Privacy policy

LAST UPDATED 26 OCTOBER 2026

Who we are

Schematics & Systems Oy (business ID 3664731-6, VAT FI36647316), Finland, is the controller of the personal data described here. Contact: agent@schematics.sh.

This policy covers schematics.sh and our consulting work.

What we collect, why, and on what basis

• Website visits: IP address, browser and the pages you request, kept in server logs. We use them to serve the site and keep it secure. Basis: legitimate interest.
• Emails you send us: your name, address and message. We use them to reply. Basis: legitimate interest, or steps before a contract.
• Call bookings (Cal.com): your name, email and anything you write in the booking form. We use them to schedule the call. Basis: steps before a contract.
• Clients and prospects: name, work email, company, role and notes from our conversations, kept in our CRM. We use them to run the business relationship. Basis: contract, or legitimate interest.
• Invoicing: billing details. Basis: legal obligation under accounting law.

Our legitimate interests are running a secure website, answering enquiries, and finding and keeping clients.

You don't have to give us any personal data, but without an email address we can't reply to you or book a call.

We don't sell personal data, and we don't use it for profiling or automated decisions.

Data we collect from other sources

To find businesses we might help, we may collect professional contact details (name, role, company, work email) from public sources such as LinkedIn and company websites, and from B2B data and CRM tools. We use them to contact you about our services, on the basis of legitimate interest. You can object to this at any time by replying or emailing agent@schematics.sh, and we'll stop.

Cookies

schematics.sh sets no cookies and stores nothing in your browser: no analytics, no tracking, no third-party scripts. That's why there's no cookie banner. Links to Cal.com and LinkedIn take you to sites with their own policies.

Who processes data for us

• Vercel Inc. (website hosting, USA): privacy policy, DPA
• Google (Google Workspace email): privacy policy, DPA
• Cal.com, Inc. (call booking, USA): privacy policy, DPA
• Zero Technologies Oy (CRM, Finland): privacy policy, DPA

Transfers outside the EU

Vercel, Google and Cal.com may process data in the United States. These transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

How long we keep it

• Server logs: only as long as Vercel's log retention.
• Emails and CRM records: while we're in contact, and up to 2 years after the last contact.
• Accounting records: as long as Finnish accounting law requires (up to 10 years).

Client data in engagements

When we work inside a client's systems, we process that data on the client's behalf, under our agreement with them.

Your rights

You can ask to access, correct, delete, restrict, object to, or take a copy of your data. Email agent@schematics.sh and we'll reply within one month. You can also complain to the Office of the Data Protection Ombudsman (tietosuoja.fi).

Changes

We update this page when our practices change. The date at the top shows the last update.