Privacy Policy
Last updated: 9 July 2026
Ponoren OÜ, operating as VolumeLead Agency (“VolumeLead”, “we”, “us”), registered in Estonia, is the data controller for personal data collected through this website.
This policy explains, in plain English, what little we collect, why we collect it, who processes it, and the rights you have over it. It applies to this website only. Client engagements are covered by their own agreements.
The short version
This site sets no cookies, runs no analytics, and does not track you. The only personal data we receive is what you type into the contact form, and we use it for one thing: replying to you.
Information we collect
When you submit the contact form, we receive:
- Your name
- Your work email address
- Your company name
- The monthly budget range you select
- The message you write
Technical data
Our hosting provider processes standard technical data (IP address, browser type, and requested pages) in short-lived server and security logs needed to serve and protect the site.
We set no cookies, use no analytics or advertising trackers, build no profiles, and buy no data about you from third parties.
How we use your information
We use your form submission to read and respond to your inquiry, prepare for a strategy call you requested, assess whether we are a fit, and follow up on that conversation. We use technical data to operate, secure, and debug the website.
We do not add you to marketing lists without asking first, and we never sell personal data.
Legal bases (GDPR)
Where the GDPR or UK GDPR applies, we rely on the following legal bases:
- Taking steps at your request before entering into a contract (Art. 6(1)(b)) when handling your inquiry
- Our legitimate interests (Art. 6(1)(f)) in responding to business inquiries you initiated and in keeping the site secure
- Compliance with legal obligations, where applicable
- Your consent, where we explicitly ask for it
Who we share it with
We share personal data only with the service providers that make this site work:
- Vercel Inc. (website hosting): processes site requests and server logs, and may process data in the United States.
- Resend Inc. (email delivery): form submissions are delivered to our team inbox as email through Resend, which processes the message content in transit.
- Professional advisers or public authorities, where the law requires it.
No sale of personal information
We do not sell personal information and do not “share” it for cross-context behavioral advertising as those terms are defined by the California Consumer Privacy Act (CCPA/CPRA).
International transfers
Because our providers operate globally, form data may be processed outside Estonia and, where the GDPR applies, outside the EEA or UK. Where required, we rely on appropriate safeguards such as adequacy decisions or Standard Contractual Clauses with our providers. Contact us for more detail on the safeguards in place.
How long we keep it
We keep inquiries only as long as needed to handle the conversation and any engagement that follows, typically no longer than 24 months after our last contact, and then delete them. Hosting logs rotate on our provider's short standard schedule.
You can ask us to delete your inquiry at any time.
Your rights
Where the GDPR or UK GDPR applies, you have the right to access, rectify, and erase your personal data. You can also restrict or object to its processing, request data portability, withdraw consent at any time, and lodge a complaint with your supervisory authority.
If you are a California resident, you have the right to know and access the personal information we hold about you, to correct or delete it, to opt out of its sale or sharing (we do neither), to limit the use of sensitive personal information (we do not collect any), and to not be discriminated against for exercising these rights.
To exercise any right, email hello@volumelead.com. We verify requests, respond within the statutory timeframes, and do not charge for reasonable requests.
Security
The site is served exclusively over HTTPS with strict security headers. Form data goes directly to our team inbox rather than a public-facing database, and access to that inbox is limited to the VolumeLead team.
No internet transmission is 100% secure, and we cannot guarantee absolute security, but we keep the surface area deliberately small.
Children
VolumeLead is a business-to-business service. This site is not directed at children, and we do not knowingly collect data from anyone under 16. If you believe a child has sent us personal data, email us and we will delete it.
Third-party links
The site may link to third-party websites and platforms. Their privacy practices are governed by their own policies, which we do not control.
Changes to this policy
We may update this policy as the site or the law changes. We will post the new version here with an updated date and flag material changes prominently.
Contact us
Privacy questions and requests: hello@volumelead.com.
Ponoren OÜ, Pärnu mnt 30, Kesklinna linnaosa, 10141 Tallinn, Harju maakond. Where the GDPR applies, you may also complain to your local supervisory authority.