How we handle your data.

Enge Commerce OÜ, trading as Overbuilt, is the controller for the personal data described on this page: the business that decides what's collected and why. Registry code 14672594, VAT EE102596328, registered at Raiesmiku tee 9, Vääna-Jõesuu küla, Harku vald, Harju maakond, 76909, Estonia.

Reach us at info@overbuilt.eu or +372 5681 2686 for anything about your data. No form to fill in, no separate address to find. The same contact as everything else on this site.

Enquiries. When you send a build request, ask for a quote, start a Bespoke conversation, or book a repair, we collect your name, contact details, and whatever you tell us about what you need. This is used to reply to you and prepare a specification or quote, nothing else. Legal basis: taking steps you ask for before a possible contract, or our legitimate interest in answering enquiries that don't turn into one.

Orders and invoicing. Once you approve a written specification, we process what's needed to build, invoice, and deliver it: order details, billing information, and for business customers, company details. Legal basis: performing the contract with you, and for the invoice itself, a legal obligation: Estonian accounting law (raamatupidamise seadus) requires financial records to be kept for 7 years.

Server access logs. Our hosting provider keeps standard web server logs, including IP addresses, for security and to keep the service running. We don't use these for anything else. Legal basis: legitimate interest in keeping the site secure and working.

Visit statistics. This site runs a small, self-hosted analytics tool. It sets no cookie and never stores your IP address: each visit becomes a one-way cryptographic hash of your IP address, browser and the date, so the same visitor can be counted once per day without identifying who they are or being traceable from one day to the next. This tells us which pages get read and roughly how many people visit, nothing more precise than that. Legal basis: legitimate interest in understanding how the site is used.

We share data with the following, each acting only within their role, never for their own purposes:

• Our hosting provider, who stores the site and its data on our behalf.
• Our email provider, who delivers and stores messages sent to and from info@overbuilt.eu.
• Our accountant or accounting software, for invoicing and bookkeeping required by law.

We don't sell personal data, and we don't share it for advertising, ours or anyone else's.

• Enquiries that don't turn into an order are kept for a limited period, then deleted, or sooner if you ask.
• Order and invoicing records: 7 years, as required by Estonian accounting law.
• Server access logs: kept by the hosting provider on their own retention schedule.
• Visit statistics: nothing identifiable is stored in the first place, so there's no one to keep or delete data about. The underlying records are cleared automatically after roughly 120 days regardless.

Under GDPR, you can ask us to:

• Access: a copy of what we hold about you.
• Rectify: correct anything that's wrong or out of date.
• Erase: delete your data, where we're not required to keep it (invoices, for instance, have to be kept for 7 years by law regardless of this request).
• Restrict: limit how we use it while a query about it is sorted out.
• Object: to processing based on our legitimate interest, including the visit statistics described above.
• Port: get your data in a portable format to take elsewhere.

To use any of these, email info@overbuilt.eu. We reply within a month.

If you think we've mishandled your data, tell us first — info@overbuilt.eu. We'd rather hear it directly and fix it.

You can also complain to Estonia's data protection authority: Andmekaitse Inspektsioon, Tatari 39, 10134 Tallinn, info@aki.ee.