Privacy Policy

BenTech OÜ
Last updated: 11 October 2026

This policy explains how BenTech OÜ processes personal data when you visit bentech.ee or submit an enquiry.

1. Data controller

BenTech OÜ, registry code 17611831, Toompuiestee 21, 10137 Tallinn, Estonia. For privacy enquiries or to exercise your rights, email contact@bentech.ee or write to this address.

2. Information we process

When you submit the contact form, we process your name, business email address, organisation, and enquiry. We use this information to assess and respond to your request and manage subsequent business correspondence.

Submitting an enquiry is voluntary. All four fields are required to use the form. If you prefer, you can contact us by email. Please include only information relevant to your enquiry.

Cloudflare processes technical information, including IP addresses, browser information, request metadata, and security signals, to deliver and protect the website. Turnstile loads on the homepage and checks for automated traffic, including before you submit the form. We also process a verification token and a random submission identifier to validate requests and reduce duplicate emails.

Cloudflare Workers logging is enabled for operational monitoring. Our application log messages contain error categories and HTTP status codes; they exclude submitted form fields, verification tokens, and email provider responses. Cloudflare also generates request and response metadata logs and processes security data under its own service arrangements. The website application does not maintain a separate database of enquiries.

3. Legal bases

We process enquiries under our legitimate interests in handling business correspondence (GDPR Article 6(1)(f)) and, where applicable, to take steps requested before entering into a contract (Article 6(1)(b)). Security-related processing is based on legitimate interests in protecting our website and services.

4. Service providers

Cloudflare hosts the website, processes form requests, and provides network security and Turnstile verification. Turnstile evaluates signals such as your IP address, browser information, TLS fingerprint, and the website origin. Cloudflare acts as our processor when providing Turnstile protection and as a separate controller when using these signals to improve its bot detection. See the Turnstile Privacy Addendum and Cloudflare Privacy Policy.

Resend processes contact form submissions and delivery information to deliver enquiries to BenTech. See Resend's Data Processing Addendum and Privacy Policy.

Proton Mail provides business email services for enquiries and correspondence. See the Proton Mail Privacy Policy.

5. International transfers

Our providers may process personal data outside the European Economic Area. Resend stores data in the United States, including when an EU email sending region is selected. Its Data Processing Addendum includes standard contractual clauses for relevant transfers. Cloudflare's Data Processing Addendum also provides standard contractual clauses for restricted transfers. Proton states that Proton Mail data is stored in Switzerland, Germany, or Norway.

The linked provider documents describe their transfer safeguards. You can contact us at contact@bentech.ee for further information or copies of relevant safeguards.

6. Retention

We retain enquiries and business correspondence for as long as needed to respond, manage business relationships, and meet legal obligations. Accounting records and supporting business documents are generally retained for seven years in accordance with Estonian law.

Cloudflare Workers logs are retained for three days. Resend retains email and delivery log data for 30 days under its standard settings. Provider backups and other security data are subject to the providers' retention policies.

7. Cookies and analytics

We do not install advertising cookies or visitor analytics scripts. Cloudflare Turnstile and security services may use browser-side technologies for abuse prevention, as described in Cloudflare's policies linked above. Cloudflare also processes operational metrics to run and protect the service.

Our form script holds submission details and the random submission identifier in page memory for retries. It does not save them in cookies or persistent browser storage. Reloading or closing the page clears that script state. This does not delete an enquiry already sent to our email providers.

8. Your rights

Subject to applicable conditions, you may request access, rectification, erasure, restriction, or portability of your personal data, and object to processing based on legitimate interests. You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), aki.ee.

9. Updates

We may update this policy when our processing practices or legal requirements change. The date above indicates the latest revision.