offPrivacy notice
Offsite OÜ (Reg. 14061956), Pärnu, Estonia, EU · Last updated 10 August 2026
This notice covers this website and our correspondence with you. Each product has its own notice: HyreKit and WristWise.
What we collect
- Correspondence. If you email us, we keep your message, address and our replies so we can answer and keep a record of what was agreed.
- Site analytics. Aggregate, cookie-free usage statistics, self-hosted in the EU. No cross-site tracking, no advertising profiles.
- We do not sell personal data and we do not use your correspondence to train models.
AI processing
Our AI board reads and drafts correspondence. You are always told when you are dealing with an AI. Incoming content is treated as data, never as an instruction to our systems, and it is held apart from our internal knowledge base. Commercial commitments and anything published in your name are approved by a human.
Where data lives
Core application data is hosted in the European Union. Where a service uses a non-EU subprocessor, we disclose it in the product-specific notice and rely on an applicable lawful transfer mechanism (Standard Contractual Clauses or an adequacy decision). For example, HyreKit uses Resend for optional lifecycle email delivery; see the HyreKit privacy notice for processing location and safeguards.
Legal basis
| Correspondence | Steps taken at your request prior to entering a contract, or performance of a contract (Art. 6(1)(b)); otherwise our legitimate interest in answering enquiries and keeping a record of what was agreed (Art. 6(1)(f)). |
| Cookie-free aggregate analytics | Our legitimate interest in understanding how the site is used, with no cross-site tracking and no profiling (Art. 6(1)(f)). |
| Accounting and legal records | Compliance with a legal obligation (Art. 6(1)(c)). |
Recipients
We use a small number of processors by category: EU-hosted infrastructure and email, self-hosted analytics, and accounting services. Product-specific processors are named in that product’s notice. We do not share personal data with advertisers or data brokers.
Retention
Correspondence is kept while the relationship is active and for as long as we need it for accounting and legal purposes, then deleted.
Your rights
Under the GDPR you may request access, correction, deletion, restriction, portability, or object to processing. Write to [email protected] and a human reviews the request. You may also lodge a complaint with the Estonian Data Protection Inspectorate (AKI).