Privacy Policy

This Privacy Policy explains how Imperfect Lab OÜ ("Imperfect Lab", "we", "our" or "us") collects, uses and protects personal data when you visit https://imperfect.ee (the "Website") or contact us.

This policy covers the Website only. Our consumer products, including Rush, have their own privacy policies, presented within each product.

1. Who we are

Imperfect Lab OÜ is a technology company established in Estonia and is the data controller for personal data processed through the Website. You can reach us at privacy@imperfect.ee.

2. Information we collect

a) Information you give us

When you contact us through the Website or by email, we receive the information you choose to share, such as your name, email address, company, the topic of your message and its content. If you express interest in working with us, we may also receive your CV, portfolio or other application materials.

b) Technical information

Our hosting provider processes technical data that is necessary to deliver the Website securely, such as IP addresses, browser type and request logs. This data is used for security, abuse prevention and troubleshooting, and is kept only for a short period.

c) Cookies and tracking

The Website does not set cookies and does not use analytics, advertising or social media tracking technologies. Fonts and other assets are served from our own infrastructure. See our Cookie Policy for details.

3. How we use information

We use the information described above to:

• respond to your inquiries and correspond with you,
• evaluate partnership, press and business requests,
• review applications and expressions of interest in working with us,
• operate, secure and improve the Website,
• comply with legal obligations and protect our rights.

We do not sell personal data.

4. Legal bases

Under the General Data Protection Regulation (GDPR), we process personal data on the following bases:

• Legitimate interests (Article 6(1)(f)): responding to messages, evaluating business requests, and keeping the Website secure,
• Steps prior to a contract (Article 6(1)(b)): handling partnership discussions and job applications you initiate,
• Consent (Article 6(1)(a)): where you give it, for example when you agree to be contacted about your message. You may withdraw consent at any time,
• Legal obligations (Article 6(1)(c)): where processing is required by law.

5. Sharing

We share personal data only with:

• service providers that help us operate the Website and our communications, such as hosting and email providers, acting on our instructions,
• professional advisers, such as lawyers and accountants, where necessary,
• public authorities, where required by law or to protect the rights, safety or property of Imperfect Lab, our users or others.

6. International transfers

Some of our service providers may process data outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as European Commission adequacy decisions or standard contractual clauses.

7. Retention

We keep personal data only as long as necessary for the purposes described above:

• correspondence and inquiries: up to 24 months after our last exchange,
• application materials: up to 12 months after the process ends, unless you ask us to keep them longer or delete them sooner,
• technical logs: for a short period sufficient for security and troubleshooting.

We may keep data for longer where required by law or to resolve disputes.

8. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you,
• ask us to correct inaccurate or incomplete data,
• ask us to delete your data,
• restrict or object to certain processing,
• receive your data in a portable format,
• withdraw consent at any time, without affecting processing that took place before withdrawal.

To exercise these rights, write to privacy@imperfect.ee. You also have the right to lodge a complaint with a supervisory authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon). You may also contact the authority in your country of residence.

9. Security

We apply appropriate technical and organizational measures to protect personal data against unauthorized access, loss or misuse. No system can be guaranteed to be completely secure, and we encourage you to share only the information necessary for your request.

10. Children

The Website is not directed to people under the age of 18, and our companion products are strictly for adults. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so that we can delete it.

11. Changes

We may update this Privacy Policy from time to time. Changes take effect when published on the Website. The date at the top of this page shows when the policy was last updated.

12. Contact

For privacy-related questions or requests, contact privacy@imperfect.ee.

Related documents: Website Terms · Cookie Policy · Child Safety & CSAM Policy