Privacy Policy

Last updated: 18.10.2026

1. Who we are

This website is operated by KRYO Labs OÜ, Company Registry Code: 17623871, Tallinn, Estonia ("we", "us"). We are the controller of the personal data described below.

Contact for privacy matters: sales@kryopouches.com

2. What data we collect

Contact form. When you send an inquiry we receive:

• full name
• business email address
• company name
• country
• the content of your message
• the IP address of the device that sent the form (for spam and abuse protection)

Giving us this data is voluntary, but without an email address we cannot answer your inquiry.

Server logs. Like any web server, our server automatically records technical data for each request: IP address, date and time, requested page, browser type and referring page.

3. Why we use it and on what legal basis

• Answering your inquiry and preparing a possible business relationship — Art. 6(1)(b) GDPR (steps prior to entering a contract).
• Protecting the contact form against spam and abuse (IP address) — Art. 6(1)(f) GDPR (our legitimate interest in a working contact form).
• Operating and securing the website (server logs) — Art. 6(1)(f) GDPR (our legitimate interest in a secure, working website).
• Contracts and accounting (if we do business together) — Art. 6(1)(b) GDPR (performing the contract) and Art. 6(1)(c) GDPR (legal obligation under Estonian accounting and tax law).

We do not use your data for automated decision-making or profiling.

4. Who receives your data

• Hosting provider: Akamai Technologies, Inc. (Linode). Our server is located in Frankfurt, Germany (EU). It hosts the website, the contact form messages and the server logs. See Akamai / Linode Privacy Policy.
• Email provider: our email service provider, which delivers a copy of each contact form message to our business mailbox.

Your data is stored in the EU. Our hosting provider's parent company is based in the USA; any access from outside the EU is protected by the EU–US Data Privacy Framework and / or Standard Contractual Clauses approved by the European Commission (Art. 45 and 46 GDPR).

We do not sell your personal data.

5. How long we keep it

• Inquiries and correspondence (contact form leads, including the IP address): 12 months after our last contact, unless a business relationship follows.
• Contract and accounting data (completed deals, invoices and related correspondence): 7 years from the end of the financial year, as required by the Estonian Accounting Act (Raamatupidamise seadus) and tax legislation.
• Server and security logs: up to 7 days.

After these periods the data is deleted or anonymised.

6. Cookies

This website does not use cookies or analytics / tracking tools.

7. Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data deleted;
• restrict or object to processing;
• receive your data in a portable format.

To use these rights, email sales@kryopouches.com. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, www.aki.ee) or the supervisory authority in your country.

8. Changes

We may update this policy. The current version is always published on this page.