Privacy
Privacy notice
How CGLA Investment OÜ collects, uses and protects the personal information you share with us through this website. We collect the minimum needed to respond to enquiries — nothing more.
Last updated: 10 May 2026
Who we are
CGLA Investment OÜ is the data controller for personal information collected through this website. We are an Estonian-registered private limited company with an operating team in London. You can reach us at info@cgla.ee for any privacy-related question.
What we collect
When you use the contact form we collect your name, work email, company (if you provide it), and the message you write. The site also stores one cookie to remember your language choice (NEXT_LOCALE) and one to remember that you have seen this notice (cgla-cookies-v1). We do not use analytics, advertising or third-party marketing cookies.
Why we collect it
We use your contact details for one purpose: to respond to your enquiry. We rely on legitimate interest (GDPR Art. 6(1)(f)) — replying to a request you initiated. We will not use your information for unsolicited marketing.
How long we keep it
Enquiry correspondence is kept for up to 24 months after our last exchange, after which it is deleted. If a client engagement begins, retention is governed by the engagement letter and applicable record-keeping requirements.
Who we share it with
Form submissions are transmitted via Resend (transactional email service, EU region) and arrive at our Zone.eu mailbox hosted in Estonia. We do not share your information with marketing platforms, advertisers or any third party outside this delivery chain.
Where it is stored
Email infrastructure operates within the EU/EEA. Our case files for active engagements are stored on EU-region cloud services. We do not transfer personal data outside the EEA without an appropriate safeguard.
Your rights
Under the GDPR you can ask us to: confirm what we hold about you; correct it; delete it; restrict or object to its use; or receive a copy in a portable format. Write to info@cgla.ee and we will respond within 30 days. You also have the right to complain to your supervisory authority — in Estonia, the Andmekaitse Inspektsioon (AKI); in the UK, the Information Commissioner's Office (ICO).
Cookies
This site uses only strictly necessary cookies: NEXT_LOCALE (your language preference, retained for 12 months) and cgla-cookies-v1 (a record that you have seen this notice). No analytics, advertising or social-media trackers are loaded.
Changes to this notice
If we update this notice we will publish the new version here and update the date above. Material changes will be highlighted at the top of this page for at least 30 days.