Privacy policy

Isomäki Digital Oy · Updated 2.11.2026

1. Controller

Isomäki Digital Oy
Business ID: 3409753-3
Email: contact@isomaki.io

2. Data we process

  • Contact details: name, email, phone, company and job title.
  • Messages and bookings you send through forms, email or the booking calendar.
  • Client data such as proposals, contracts and invoicing details.
  • Website usage data as visitor statistics, such as browser, device, page and time.
  • With a form, where you came to the site from (see section 8).

3. Purposes and legal bases

  • Replying to enquiries and meetings: legitimate interest or pre-contractual steps.
  • Client relationship, delivery and invoicing: contract and legal obligations such as bookkeeping.
  • B2B marketing and outreach to company representatives: legitimate interest. You can object at any time.
  • Improving the website, visitor statistics and tracking where enquiries come from: legitimate interest. Visitor statistics are collected with Umami, which uses no cookies.

4. Sources

Mainly from you. For B2B outreach we may use public sources such as company websites, LinkedIn and business registers.

5. Recipients and processors

We do not sell personal data. Service providers process data on our behalf, including Twenty and n8n (details you send through a form are saved in our CRM), HubSpot (booking and email), Umami (visitor statistics, on our own server in the EU), email and office software, website hosting in the EU, and bookkeeping and invoicing services. When we handle personal data in a client's systems, we act on the client's behalf under a separate agreement.

6. Transfers outside the EU/EEA

Some providers, such as HubSpot, may process data outside the EU/EEA. Transfers rely on mechanisms approved by the European Commission, such as the EU–US Data Privacy Framework or Standard Contractual Clauses.

7. Retention

We keep data only as long as needed. Client data is kept for the duration of the relationship and as long as the law requires afterwards. Enquiries that do not lead to a client relationship are deleted or anonymised when no longer needed.

8. Cookies

The site does not use cookies. For visitor statistics we use Umami analytics, which runs on our own server in the EU, uses no cookies and stores no personal data.

For the length of your visit, your browser's session storage keeps the page you started on, where you came from and any campaign tags (UTM). This is erased when you close the tab, and it reaches us only if you send a form.

Booking opens in HubSpot's service, where HubSpot's own cookie practices apply.

9. Your rights

You have the right to access, rectify or erase your data, restrict or object to processing (including direct marketing), data portability and to withdraw consent. Send requests to contact@isomaki.io. You may also complain to the Finnish Data Protection Ombudsman (tietosuoja.fi).

10. Security

Data is protected with access control, passwords and two-factor authentication, and is available only to those who need it for their work.

11. Changes

We may update this notice. The date of the latest update is shown at the top.