Privacy Policy – Forms

Last Updated: January 25, 2026

1. Introduction

Nations Overload OÜ (“we,” “our,” or “us”) is committed to protecting your privacy and ensuring compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our forms and services.

2. Data Controller

For any questions regarding this Privacy Policy or your personal data, please contact us at the email address above.

3. Information We Collect

3.1 Personal Information

When you submit our forms, we collect the following personal information:

• Contact Information: Full name, business email address, company name, job title/role
• Business Information: Company size, industry, production-related data
• Communication Data: Responses to form questions, comments, and feedback
• Technical Data: IP address, browser type, device information (collected automatically)

3.2 Why We Collect This Information

We collect your personal information for the following purposes:

1. MVP Development and Product Research: To gather insights and feedback that will help us develop and improve our future Minimum Viable Products (MVPs) and services
2. Understanding Market Needs: To better understand industry challenges, pain points, and requirements
3. Business Communication and Outreach: To contact you about our products, services, relevant updates, and opportunities related to your form submission (with your consent)
4. Form Validation: To ensure form submissions are legitimate and prevent spam or abuse

4. Legal Basis for Processing

Under GDPR, we process your personal data based on the following legal grounds:

• Consent: You have provided explicit consent by checking the privacy consent checkbox when submitting our forms
• Legitimate Interest: Processing is necessary for our legitimate interests in product development, market research, and business improvement

5. How We Use Your Information

We use the collected information to:

• Analyze market needs and industry trends
• Develop and improve our products and services
• Conduct research for future MVP development
• Contact you about our products, services, and relevant business opportunities
• Send you updates and information related to your form submission
• Respond to your inquiries and provide customer support
• Improve our forms and user experience
• Comply with legal obligations

6. Data Sharing and Third Parties

We do not sell, rent, or share your personal information with third parties for their marketing purposes.

We may share your information only in the following limited circumstances:

• Service Providers: We may use trusted third-party service providers (such as hosting providers, email services, or analytics tools) who assist us in operating our services. These providers are contractually obligated to protect your data and use it only for the purposes we specify.
• Legal Requirements: We may disclose your information if required by law, court order, or governmental authority.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction, with notice provided to you.

7. Data Storage and Security

7.1 Data Storage

Your personal data is stored securely on our servers and is retained only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law.

7.2 Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction, including:

• Encryption of data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication measures
• Secure hosting infrastructure

8. Your Rights Under GDPR

As a data subject, you have the following rights:

1. Right of Access: You can request a copy of the personal data we hold about you
2. Right to Rectification: You can request correction of inaccurate or incomplete data
3. Right to Erasure (“Right to be Forgotten”): You can request deletion of your personal data
4. Right to Restrict Processing: You can request that we limit how we use your data
5. Right to Data Portability: You can request a copy of your data in a structured, machine-readable format
6. Right to Object: You can object to processing of your personal data
7. Right to Withdraw Consent: You can withdraw your consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the contact information provided in Section 2.

9. Data Retention

9.1 Retention Periods

We retain your personal data for the following periods:

• Active Business Use: We retain your personal data for up to 7 years from the date of submission, or until you request deletion, whichever comes first. This allows us to:
  • Contact you about our products and services
  • Reach out regarding opportunities related to your form submission
  • Maintain business relationships and communications
  • Comply with legal and regulatory requirements
• Legal Requirements: If required by law (e.g., accounting records, tax obligations), we may retain certain data for longer periods as mandated by applicable regulations.
• Upon Request: You can request deletion of your personal data at any time. Upon receiving a valid deletion request, we will remove your data within 30 days, except where we are required to retain it for legal purposes.

9.2 Data Deletion

When data is no longer needed or upon your request, we will securely delete or anonymize it in accordance with our data retention policies and GDPR requirements.

9.3 Opt-Out

You can opt-out of receiving communications from us or request data deletion at any time by:

• Contacting us at contact@nationsoverload.com
• Clearly stating your request (e.g., “Please delete my data” or “Please unsubscribe me from communications”)
• We will process your request within 30 days

10. International Data Transfers

If you are located outside the European Economic Area (EEA), please note that your data may be transferred to and processed in countries outside your jurisdiction. We ensure that appropriate safeguards are in place to protect your data in accordance with GDPR requirements.

11. Cookies and Tracking Technologies

Our forms may use cookies and similar tracking technologies to:

• Ensure proper form functionality
• Prevent spam and abuse (via hCaptcha)
• Analyze form usage and improve user experience

You can control cookie preferences through your browser settings. However, disabling certain cookies may affect form functionality.

12. Children’s Privacy

Our services are not intended for individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by:

• Posting the updated policy on our website
• Updating the “Last Updated” date at the top of this policy
• Providing notice through our forms or other communication channels

14. Contact Us

15. Supervisory Authority

If you are located in the EEA and believe that we have not addressed your concerns adequately, you have the right to lodge a complaint with your local data protection supervisory authority.

---

By using our forms and services, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of your information as described herein.