privacy policy.

We keep this simple: we collect as little as we can, we don’t use cookies, we never sell data, and we only share a candidate’s profile with an employer after asking. This policy explains what we process and why, under the EU General Data Protection Regulation (GDPR).

1. Who is responsible

The controller for personal data on this website is:

[company name] OÜ
[registered address in Estonia], Estonia
Registry code: [registry code] (Estonian Business Register)
Email: hello@remoteabroad.com
Phone: +46 70-860 47 88

For any privacy question, or to use your rights, email hello@remoteabroad.com.

2. Visiting this website

When you visit the site, our hosting provider automatically processes technical data needed to deliver the pages and keep them secure: your IP address, date and time, the page requested, browser type and referring page. This is our legitimate interest in running a secure website (Art. 6(1)(f) GDPR). We don’t use this data to identify you.

Hosting: Netlify, Inc., San Francisco, USA. Netlify processes data on our behalf under a data processing agreement. Transfers to the USA rely on the EU–US Data Privacy Framework and/or the EU Standard Contractual Clauses.

Fonts: our fonts (Sora and Figtree) are hosted on our own server. No request goes to Google or any other font service.

3. Analytics without cookies

If enabled, we use Cloudflare Web Analytics to count page views. It doesn’t set cookies, doesn’t use local storage and, according to Cloudflare, doesn’t fingerprint visitors or track you across sites. We only see aggregated numbers such as page views and referring sites. Legal basis: our legitimate interest in understanding which pages are useful (Art. 6(1)(f) GDPR). Provider: Cloudflare, Inc., San Francisco, USA, under the EU–US Data Privacy Framework and/or Standard Contractual Clauses.

4. When you contact us or request a call

If you use the contact form, email or phone us, we process what you send us, such as your name, work email, company, phone number and message, to answer you and arrange a call. Legal basis: steps prior to a contract (Art. 6(1)(b) GDPR) and our legitimate interest in answering business enquiries (Art. 6(1)(f) GDPR).

With each form we also record which page of this website you sent it from, the page you came from, and any campaign tags in the link (such as utm_source). This tells us which pages and campaigns are useful. Nothing is stored on your device for this. Legal basis: our legitimate interest in understanding what works (Art. 6(1)(f) GDPR).

Form submissions are sent through FormSubmit (formsubmit.co), a form-to-email service that forwards them to our inbox. FormSubmit acts as our processor and doesn’t use your data for its own purposes. We keep enquiries for as long as we need them to handle your request and for a maximum of 12 months afterwards, unless a business relationship follows, in which case statutory retention periods apply.

Estimate by email

If you ask the savings calculator to email you your estimate, we use your email address to send it and may follow up once about it. Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR). We delete the request after 12 months unless a conversation follows.

5. Candidates and the talent pool

If you join the talent pool, we process your name, email, native languages, country of residence, role areas, profile or CV link, and anything else you choose to tell us. We use it to match you with roles, contact you and run screening conversations.

• Legal basis: your consent (Art. 6(1)(a) GDPR), which you give with the checkbox on the form, and steps prior to a contract when you apply for a specific role (Art. 6(1)(b) GDPR).
• Sharing with employers: we only send your profile to an employer after asking you about that specific role.
• How long: up to 24 months after your last contact with us, unless you ask us to delete it sooner. We’ll check in before that period ends if we’d like to keep you in the pool.
• Withdrawing consent: email us at any time. It doesn’t affect processing that already took place.
• We don’t make automated decisions about you, and we don’t use profiling that has legal or similarly significant effects.

Please don’t send us special-category data (for example health information) unless it is genuinely needed for a role.

6. Employers and business contacts

For companies we work with, we process business contact details and the information needed to run the recruitment and invoice our fee (Art. 6(1)(b) GDPR), and keep accounting records as required by law (Art. 6(1)(c) GDPR).

7. Who else receives data

Besides the hosting and analytics providers above, we may use an email provider and office software under data processing agreements, an Employer of Record partner if an employer chooses one (only for the candidate hired), and our accountant or authorities where the law requires it. We never sell personal data.

Our processors: Netlify, Inc. (hosting), FormSubmit (formsubmit.co, forwarding form submissions to our inbox), Cloudflare, Inc. (cookieless visitor statistics, if enabled) and our email provider, [email provider]. If we add a tool that processes personal data, such as a CRM or applicant tracking system, we’ll add it here.

8. Your rights

You have the right to access your data (Art. 15), to have it corrected (Art. 16) or deleted (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). Where we rely on consent, you can withdraw it at any time (Art. 7(3)). Email hello@remoteabroad.com and we’ll reply within one month.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work, or where you think the problem occurred. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.

9. Cookies

This website doesn’t use cookies or similar storage technologies. See our cookie policy.

10. Links to other websites

We link to sources and official websites. Once you follow a link, that website’s own privacy policy applies.

11. Changes

We’ll update this page when our processing changes. The date at the top shows the latest version.