Your privacy matters to us. This policy explains what personal data we collect when you use beyondconvert.com and our services, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It is written to comply with the EU General Data Protection Regulation (GDPR) and the ePrivacy rules on cookies.
The data controller is OutsmartPerformance OÜ, operating as BeyondConvert, Sepapaja tn 6, Tallinn 11415, Estonia. You can reach us via the contact page.
Contact and application forms: name, email, company website, vertical, and the content of your message. Email sign-ups (free Checklist, free Playbook): your email address. Careers applications: name, email, location, CV/LinkedIn link, and cover letter. Purchases: billing details are collected and processed by our payment and checkout providers; we receive order confirmation data (what you bought, when, and your contact details), not your full card number. Client engagements: business information you provide in the course of the services, governed additionally by our service agreement.
When you visit the site we (and the tools below) collect technical and usage data: IP address, device and browser type, pages visited, referral source, and interaction events — via cookies and similar technologies described in Section 6.
We process personal data to: (a) respond to inquiries and applications — legitimate interest / pre-contractual steps (GDPR Art. 6(1)(b),(f)); (b) deliver products and services and manage client relationships — contract performance (Art. 6(1)(b)); (c) send the resources you requested and related emails — consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link; (d) operate, secure, and improve the website — legitimate interest (Art. 6(1)(f)); (e) measure marketing and site performance — consent for non-essential cookies (Art. 6(1)(a)); (f) meet legal obligations such as accounting and tax — legal obligation (Art. 6(1)(c)).
We use carefully selected service providers who process data on our behalf under data-processing agreements: hosting (Cloudways/DigitalOcean, EU data-center configuration where available); analytics and tag management (Google Tag Manager, Google Analytics); email delivery and marketing (Acumbamail); workflow and CRM (Make, ClickUp, Airtable); scheduling (TidyCal); checkout and payments (our payment/checkout providers, e.g. Gumroad or equivalent, and their payment processors); and, for client engagements, the affiliate tracking platforms agreed for your program. We do not sell personal data. We may disclose data where required by law or to protect our legal rights.
Some providers process data outside the EU/EEA (for example, in the United States). Where that happens, transfers rely on adequacy decisions (including the EU–US Data Privacy Framework where the provider is certified) or the European Commission's Standard Contractual Clauses, plus supplementary safeguards where appropriate.
Cookies are small text files stored on your device. We use them, along with similar technologies (pixels, local storage), for the purposes below.
Strictly necessary — required for the site to function (e.g. security, form submission state). These do not require consent. Analytics/performance — help us understand how the site is used (Google Analytics via Google Tag Manager). Marketing — measure campaigns and, where used, enable advertising tags (e.g. Google Ads). Analytics and marketing cookies are set only with your consent where required by law, and you can withdraw consent at any time.
You can manage or withdraw cookie consent through the site's cookie controls (where displayed) and through your browser settings, including deleting existing cookies and blocking new ones. Blocking some cookies may affect site functionality. For Google's technologies, see Google's privacy documentation and opt-out tools.
We keep personal data only as long as needed for the purposes above: inquiry and application data for up to 24 months after last contact (careers applications kept on file only where we told you so or you asked us to); marketing-list data until you unsubscribe or after prolonged inactivity; client and billing records for the period required by Estonian accounting and tax law (generally 7 years); technical logs for short security-driven periods. When data is no longer needed, we delete or anonymize it.
Under the GDPR you have the right to: access your personal data; rectify inaccurate data; erase data ("right to be forgotten"); restrict processing; object to processing based on legitimate interest, including direct marketing; data portability; and withdraw consent at any time without affecting prior processing. To exercise any right, contact us via the contact page; we respond within one month. You also have the right to lodge a complaint with a supervisory authority — in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or the authority of your habitual residence.
We apply appropriate technical and organizational measures: HTTPS across the site, access controls and least-privilege on internal systems, vendor due diligence, and separation of client environments. No method of transmission or storage is 100% secure; where a breach affecting your rights occurs, we will notify the supervisory authority and, where required, you, in line with GDPR obligations.
Our website and services are directed at businesses and are not intended for children under 16. We do not knowingly collect personal data from children; if you believe a child has provided us data, contact us and we will delete it.
We do not use your personal data for automated decision-making that produces legal or similarly significant effects on you.
We may update this policy from time to time. The current version is always available on this page with its "Last updated" date; material changes will be flagged on the site or by email where appropriate.
Privacy questions and rights requests: OutsmartPerformance OÜ (BeyondConvert), Sepapaja tn 6, Tallinn 11415, Estonia — via the contact page.