How we handle your data

Who we are

The data controller is Outer Core OÜ, registered in Estonia (European Union). Company registration number: 17259371. For any question about your data, email legal@outer-heaven.com.

What we collect

Only what you choose to send us. When you submit a form on this site (to book a scoping call, request a quote, enquire about partnering, or apply to join us) we collect your name, your email address, an optional company name, your message, how you tell us you found us, and which form you used. An application to join may also include links you decide to share. If we invite you to answer our scoping questions before a call, we keep those answers too: what triggered the work, what needs testing, rough size, timing, and anything else you choose to tell us there.

A small amount of technical context is stored with your submission, because the request itself carries it: the country it came from, the page you submitted from, any campaign parameters in that page's address, and the site that linked you there. If you ask for a sample report, we also record when the link we emailed you is opened and whether it is opened from more than one device, so we can tell that the report actually reached someone, and we record what our email provider reports back about that message, such as whether it was delivered or bounced. None of this is used to build a profile of you, and none of it is shared.

Why we use it, and our legal basis

We use what you send to reply to you and to scope or discuss the work you asked about. The legal basis is our legitimate interest in responding to an enquiry you started, and, where you ask us to prepare a quote or an engagement, steps taken at your request before a contract.

How long we keep it

We keep enquiry data only as long as we need it to handle your request and, where relevant, for our ordinary business records: up to 24 months from your last contact, after which we delete it. You can ask us to delete it sooner.

Your rights

Under the GDPR you can ask to access, correct, delete, or export your data, or object to our use of it. Email legal@outer-heaven.com and we will respond within one month.

Analytics and cookies

We measure how this site is used with various analytics services, which run on EU servers and is reached through a subdomain we operate ourselves, so no analytics request goes to an advertising network. We see which pages were opened, what was clicked, how far the page was scrolled and how fast it loaded, and we record how visitors move through the site so we can see where it confuses people. Every form input is masked in those recordings, so anything you type is never captured. The legal basis is our legitimate interest in knowing whether this site works. We do not sell this data and we do not share it.

To do this we keep one cookie on your device. It is set by our analytics service and is readable only by outer-heaven.com. It holds a random identifier for your browser, the current session, and how you first arrived at the site. It does not hold your name, your email, or anything you typed. It expires 180 days after your last visit. Our analytics service also marks the browser tab you are using with two short-lived entries, and your browser deletes them when you close the tab. That identifier is what lets us see a visit as one journey rather than a set of unconnected pages, and recognise your browser if you come back. If you would rather we did not, set your browser to refuse cookies from outer-heaven.com or delete them after your visit. We can then no longer tell that two pages were opened by the same person.

Changes to this notice

If we change how we handle data, we will update this page and the date at the top. Material changes will be described here.

Contact

Questions about this notice or your data: legal@outer-heaven.com, or write to Outer Core OÜ at the registered office above.