Website Privacy

Public website privacy notice

This notice explains how the public Suveranum campaign website handles website analytics, lead contact form submissions, and contact email links. It does not describe the client-specific on-premises AI environment deployed inside a law firm’s office.

1. Operator and scope

Suveranum is currently a product and campaign name. The public domain and this campaign website are operated by Paltrow OÜ, registry code 11114155, as the interim website operator and controller for website-level personal data.

This notice applies only to the public campaign website at suveranum.com. It does not apply to client documents, local document indexes, prompts, generated outputs, deployment logs, or any client office environment.

2. Analytics on this website

The website uses Plausible Cloud to understand aggregate website usage and qualified demo interest. Plausible is used because it is designed for cookieless, aggregate analytics and does not create persistent visitor profiles.

The website may measure aggregate page views, referral sources, campaign parameters, and the following fixed interaction events: "Lead Contact Start", "Lead Contact Submit", "Contact Email Click", and "FAQ Open". Event properties are limited to fixed site placements or FAQ question slugs.

According to Plausible’s own data policy, Plausible does not use cookies, does not store raw IP addresses, and uses aggregate analytics rather than cross-site visitor tracking. You can read Plausible’s policy at plausible.io/data-policy.

3. Trackers that are not used

This version of the website does not use Google Analytics, Meta Pixel, LinkedIn Insight Tag, advertising retargeting scripts, cross-site behavioral tracking, embedded calendars, live-chat widgets, or form-field tracking scripts.

4. Campaign links and UTM hygiene

Campaign links may use UTM parameters to understand which public campaign source led to a visit. Campaign links must not contain names, law firm names, client identities, case or matter details, email addresses, phone numbers, or confidential information in URL parameters.

5. Lead contact form and contact emails

The Book a Demo form collects first name, last name, company, and email. It does not ask for message text, document uploads, client names, matter details, personal IDs, passwords, account credentials, or confidential legal facts.

Lead form submissions are sent to Static Forms and forwarded to the configured Suveranum business contact channel. The form includes a honeypot spam field and uses the user-accepted public form identifier embedded in the website HTML.

General contact remains available through hello@suveranum.com. Email correspondence is handled by the sender’s and recipient’s email providers and by ordinary business correspondence systems.

6. Purposes and legal bases

Aggregate analytics and fixed click events are processed for the legitimate interest of understanding whether the campaign website is useful, whether visitors can find key information, and whether the website creates qualified demo interest.

Lead contact submissions and contact emails are processed to respond to the request, arrange a discussion, and take steps requested by the sender before any potential commercial relationship.

7. Retention and recipients

Aggregate website analytics are retained in Plausible according to the configured analytics account settings. Lead contact submissions and business emails are retained only as long as needed for correspondence, sales follow-up, legal records, and ordinary business administration.

Website analytics are processed through Plausible Cloud. Lead contact submissions are processed through Static Forms. Email correspondence is processed through the relevant sender and recipient email infrastructure. The website does not sell visitor data or share it with advertising networks.

8. Your rights

Where GDPR rights apply, you may request access, correction, deletion, restriction, portability, or object to processing. To make a privacy request, contact privacy@suveranum.com.

You also have the right to contact the Estonian Data Protection Inspectorate. See aki.ee.

9. Updates

This notice may be updated as the campaign website, analytics configuration, or operating company changes.

Last updated: 21 May 2026.