Privacy Policy
Last updated: 26 February 2026
1. Who We Are
GridArray OÜ ("GridArray", "we", "us", or "our") is a software contracting company registered in Estonia (registry code available upon request). Our registered address is:
Sepapaja tn 6Tallinn, Harju maakond, 15551
Estonia
We provide B2B software development services, including technology solutions building, AI-powered applications, full-stack engineering, and custom software solutions for businesses worldwide.
2. Scope of This Policy
This Privacy Policy explains how we collect, use, store, and protect information when you visit our website at www.gridarraytech.com (the "Site"). This Site is a professional services website directed exclusively at businesses and professionals. It is not directed at consumers or individuals under the age of 18.
3. Information We Collect
We do not require you to create an account, submit a contact form, or provide personal information to use our Site. The information we collect falls into the following categories:
3.1 Analytics Data (Google Analytics)
With your consent, we use Google Analytics (GA4) to collect anonymised usage data such as pages visited, session duration, referral source, device type, and approximate geographic location. Google Analytics uses cookies to distinguish unique users.
We implement Google Consent Mode v2, which means no analytics or advertising cookies are set until you explicitly grant consent via our cookie banner.
Legal basis: Your consent (Article 6(1)(a) GDPR).
3.2 Advertising Data (Meta Pixel)
With your consent, we may use the Meta Pixel (Facebook Pixel) to measure the effectiveness of our advertising campaigns on Meta platforms. The Meta Pixel may collect data such as pages visited, actions taken, and device information, which is shared with Meta Platforms, Inc. to deliver and optimise ads.
No Meta Pixel data is collected unless you grant consent for advertising cookies via our cookie banner.
Legal basis: Your consent (Article 6(1)(a) GDPR).
3.3 B2B Visitor Identification (Apollo.io)
We use Apollo.io's website visitor tracking to identify the companies visiting our Site based on IP address lookups and publicly available business data. This is used exclusively for our own B2B sales outreach purposes. We do not share this data with any third parties or partners.
Legal basis: Legitimate interest in understanding which businesses are interested in our services (Article 6(1)(f) GDPR).
3.4 Performance Monitoring (Vercel Speed Insights)
We use Vercel Speed Insights to monitor website performance metrics such as page load times and web vitals. This service collects anonymised, aggregated performance data and does not track individual users or use cookies.
Legal basis: Legitimate interest in maintaining a performant and reliable website (Article 6(1)(f) GDPR).
3.5 Consent Preferences
When you interact with our cookie banner, your consent preference (accepted or declined) is stored in your browser's local storage. This is not a cookie and is not transmitted to our servers. It is used solely to remember your preference on subsequent visits.
4. Cookies and Tracking Technologies
Our Site uses the following cookies and tracking technologies:
| Technology | Purpose | Type | Consent Required |
|---|---|---|---|
| Google Analytics | Site analytics & usage | Cookie | Yes |
| Meta Pixel | Ad measurement | Cookie / Pixel | Yes |
| Apollo.io Tracker | B2B visitor identification | Script | No (legitimate interest) |
| Vercel Speed Insights | Performance monitoring | Script | No (no personal data) |
| Local Storage | Consent preference | Browser storage | No (strictly necessary) |
You can manage your cookie preferences at any time by clearing your browser's local storage or cookies, which will cause the cookie banner to reappear on your next visit.
5. How We Use Your Information
We use collected information for the following purposes:
- To understand how visitors interact with our Site and improve its content and performance
- To measure the effectiveness of our advertising campaigns on Meta platforms
- To identify businesses that may be interested in our technology solutions services for our own sales outreach
- To maintain the security and performance of the Site
6. Data Sharing and Third Parties
We do not sell your personal data. We share data only with the following third-party service providers, who process data on our behalf:
- Google LLC - Analytics and advertising services (Google Analytics, Google Ads)
- Meta Platforms, Inc. - Advertising measurement (Meta Pixel)
- Apollo.io, Inc. - B2B visitor identification
- Vercel, Inc. - Website hosting and performance monitoring
Each of these providers has their own privacy policies governing their processing of data. We encourage you to review their respective privacy policies.
7. International Data Transfers
Our Site is hosted on Vercel infrastructure, and some of the third-party services we use (Google, Meta, Apollo.io, Vercel) are based in the United States. This means your data may be transferred to and processed in the United States.
These transfers are protected by appropriate safeguards, including Standard Contractual Clauses (SCCs) approved by the European Commission, or the EU-U.S. Data Privacy Framework where applicable, in accordance with Chapter V of the GDPR.
8. Data Retention
We retain data for only as long as necessary to fulfil the purposes described in this policy:
- Google Analytics data: Retained for 14 months (default GA4 retention period), then automatically deleted
- Meta Pixel data: Subject to Meta's data retention policies
- Apollo.io data: Retained for as long as necessary for sales outreach, then deleted
- Consent preferences: Stored in your browser until you clear your local storage
9. Your Rights Under GDPR
If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:
- Right of access - Request a copy of the personal data we hold about you
- Right to rectification - Request correction of inaccurate personal data
- Right to erasure - Request deletion of your personal data
- Right to restrict processing - Request that we limit how we use your data
- Right to data portability - Request a machine- readable copy of your data
- Right to object - Object to processing based on legitimate interest, including B2B visitor identification
- Right to withdraw consent - Withdraw your consent for analytics and advertising cookies at any time by clearing your browser storage
To exercise any of these rights, please contact us at contact@gridarraytech.com. We will respond to your request within 30 days.
You also have the right to lodge a complaint with a supervisory authority. For Estonia, this is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon).
10. Children's Privacy
Our Site and services are directed exclusively at businesses and professionals. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately at contact@gridarraytech.com and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or applicable laws. When we make material changes, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically for the latest information.
12. Contact Us
If you have any questions about this Privacy Policy or how we handle your data, please contact us: