Privacy Policy

One Day Agency (ODA)
Last Updated: October 7, 2025

1. Introduction

One Day Agency OÜ (“ODA,” “we,” “us,” or “our”) is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website (onedayagency.ee) or use our interim marketing management services.

This policy complies with the General Data Protection Regulation (GDPR) and Estonian Personal Data Protection Act.

2. Data Controller

Company Name: One Day Agency OÜ
Email: oda@onedayagency.ee
Address: Estonia
Website: onedayagency.ee

3. Information We Collect

3.1 Information You Provide Directly

When you use our services or contact us, we may collect:

Contact Information: Name, email address, phone number, company name, job title
Business Information: Company details, project requirements, budget information
Communication Data: Information contained in correspondence, inquiries, and feedback
Contract Information: Details necessary for service agreements and invoicing

3.2 Information Collected Automatically

When you visit our website, we automatically collect:

Technical Data: IP address, browser type and version, time zone settings, operating system
Usage Data: Information about how you use our website, including pages visited, time spent, and navigation patterns
Cookie Data: Information collected through cookies and similar technologies (see our separate Cookie Policy)

3.3 Information from Third Parties

We may receive information about you from:

Business partners and referral sources
Publicly available sources (e.g., LinkedIn, company websites)
Professional networks and industry databases

4. How We Use Your Information

We process your personal data for the following purposes:

4.1 Service Delivery

To provide interim marketing management services
To assess your requirements and match you with appropriate consultants
To manage client relationships and service contracts
To communicate about our services and projects

4.2 Business Operations

To process payments and manage billing
To maintain records for accounting and tax purposes
To improve our services and website functionality
To conduct business analysis and planning

4.3 Marketing and Communications

To send you information about our services (with your consent)
To provide updates, newsletters, and industry insights
To respond to your inquiries and requests

4.4 Legal Compliance

To comply with legal obligations and regulations
To protect our legal rights and interests
To prevent fraud and ensure security

5. Legal Basis for Processing

We process your personal data based on:

Contractual Necessity: To fulfill our service agreements with you
Legitimate Interests: For business operations, improving services, and marketing to existing clients
Consent: Where you have provided explicit consent for specific processing activities
Legal Obligation: To comply with applicable laws and regulations

6. Data Sharing and Disclosure

We may share your information with:

6.1 Service Providers

IT service providers and hosting companies
Payment processors and financial institutions
Professional advisors (accountants, lawyers)
Marketing and analytics service providers

6.2 Business Partners

Interim marketing professionals we engage for your projects
Subcontractors involved in service delivery

6.3 Legal Requirements

Law enforcement agencies or regulators when required by law
In connection with legal proceedings or investigations

We ensure that all third parties respect the security of your data and treat it in accordance with applicable law.

7. International Data Transfers

As we operate in Estonia (EU), your data is primarily processed within the European Economic Area (EEA). If we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as:

EU-approved Standard Contractual Clauses
Adequacy decisions by the European Commission
Other legally compliant transfer mechanisms

8. Data Retention

We retain your personal data only for as long as necessary:

Client Data: For the duration of our business relationship and up to 7 years thereafter for accounting and legal purposes
Marketing Data: Until you withdraw consent or request deletion
Website Analytics: Up to 26 months from your last interaction
Communication Records: Generally 3-5 years, depending on the nature of the communication

9. Your Rights Under GDPR

You have the following rights regarding your personal data:

9.1 Right of Access

Request copies of your personal data

9.2 Right to Rectification

Request correction of inaccurate or incomplete data

9.3 Right to Erasure

Request deletion of your personal data (in certain circumstances)

9.4 Right to Restrict Processing

Request limitation of processing activities

9.5 Right to Data Portability

Receive your data in a structured, machine-readable format

9.6 Right to Object

Object to processing based on legitimate interests or for direct marketing

9.7 Right to Withdraw Consent

Withdraw consent at any time (where processing is based on consent)

9.8 Right to Lodge a Complaint

File a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or your local supervisory authority

To exercise your rights, contact us at: oda@onedayagency.ee

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication procedures
Employee training on data protection
Secure backup systems

However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

11. Children’s Privacy

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us immediately.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

Posting the updated policy on our website
Updating the “Last Updated” date
Sending an email notification for significant changes (where appropriate)

We encourage you to review this policy periodically.

13. Third-Party Websites

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites. We encourage you to read their privacy policies.

14. Business Transfers

In the event of a merger, acquisition, or sale of assets, your personal data may be transferred. We will provide notice and ensure the new entity honors this Privacy Policy.

15. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal data:

Email: oda@onedayagency.ee
LinkedIn: One Day Agency LinkedIn Profile

Estonian Data Protection Inspectorate:
Website: www.aki.ee
Email: info@aki.ee
Phone: +372 627 4135

16. Consent

By using our website or services, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your personal data as described herein.