Privacy, without the fine-print fog.

1. Controller

The controller responsible for processing personal data on this website under the General Data Protection Regulation (GDPR) is:

2. Website delivery and security

This is a static informational website. It is delivered through Cloudflare, Inc. as a content-delivery and security service in front of our origin hosting server. In that role, Cloudflare processes technical request data on our behalf in order to deliver and protect the website.

Depending on the request, this data can include the IP address, requested URL, date and time, browser and device information, referring page, and security-related request characteristics. Processing is based on our legitimate interest in providing a secure, reliable website (Art. 6(1)(f) GDPR).

Further information is available in Cloudflare’s privacy policy.

3. Server logs

Our hosting infrastructure may record technically necessary connection data in server log files, including IP address, date and time of a request, requested resource, response status, referrer and browser information. We use this data only to operate, troubleshoot and protect the website. It is not combined with data from advertising or analytics profiles.

4. Cookies, analytics and external content

We do not use analytics services, advertising pixels, marketing cookies or preference cookies. We also do not embed external fonts, maps, videos or social-media feeds.

Cloudflare may set strictly necessary security cookies in limited situations—for example, when a visitor is asked to complete a security challenge. These cookies serve only website security and delivery.

5. Contact by e-mail

If you contact us by e-mail, we process the information you provide, such as your name, e-mail address and message, to handle your inquiry and any follow-up communication. The legal basis is Art. 6(1)(b) GDPR where the contact concerns a possible or existing contractual relationship, and otherwise our legitimate interest in responding to inquiries under Art. 6(1)(f) GDPR.

Our e-mail service is provided through Namecheap Private Email. Message data is therefore processed by the e-mail service provider as necessary to transmit and store the communication.

6. Recipients and international processing

We do not sell or rent personal data. Data is disclosed only where necessary to technical and communication service providers acting on our behalf, where required by law, or where you have given consent.

Some service providers may process data outside the European Economic Area. Where this occurs, transfers are subject to the safeguards required by applicable data-protection law.

7. Retention

Technical logs are retained only for as long as necessary for website operation, security and troubleshooting. E-mail inquiries are deleted when the matter has been resolved unless contractual, statutory or evidentiary retention requirements apply.

8. Your rights

Subject to the conditions of the GDPR, you may have the right to:

• access personal data concerning you (Art. 15),
• rectify inaccurate data (Art. 16),
• erase data (Art. 17),
• restrict processing (Art. 18),
• receive data in a portable format (Art. 20), and
• object to processing based on legitimate interests (Art. 21).

To exercise these rights, contact info@10xleaders.net.

9. Complaints and updates

You have the right to lodge a complaint with a competent supervisory authority. The Estonian supervisory authority is the Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.

We may update this policy when our website, service providers or legal requirements change. The version published here is the current version.