---
type: page
slug: privacy
title: Privacy notice
description: >-
  How Intentface Oy handles personal data collected through this website, email
  correspondence, and job applications. EU-hosted, minimal collection, plain
  English.
updatedAt: '2026-05-12'
---

## Overview

Version: 2026-05-12

Registrar: Intentface Oy, business ID 3387905-8, Lemminkäisenkatu 14 A, 20520 Turku, Finland.

This notice applies to information we collect about people who interact with our services. If you have any questions, email [dev@intentface.com](mailto:dev@intentface.com).

## Commitment

We treat personal data with the care expected under EU data-protection law and use it only for the purposes set out below.

## What we process and why

| Purpose | Data | Basis |
|---|---|---|
| Replying to enquiries about Intentface, our services, or working with us | Name, email, message content | Legitimate interest — we have to read and keep the message to reply |
| Processing job applications | Name, email, country of residence, work history, anything you choose to send | Consent — you actively opt in by sending the application |
| Website functionality and aggregate analytics | Anonymous, cookie-free pageview events via Plausible (EU-hosted) | Legitimate interest — basic operational telemetry |
| Performance of a contract | Name, email, country, payment-related data for clients | Contract performance |

## How we use it

We use your data only in a manner appropriate to the basis on which it was collected — typically to reply to your message, process an application, or deliver agreed services.

## Sharing

We pass data to third parties only when:

- You've explicitly consented to a named third party,
- A processor is acting on our behalf under a data-processing agreement,
- The law requires it.

All data currently sits inside the European Union. If we ever need to transfer data outside the EU, we rely on the safeguards in Article 46 GDPR.

## Retention

We keep the minimum data needed for the purpose and delete it once it's no longer required. If you stop interacting with us, we delete your data unless we have a legal obligation to keep it. Consent-based collection is reviewed at least every three years.

## Your rights

You can:

- Withdraw consent at any time (we make this as easy as possible — unsubscribe links, direct email).
- Request rectification or deletion of your data.
- Request access to your data.
- Lodge a complaint with the Office of the Data Protection Ombudsman.

The full summary is at [tietosuoja.fi/en/home](https://tietosuoja.fi/en/home). To exercise any right, email [dev@intentface.com](mailto:dev@intentface.com).

Some rights (deletion, in particular) make it impossible for us to continue delivering certain services. We'll always honour your request and tell you what it means in practice.

## Analytics

We use [Plausible](https://plausible.io) (EU cloud) for aggregate, cookie-free pageview analytics. No personal data is collected, no cross-site tracking happens, and the analytics script does not set cookies. We also use [Vercel Speed Insights](https://vercel.com/docs/speed-insights) for real-user Core Web Vitals telemetry; it samples performance metrics, not identifiable user data.

## Changes

We may update this notice from time to time. The current version is the one published at this URL. If a change materially reduces your rights, we'll tell the people whose data is affected.