). For GDPR purposes, we are the data controller.

We process your personal data on the following legal bases under the GDPR:

• Legitimate interest (Art. 6(1)(f)): Operating and improving the website, security monitoring, and understanding visitor behaviour through analytics.
• Consent (Art. 6(1)(a)): Setting non-essential cookies and processing early access form submissions.
• Contract performance (Art. 6(1)(b)): Responding to enquiries or processing your early access request.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

Information you provide directly:

• Name, email address, and message when you submit the early access or contact form
• Any other information you voluntarily share via forms on the website

Information collected automatically:

• IP address (anonymised where possible)
• Browser type, operating system, and device information
• Pages visited, time spent, and referring URLs
• Cookie identifiers (see Section 6)

We use the information collected through the website to:

• Process and respond to your early access requests and enquiries
• Understand website usage patterns to improve content and user experience
• Ensure the security and proper functioning of the website
• Comply with legal obligations

We do not use your website data for automated decision-making or profiling.

All data transmitted to and from the website is encrypted in transit using TLS 1.2+. Form submissions are stored securely in our database infrastructure hosted in EU-region data centres.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure, or destruction. These include encryption at rest, access controls, and regular security reviews.

We use the following categories of cookies:

• Strictly necessary cookies: Required for the website to function (e.g., session management). These do not require consent.
• Analytics cookies: Help us understand how visitors interact with the website. These are only set after you provide consent via our cookie banner.

We use Google Tag Manager to manage analytics tags. Analytics data is aggregated and does not identify individual visitors. You can manage your cookie preferences at any time via the cookie banner or your browser settings.

For full details, see our Cookie Policy.

The website uses the following third-party services:

• Hosting & infrastructure: Our website and database are hosted on cloud infrastructure with servers in EU-region data centres. Data Processing Agreements (DPAs) are in place.
• Analytics: Google Tag Manager is used to manage analytics. Analytics cookies are only loaded after consent.
• Fonts & assets: We self-host fonts where possible. Any externally loaded resources are served over HTTPS.

We ensure all third-party processors provide adequate safeguards under GDPR Article 28 and, where data leaves the EEA, appropriate transfer mechanisms (e.g., Standard Contractual Clauses) are in place.

We retain your website data according to the following schedule:

• Early access submissions: Retained until the request is fulfilled or you ask us to delete it.
• Contact form submissions: Retained for up to 12 months after your enquiry is resolved.
• Analytics data: Aggregated and anonymised data may be retained indefinitely as it cannot be linked back to you.
• Cookie data: Retained according to the expiry periods set out in our Cookie Policy.

Your data is primarily stored in EU-region data centres. Where data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions under GDPR Article 45.

This website is not directed at individuals under 18 years of age. We do not knowingly collect personal information from minors. If we learn that we have collected information from a person under 18, we will delete it promptly.

Under the General Data Protection Regulation, you have the right to:

• Access (Art. 15): Request a copy of the personal data we hold about you.
• Rectification (Art. 16): Request correction of inaccurate data.
• Erasure (Art. 17): Request deletion of your personal data.
• Restriction (Art. 18): Request restriction of processing in certain circumstances.
• Data portability (Art. 20): Request your data in a structured, machine-readable format.
• Object (Art. 21): Object to processing based on legitimate interest.
• Withdraw consent (Art. 7(3)): Withdraw consent for cookie or form processing at any time.
• Lodge a complaint: You may lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or with the supervisory authority in the EU/EEA country where you live or work.

To exercise any of these rights, please contact us at ronan@meetpali.com.

We may update this Website Privacy Policy from time to time. Material changes will be indicated by updating the "Last updated" date at the top of this page. We encourage you to review this policy periodically. Continued use of the website after changes constitutes acceptance of the revised policy.

This Website Privacy Policy is governed by the laws of Estonia and the EU General Data Protection Regulation (GDPR). If you are a consumer habitually resident in the EU/EEA, you keep the protection of the mandatory provisions of the law of your country of residence and may complain to the supervisory authority where you live or work.

If you have questions about this Website Privacy Policy or wish to exercise your rights, please contact us at: ronan@meetpali.com