Privacy notice
Privacy notice
This notice explains how personal data is processed when you use the Test Before You Build website or contact us through its form.
1. Controller and contact
The controller is Kari Jääskeläinen, operating the Test Before You Build service. Privacy enquiries and requests can be submitted through thecontact form. Please write “Privacy request” at the beginning of the message. No data protection officer has been appointed because the processing does not require one.
2. Personal data we process
When you contact us, we process the information you provide: your name, email address, description of your idea, and information you provide about the intended customer or problem. Some forms may require these details so that we can assess the enquiry. We may also process subsequent correspondence and information needed to manage a potential customer relationship. Please do not include trade secrets, health information, or other sensitive personal data in the form.
3. Purposes and legal bases
We use enquiry data to respond to you, assess whether the service is a suitable fit, prepare possible next steps, and take measures at your request before entering into a contract. The legal basis is Article 6(1)(b) GDPR. Where an enquiry is made on behalf of an organisation, we also rely on our legitimate interest under Article 6(1)(f) GDPR in communicating with potential customers and developing our business.
We process limited technical data where necessary to operate, secure, and troubleshoot the website. This is based on our legitimate interest under Article 6(1)(f) GDPR in providing a secure and reliable service.
4. Analytics and cookies
We use Cloudflare Web Analytics to understand aggregate website usage and page performance. According to Cloudflare, Web Analytics does not use cookies, local storage, cross-site tracking, or fingerprinting and does not collect or use visitors’ personal data. We do not use advertising cookies or behavioural profiling on this website.
5. Service providers, recipients, and transfers
Form submissions are processed by Formspree, Inc. as our service provider. Cloudflare, Inc. provides website delivery, security, and Web Analytics services. Relevant data may also be handled by our email and hosting service providers. We do not sell personal data.
Formspree and Cloudflare are headquartered in the United States, so processing may involve transfers outside the European Economic Area. Where required, these transfers are protected by the European Commission’s Standard Contractual Clauses and other applicable safeguards. Information about the providers’ safeguards is available in the Formspree security informationand the Cloudflare GDPR information.
6. Retention
Enquiries that do not lead to a customer relationship are deleted or anonymised no later than 12 months after the last communication. If a customer relationship begins, relevant information may be retained for the duration of that relationship and afterwards only as long as needed for accounting, legal claims, or other statutory obligations. Technical data is retained according to the applicable service provider’s retention settings and only for as long as necessary for security and operation.
7. Your rights
Subject to the conditions of the GDPR, you may request access to your personal data, correction or deletion of it, restriction of processing, and data portability. You may object to processing based on legitimate interests. To exercise these rights, use thecontact form and identify the request as a privacy matter. We may need to verify your identity before acting on a request.
You also have the right to lodge a complaint with a supervisory authority. In Finland, the authority is theOffice of the Data Protection Ombudsman.
8. Is providing data mandatory?
Providing personal data is voluntary and is not a statutory or contractual requirement. However, we need your name, email address, and a description of your idea to assess and respond to your enquiry. If you do not provide them, we cannot respond through the form.
9. Automated decision-making
We do not use personal data submitted through the website for automated decision-making or profiling, and we do not use form submissions to train AI models.
10. Changes to this notice
We may update this notice if the website, our processing activities, or legal requirements change. The latest version and its update date are published on this page.
Last updated: 11 September 2026