Privacy Policy

1. Who collects the data

The data controller is Lilium Digital OÜ, a company registered in Estonia (European Union).

2. What data is collected

• Contact info: name, email, phone.
• Business info: business name, type, location.
• Payment info: processed by Stripe (we do not store card data).
• Usage data: via Meta Pixel (with consent), anonymous analytics.

3. Purpose of processing

• Service delivery (legal basis: contract performance).
• Marketing follow-up on submitted leads (legal basis: legitimate interest).
• Analytics and ad optimisation via Meta Pixel (legal basis: consent).
• Legal compliance (legal basis: legal obligation).

4. Sharing of data

• Stripe — payment processing (EU/US, SCCs in place).
• Meta — advertising pixel and CAPI (with consent only).
• Go High Level — CRM (data processed under a data processing agreement).
• Vercel — hosting (EU data centers where possible).
• Supabase — database (EU region).

We do not sell personal data.

5. Data retention

• Active clients: for the duration of the contract + 2 years.
• Leads who did not convert: deleted after 12 months.
• Payment records: 7 years (legal requirement).

6. User rights (GDPR)

• Right to access, rectify, erase, restrict, portability, and object.
• Right to withdraw consent at any time.
• Right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).

To exercise your rights, write to support@clematis.dev — response within 30 days.

7. Cookies

• Strictly necessary: session, authentication (no consent required).
• Analytics and marketing: Meta Pixel, only with explicit consent.
• A cookie consent banner is shown on the first visit.

8. Changes to the policy

We notify you of changes by email with 30 days notice.