Privacy Policy

When we say that we think we can process your data, it is because we considered we have a legitimate interest (for ourselves or of a third party) to do so; it is in the interest of our organization to conduct and manage our business; this includes conducting analytics to improve and optimize the Site and the Services, protecting our interests and enforcing agreements with others, as well as complying with industry self-regulatory requirements. We might have a legitimate interest to process Personal Information in other contexts. We ensure we balance any potential impact on you and your rights before we process your Personal Information on that basis. You can obtain further information about how we assess our legitimate interests against any potential impact on you in respect of specific activities by contacting us. Please also consult the section “Your rights” below.

It is important that the Personal Information we hold about you is accurate and current. Please keep us informed if your Personal Information changes during your relationship with us. You can do so by lodging a customer support ticket or by sending us an email to [email protected]. We will endeavor to effect those changes within a reasonable timeframe.
We do not rely on consent as a legal basis for processing your Personal Information other than in relation to our use of cookies (please refer to our Cookie Policy), and when we send third party direct marketing communications to you via email. From time to time, we may share your Personal Information with third parties with your consent.

Aggregated Data. We may also aggregate personal and other data captured by us so that the data is no longer capable of identifying an individual. Aggregated data may cover patterns of usage or information and data that you provide to us, and we reserve the right to use this aggregated information for the purposes of improving and enhancing our Services, generating insights, for use in marketing to other users and current and potential partners and otherwise for the purposes of our business. Provided that such aggregated data does not directly or indirectly identify you as an individual, this data is not considered to be Personal Information and is not covered by this Privacy Policy.

We are committed to protecting your privacy. Internally, only people with a business need to know Personal Information, or whose duties reasonably require access to it, are granted access to customers’ Personal Information. Such individuals will only process your Personal Information on our instructions and are subject to a duty of confidentiality. We audit our personal compliance regularly.

The Site’s systems and data are reviewed periodically to ensure that you are getting a quality service and that leading security features are in place. We have put in place procedures to deal with any actual or suspected data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We take all reasonable endeavors to protect and safeguard Personal Information. Unfortunately, the transmission of information via the Internet is not completely secure. While we do our utmost to protect your Personal Information, we cannot guarantee the security of your data transmitted to us over email or through the Site; any transmission is at your own risk. Once we have received your Personal Information, we will use strict procedures and security features to try to prevent unauthorized access, but there are protective measures you should take, as well. Do not share your Personal Information with others unless you clearly understand the purpose of their request for it and you know with whom you are dealing. Do not keep sensitive Personal Information in your e-mail inbox or on Webmail. If you are asked to assign passwords to connect you to your Personal Information, you should use a secure password and always use two-factor authentication (2FA), where available. You should change your password regularly.

As necessary, we will share your Personal Information with:

3.1. Any member of our group, which means our direct or indirect subsidiaries, including their respective shareholders, directors, officers, affiliates, employees, contractors, agents, partners, insurers, and attorneys or representatives.

3.2. Our service providers, to the extent necessary to supply the Services to you.

3.3. Selected third parties, including analytics and search engine providers that assist us in the improvement and optimization of the Services.

3.4. Authorities and law enforcement agencies worldwide either when ordered to do so or on a voluntary basis if this appears reasonable and necessary to us.

3.5. If Estable or substantially all of its assets are acquired by a third party, in which case Personal Information held by it about its customers will be one of the transferred assets.

3.6. If we are under a duty to disclose or share your Personal Information in order to comply with any legal obligation, or in order to enforce or apply our Terms of Use and other agreements; or to protect the rights, property, or safety of us, our clients, or others, including to defend ourselves from legal claims.

3.7. When you submit your contact information through our forms, you consent to us sharing your contact details with Estable’s clients, who may contact you regarding products, services, or information related to your inquiry. For the purposes of this policy, “Estable’s clients” means businesses to whom Estable provides services, enabling them to receive contact information submitted through our forms in order to offer relevant products, services, or information to you.

You can find more information on the actual parties we are sharing your data with here. The list is updated regularly.

Personal Information and other data may therefore be exported outside of the jurisdiction in which you reside. Your Personal Information may be processed and stored in a foreign country or countries. Under those circumstances, the governments, courts, law enforcement, or regulatory agencies of that country or those countries may be able to obtain access to your Personal Information through foreign laws. You need to be aware that the privacy standards of those countries may be lower than those of the jurisdiction in which you reside.

European Economic Area (EEA) customers. We will take all steps reasonably necessary to ensure that your Personal Information is treated securely and in accordance with this Privacy Policy. All data you provide to us is stored on our secure servers. Where we transfer our data outside of the EEA, we ensure that adequate safeguards are in place. That includes, where necessary, taking steps to evaluate the risks raised by the transfers in countries that do not offer an adequate level of protection. Please contact us if you want further information on the specific mechanism used by us when transferring your Personal Information out of the EEA.

All customers. You may access and verify your Personal Information held by Estable, where consent is the legal basis for processing of your Personal Information and subject to any legal or contractual restrictions, withdraw your consent, in each case, by submitting a written request to [email protected]. Our electronic marketing communications also contain opt-out mechanism and options to update your contact information or change your preferences at any time. We will do our best to honor your request promptly. For cookies, this is done by setting up the cookies’ preferences.

EEA customers. You have a number of rights in relation to how we process your Personal Information. You may exercise these rights by contacting us (see details below). These include the right to:

a) access the Personal Information that we may hold about you;

b) rectify any inaccurate Personal Information that we may hold about you;

c) have your Personal Information erased in certain circumstances, for example, where it is no longer necessary for us to process your Personal Information to fulfill our processing purposes; or where you have exercised your right to object to the processing;

d) restrict the processing of your Personal Information where, for example, the information is inaccurate or it is no longer necessary for us to process such information or where you have exercised your right to object to our processing;

e) object to the processing of your Personal Information which may be exercised in certain circumstances, for example, where we are processing your Personal Information for direct marketing purposes, or where your own legitimate interests outweigh ours;

f) have your Personal Information ported to a new service provider if you no longer wish to use the Services. You may exercise these rights by contacting us (see details below); and

g) when we rely on your consent to process Personal Information (cookies and newsletter communication), you have the right to withdraw your consent at any time. For cookies, this is done by setting up the cookie’s preferences. Please visit our Cookie Policy. For newsletters, you can do so by opting-out using the link provided in the newsletters at any time or by submitting a written request to [email protected] We will do our best to honor your request promptly.

No fee usually required.

You will not have to pay a fee to access your Personal Information or to exercise any of your other rights. We may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.

What we may need from you.

We may need to request specific information from you to help us confirm your identity and ensure your right to access your Personal Information (or to exercise any of your other rights). This is a security measure to ensure that Personal Information is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.

Time limit to respond.

We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.