Legal
Privacy policy
Last updated · 3 July 2026
This policy explains what personal data we collect through oxmintyn.foundation, why we collect it, and the rights you have over it. We keep it deliberately simple: this is an informational website, and we collect as little as possible.
1. Who we are
The data controller is OxMintyn MTÜ, a nonprofit association registered in Estonia (registry code 80662206), Juhkentali tn 8, Kesklinna linnaosa, Tallinn 10132, Estonia.
For anything related to your personal data, contact us at info@oxmintyn.foundation.
2. What data we collect
Contact form: if you write to us, we receive the name, email address, organisation (optional), area of interest and message you provide. The form is delivered to our inbox by our email delivery provider, Resend.
AI assistant (“Ask about UBWI”): the messages you type in the chat are sent to Anthropic's Claude API to generate an answer. Chat conversations are not stored in a database by us. Please don't share sensitive personal information in the chat — it exists to answer questions about our foundation.
Analytics: if enabled, we use Plausible Analytics, a privacy-first tool that uses no cookies and collects no personal data — only aggregated, anonymous usage statistics (such as page views and referral sources).
Technical logs: our hosting provider may keep short-lived server logs (such as IP addresses) for security and operational purposes, as is standard for any website.
3. Why we process it (legal basis)
We process contact form data to respond to your enquiry and follow up on potential partnerships, donations or volunteering — based on our legitimate interest and the steps you ask us to take by contacting us (GDPR Art. 6(1)(b) and 6(1)(f)).
We process chat messages solely to generate a reply to your question (legitimate interest, GDPR Art. 6(1)(f)).
4. Who we share data with
We do not sell personal data, ever. We share data only with the service providers (processors) needed to run this site: Resend (email delivery), Anthropic (AI assistant responses), our hosting provider, and Plausible (anonymous analytics, if enabled).
Some providers may process data outside the EU/EEA; where they do, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
5. How long we keep it
Contact form messages are kept in our email inbox for as long as needed to handle the correspondence and any resulting relationship, after which they are deleted. We do not maintain a marketing database and do not send newsletters without your explicit consent.
6. Cookies
This website does not use advertising or tracking cookies. Our analytics (if enabled) is cookie-free, which is why you don't see a cookie banner.
7. Your rights
Under the GDPR you have the right to access, correct, delete and receive a copy of your personal data, to restrict or object to its processing, and to withdraw consent at any time. To exercise any of these rights, email info@oxmintyn.foundation — we respond within one month.
You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or your local supervisory authority.
8. Changes to this policy
If we change what data we collect or how we use it, we will update this page and the date above. Significant changes will be highlighted on the website.