Skip to content
MacawsHub
Start a project

Privacy

Privacy policy

Last updated: 2026-05-25

This policy explains what personal data we collect on macawshub.com, why we collect it, who we share it with, and how you can exercise your rights under the EU General Data Protection Regulation (GDPR) and Estonian law.

Who we are

MacawsHub OÜ (Estonian business registry code 16660460) is a company headquartered in Tallinn (Harju maakond, Lasnamäe linnaosa). We are the data controller for personal data collected through macawshub.com.

For any privacy-related question or request, write to privacy@macawshub.com. General inquiries can go to hello@macawshub.com.

What we collect

We collect personal data in three buckets, each gated by the consent banner you saw on first visit:

  • Strictly necessary: a single first-party cookie (cc_cookie) that records your consent choice. Without this, the banner would re-appear on every page load.
  • Analytics (only with consent): Google Analytics 4 measurement ID G-R4RMG28298. This sets _ga and _ga_R4RMG28298 cookies, captures aggregated pageviews, referrers, country/region (not city), device class, and language. IP addresses are anonymized server-side via Google’s anonymize_ip setting before any storage.
  • Product research (only with consent): Hotjar (operated by Contentsquare Group) for anonymized session replays and heatmaps. This sets _hj*, _cs_*, and _uxa* cookies. By default, text content shown on the site is masked in recordings; we do not record forms or sensitive inputs.
  • Inquiries you initiate: if you email us, book a call via Calendly, or message us via WhatsApp, we receive the contact details and message content you provide. We process this on the legal basis of pre-contractual steps and our legitimate interest in responding to prospects.
  • Server logs: our web server records the standard set (timestamp, request URL, response status, user agent, IP address) for security and operational diagnostics. These logs are kept on the server for up to 30 days.

Legal bases

We rely on the following GDPR Article 6 legal bases:

  • Consent (Art. 6(1)(a)) — for analytics and product-research cookies, set when you accept the relevant category in our consent banner. You can withdraw consent at any time via the "Cookie preferences" link in the site footer.
  • Performance of a contract / pre-contractual steps (Art. 6(1)(b)) — when you book a discovery call or send an inquiry about working together.
  • Legitimate interests (Art. 6(1)(f)) — for the strictly-necessary cookie that records your consent choice, and for security/diagnostic logging on our server.

Who we share data with

We use the following third-party processors, each bound by their own data-processing terms:

  • Google Ireland Limited (GA4) — analytics. Data is transferred to Google LLC in the United States under EU Standard Contractual Clauses and the EU–US Data Privacy Framework.
  • Contentsquare SAS (Hotjar) — session replays and heatmaps. Primary processing in the EU; sub-processors may include US-based infrastructure under SCCs.
  • Calendly LLC — appointment scheduling. If you book a call, Calendly receives your name, email, time zone, and any answers you give in their form.
  • Amazon Web Services (Route 53) — authoritative DNS for our domains. Receives DNS queries only.
  • Our VPS provider — hosts the site and the email infrastructure that handles privacy@macawshub.com / hello@macawshub.com inquiries. Data resides in the EU.

How long we keep your data

  • Consent record (cc_cookie): 182 days, after which the banner re-appears.
  • GA4 event data: 14 months, then automatically deleted by Google.
  • Hotjar session data: as configured in our Hotjar account (typically up to 365 days for recordings).
  • Email correspondence: as long as the conversation is operationally relevant, then archived or deleted in line with normal business record retention.
  • Server logs: rotated and deleted after 30 days.

International transfers

Where personal data leaves the EEA (notably to the US for Google Analytics and certain Contentsquare sub-processors), the transfer is covered by the EU Standard Contractual Clauses (SCCs) and, where applicable, the EU–US Data Privacy Framework. We do not sell personal data and we do not transfer it to jurisdictions without adequate safeguards.

Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you and receive a copy.
  • Have inaccurate data rectified.
  • Have your data erased ("right to be forgotten") where the legal grounds for processing no longer apply.
  • Restrict processing in certain circumstances.
  • Object to processing based on our legitimate interests.
  • Receive your data in a portable, machine-readable format.
  • Withdraw consent at any time for cookies set under consent — does not affect the lawfulness of processing before the withdrawal.

To exercise any of these rights, email privacy@macawshub.com. We respond within one month, or sooner where feasible.

Filing a complaint

If you believe we have mishandled your data, you can lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or with the supervisory authority in your country of residence within the EU.

Changes to this policy

We update this policy when our processing practices change — for example, if we add or remove a third-party tool. The "Last updated" date at the top reflects the most recent change. Material changes will be flagged on the site for a reasonable period.

© 2026 MacawsHub OÜ. Tallinn, Estonia.