Privacy policy

Maker/OS OÜ

Last updated: 2 June 2026

1. Introduction

Maker/OS OÜ ("Maker/OS", "we", "us", or "our") is a company incorporated under the laws of the Republic of Estonia (17518439), with its registered address at Sepapaja tn 6, 15551 Tallinn, Harju Maakond, Estonia.

This Privacy Policy explains how we collect, use, store, and share personal data when you access or use the Maker/OS platform, website, and related services (collectively, the "Services"). We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Estonian data protection legislation.

By using our Services, you acknowledge that you have read and understood this Privacy Policy.

2. Data controller

The data controller responsible for your personal data is:

Maker/OS OÜ
Sepapaja tn 6
15551 Tallinn
Harju Maakond
Estonia

For any privacy-related enquiries, please contact us at: privacy@makeros.academy

3. What personal data we collect

We may collect and process the following categories of personal data:

3.1 Data you provide to us

Account registration data: name, email address, password (hashed), profile information
Billing and payment data: billing name, address, and payment method details (processed securely via our payment processor; we do not store full card details)
Communications: messages, support requests, and feedback you send to us
Profile and course data: learning preferences, progress, completed modules, and any content you create or submit within the platform

3.2 Data we collect automatically

Usage data: pages visited, features used, time spent, clicks, and navigation paths
Device and technical data: IP address, browser type and version, operating system, device identifiers, and time zone
Cookie data: as described in our Cookie Policy (see Section 10)

3.3 Data from third parties

Single sign-on data: if you log in using a third-party provider (e.g., Google), we receive basic profile information from that provider as permitted by your settings with them
Payment processors: we receive confirmation of payment status from our payment service providers

4. How we use your personal data

We process your personal data on the following legal bases and for the following purposes:

4.1 Performance of a contract (Art. 6(1)(b) GDPR)

To create and manage your account
To provide access to the Maker/OS platform and course content
To process payments and manage subscriptions
To respond to support requests-

4.2 Legitimate interests (Art. 6(1)(f) GDPR)

To improve and develop our Services
To monitor and analyse usage patterns and performance
To detect and prevent fraud, abuse, and security incidents
To send service-related communications (e.g., maintenance notifications)

4.3 Consent (Art. 6(1)(a) GDPR)

To send marketing emails and newsletters (where you have opted in)
To place non-essential cookies (see Section 10)

4.4 Compliance with legal obligations (Art. 6(1)(c) GDPR)

To comply with applicable laws, regulations, and lawful requests from public authorities
To maintain accounting and tax records as required under Estonian law

5. How long we reatin your data

We retain personal data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by law:

Account data: retained for the duration of your account and for up to 3 years after account closure, unless a longer retention period is required by law
Transaction and billing records: retained for 7 years to comply with Estonian accounting legislation
Support communications: retained for up to 2 years after the closure of a support ticket
Marketing consent records: retained until you withdraw consent, plus a reasonable period thereafter for compliance purposes
Usage and analytics data: typically retained in aggregated or anonymised form after 24 months

When personal data is no longer required, we securely delete or anonymise it.

6. Who we share your data with

We do not sell your personal data. We may share your data with the following categories of recipients:

6.1 Service providers and processors

We engage trusted third-party providers to operate our Services, including hosting, payment processing, email delivery, analytics, and customer support tools. These providers act as data processors and are bound by data processing agreements that require them to protect your data and process it only on our instructions.

6.2 Professional advisers

We may share data with lawyers, accountants, auditors, and insurers where necessary in the course of professional services.

6.3 Legal and regulatory authorities

We may disclose personal data to competent authorities where we are required or permitted to do so by applicable law, or where necessary to protect our legal rights or the safety of others.

6.4 Business transfers

In the event of a merger, acquisition, reorganisation, or sale of assets, personal data may be transferred to the relevant third party. We will notify you before any such transfer if it materially affects your rights.

7. Internatyiponal data transfers

Maker/OS OÜ is based in Estonia and operates within the European Economic Area ("EEA"). Where we transfer personal data outside the EEA, we ensure appropriate safeguards are in place in accordance with the GDPR, such as:

Standard Contractual Clauses approved by the European Commission
Transfers to countries with an adequacy decision from the European Commission

For more information about our international transfer mechanisms, please contact us at privacy@makeros.academy.

8. Your rights

As a data subject under the GDPR, you have the following rights in relation to your personal data:

Right of access: to obtain a copy of the personal data we hold about you (Art. 15)
Right to rectification: to have inaccurate or incomplete data corrected (Art. 16)
Right to erasure: to request deletion of your personal data in certain circumstances (Art. 17)
Right to restriction: to request that we limit processing of your data in certain circumstances (Art. 18)
Right to data portability: to receive your data in a structured, machine-readable format (Art. 20)
Right to object: to object to processing based on legitimate interests or for direct marketing (Art. 21)
Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing (Art. 7(3))
Right not to be subject to automated decisions: to request human review of any significant automated decision (Art. 22)

To exercise any of these rights, please contact us at privacy@makeros.academy. We will respond within 30 days. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with a supervisory authority. In Estonia, the competent authority is:

Data Protection Inspectorate (Andmekaitse Inspektsioon)

Tatari 39, 10134 Tallinn, Estonia

Website: www.aki.ee

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against accidental or unlawful loss, access, disclosure, alteration, or destruction. These measures include encryption in transit (TLS), access controls, and regular security reviews.

No method of transmission over the internet or electronic storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security. In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant supervisory authority as required by the GDPR.

10. Cookies

We use cookies and similar tracking technologies on our website and platform. These may include:

Essential cookies: necessary for the Services to function (no consent required)
Analytics cookies: used to understand how users interact with our Services (consent required)
Marketing cookies: used to personalise advertising (consent required)

You can manage your cookie preferences at any time via the cookie settings banner on our website.

11. Children's privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have inadvertently collected personal data from a child under 16, we will take steps to delete it promptly. If you believe we have collected such data, please contact us at privacy@makeros.academy.

12. Links to third party sites

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties and encourage you to review their privacy policies before providing any personal data to them.

13. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by email or by posting a prominent notice within the platform, and update the "Last updated" date at the top of this document. Your continued use of the Services after any changes take effect constitutes your acceptance of the updated policy.

14. Contact us

If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact:

Maker/OS OÜ
Data Privacy
Sepapaja tn 6
15551 Tallinn
Harju Maakond
Estonia

Email: privacy@makeros.academy