Who we are
This website, essentialwebapps.com, is operated by Essential Web Apps (Book24Seven Oy), the data controller responsible for your personal data.
- Business name: Essential Web Apps (Book24Seven Oy)
- Business ID (Y-tunnus): 3479426-7
- Address: Purpuripolku 3-5 H 137, 00420 Helsinki, Finland
- Contact: hello@essentialwebapps.com
As the data controller, we decide how and why your personal data is collected and used, and we are responsible for keeping it safe and handling it in line with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.
What data we collect
We only collect the data we need to provide our service and run our website. This includes:
- Booking information. When you book a free strategy call, we collect your name, email address, and any details you share about your business and your website. Bookings are processed through our booking system, Book24Seven.
- Email subscription data. If you choose to join our email list, we collect your email address (and name, if you provide it) through MailerLite.
- Website usage data. When you visit our website, we collect standard analytics data such as pages visited, time on site, approximate location, device and browser type, and how you arrived at the site. This is collected through Google Analytics and Google Tag Manager.
- Communication data. If you email us directly, we keep that correspondence so we can respond and follow up.
We do not currently use a contact form on the site other than the booking system. If we add one in the future, this policy will be updated to reflect it.
Why we collect it and our legal basis
Under GDPR, we must have a lawful basis for using your data. Here is what we use your data for and the basis for each:
- To respond to and deliver your strategy call. When you request a call, we use your details to contact you, prepare for the call, and deliver it. Legal basis: performance of a service you requested (and our legitimate interest in responding to enquiries).
- To send you emails you signed up for. If you joined our email list, we use your email address to send relevant content. Legal basis: your consent, which you can withdraw at any time by unsubscribing.
- To understand and improve our website. We use analytics data to see how the site performs and make it better. Legal basis: your consent (given through the cookie banner) and our legitimate interest in improving our service.
- To communicate with you. When you contact us, we use your data to reply. Legal basis: our legitimate interest in responding to you.
Who we share your data with
We do not sell your personal data. We share it only with the service providers we use to run our business. These providers act as our data processors, which means they handle your data on our behalf and under their own privacy policies. They are:
- Book24Seven (booking system), which processes your booking details. Book24Seven Privacy Policy
- MailerLite (email marketing), which processes your email subscription data. MailerLite Privacy Policy
- Google (Google Analytics and Google Tag Manager), which processes website usage data. Google Privacy Policy
We may also share data where we are legally required to, for example in response to a lawful request from authorities.
Cookies and analytics
Our website uses cookies and similar technologies. Some are necessary for the site to work. Others, such as the analytics cookies set by Google Analytics and Google Tag Manager, help us understand how visitors use the site so we can improve it.
We ask for your consent before setting non-essential cookies, through the cookie banner shown when you first visit the site. You can accept or decline, and you can change your choice at any time. Declining non-essential cookies will not stop you from using the site.
You can also control cookies through your browser settings, including blocking or deleting them.
International data transfers
We work with clients around the world, and some of our service providers (such as Google and MailerLite) are based outside the European Union or process data outside it. When your data is transferred outside the EU or European Economic Area, we rely on the safeguards those providers have in place, such as the European Commission’s Standard Contractual Clauses, to make sure your data remains protected to the standard required under GDPR.
How long we keep your data
We keep your personal data only as long as we need it to provide our service, and until you ask us to delete it. When you request deletion, we remove your data unless we are legally required to keep certain records. Analytics data is retained according to the settings and standard retention periods of Google Analytics.
Your rights
Under GDPR, you have the following rights over your personal data:
- Access the personal data we hold about you
- Correct data that is inaccurate or incomplete
- Delete your data (the right to be forgotten)
- Restrict or object to how we use your data
- Data portability, to receive your data in a portable format
- Withdraw consent at any time, where we rely on consent
To exercise any of these rights, email us at hello@essentialwebapps.com. You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (Tietosuojavaltuutetun toimisto) if you believe we have not handled your data properly.
Changes to this policy and how to reach us
We may update this policy from time to time, for example if we add a new service or tool. When we do, we will update the date at the top of this page. We encourage you to review it occasionally.
If you have any questions about this policy or how we handle your data, contact us at hello@essentialwebapps.com.
Last Updated: This Privacy Policy was last updated on October 12, 2026.
