Privacy Policy

Effective Date: 10 January 2026

This Privacy Policy explains how Rewilt (“we”, “our”, “us”), operated by Fromtribe OÜ (Registry No. 17336307, registered address: Lootsa tn 5, 11415 Tallinn, Estonia), collects, uses, discloses, and protects personal data in connection with our website, intake forms, and professional web development services.

We handle all personal data transparently and in full compliance with the EU General Data Protection Regulation (GDPR) and applicable U.S. data protection laws.

1. Data Controller

Fromtribe OÜ (trading as Rewilt)
Registry no.: 17336307
Address: Lootsa tn 5, 11415 Tallinn, Estonia
Email: info@rewilt.com

Rewilt acts as the data controller for data processed through our website and intake forms. We utilize third-party processors for specific functions:

• Typeform – For secure intake and inquiry data collection.
• Stripe Payments – Independent controller for secure payment processing.
• Calendly – For scheduling qualification and scoping calls. Calendly may process data outside the EEA under Standard Contractual Clauses (SCCs).

2. Categories of Data We Collect

• Inquiry Data – Name, email, company details, and project requirements provided via our forms.
• Transaction Data – Payment status, billing address, and contract details.
• Communication Data – Email correspondence and notes from scoping calls.
• Technical Data – IP address, browser type, and cookies for site performance.

2.1 How We Collect Data

We collect personal data when you:

• Submit an intake or qualification form on our website (via Typeform)
• Schedule a call via Calendly
• Communicate with us by email
• Visit our website (technical data such as IP address and browser type)

3. Purpose and Lawful Basis of Processing

Purpose	Lawful Basis (GDPR)
Inquiry evaluation & Scoping	Art. 6(1)(b) – Contractual necessity
Project delivery & Management	Art. 6(1)(b) – Contractual necessity
Payments via Stripe	Art. 6(1)(b) – Contractual necessity
Customer Support	Art. 6(1)(f) – Legitimate interest
Legal & Tax Compliance	Art. 6(1)(c) – Legal obligation

4. Data Sharing and Recipients

Personal data is shared only as necessary for our operations:

• Stripe – For secure payment handling.
• Service Providers – IT hosting and email platforms under Data Processing Agreements (DPAs).
• Authorities – Where legally required for tax or fraud prevention.
  We never sell personally identifiable information.

5. Data Retention

• Transaction records: 7 years (legal obligation).
• Inquiry data: 2 years if no project is started.
• Technical logs: 6 months.

6. International Transfers

As Rewilt serves U.S. and International clients, data may be processed outside the EEA (e.g., via U.S.-based tools like Typeform). We rely on Standard Contractual Clauses (SCCs) approved by the European Commission to ensure your data remains protected to EU standards.

7. Your Rights

You have the right to: access, rectify, erase, restrict, and object to processing.

Contact: info@rewilt.com. We respond to all requests within 30 days. You also have the right to lodge a complaint with your local data protection authority if you believe your data has been processed unlawfully.

These rights apply to personal data provided in a business or professional context.

8. Cookies

We use essential cookies for site functionality and analytics to improve user experience. You can manage your preferences via your browser settings. We do not use cookies for advertising, profiling, or resale of personal data.

9. Data Security

We employ encryption (SSL), access controls, and secure servers. Payments are handled through Stripe, a PCI DSS Level 1 certified provider.

10. Changes to This Policy

We may update this Policy periodically. Material changes will be noted on our website. The “Effective Date” at the top of this page reflects the most recent update.

11. Contact

Rewilt Email: info@rewilt.com