Privacy policy
What we collect, why, who helps us, and the choices you have. Written to be read in a few minutes.
Who we are
Elias+Wood is the trading name of CEPW OÜ, a company registered in Estonia (registration number 14053371), based in Tallinn.
CEPW OÜ decides how your personal data is used on this site, so under the GDPR we are the "controller" of it.
For any question about your data, email hello@eliaswood.com or call +372 5685 4630.
What this policy covers
This website, eliaswood.com, and the emails and calls you send us after reading it.
What we collect and why
When you email or call us. We receive what you choose to send: usually your name, your email address or phone number, and your message. We use it to reply to you and, if we agree to work together, to plan and carry out that work. The legal basis is taking the steps you ask for before a contract, and then the contract itself.
When you ask to subscribe. The "Subscribe" button on the Insights page opens an email to us. If you send it, we use your email address only to send you new articles. The legal basis is your consent. You can stop at any time by replying "unsubscribe".
When you visit the site. Like every website, ours receives the technical details your browser sends with each request: your IP address, the type of browser and device, the page you asked for and the time. Our hosting provider uses them to deliver the pages and to protect the site from attacks. The legal basis is our legitimate interest in a site that works and is safe.
When a page is not found. If someone asks for a page that does not exist, the site notes the address asked for, the page that linked to it and the type of browser, so we can fix broken links. It does not note your IP address.
What we do not do
- The site has no contact form and no visitor accounts.
- We do not use analytics or advertising tracking on this site.
- We do not sell your personal data, and we do not use it for automated decisions about you.
Cookies
A cookie is a small file that a website stores in your browser.
The public pages of this site set no cookies. We checked: the pages send no cookies, and they load no analytics, advertising or social media tools and no forms.
The editing area. Only our own editors sign in to the site's private editing area. There, Cloudflare Access, the sign-in service that guards it, sets these cookies. They are strictly necessary: without them an editor cannot sign in.
| Cookie | Set by | What it is for |
| CF_AppSession | Cloudflare Access | Part of the sign-in step |
| CF_Authorization | Cloudflare Access | Shows that an editor has signed in |
Security. Cloudflare, which protects the site, can set a security cookie (for example __cf_bm) if it needs to check that traffic comes from a person and not a bot. It is strictly necessary and is not used to identify you. None was set when we checked.
Strictly necessary cookies do not need your consent under EU rules, which is why this site shows no cookie banner. If we add analytics later, we will ask for your consent first and update this policy.
Who helps us
We share personal data only with the providers below, who handle it for us and on our instructions, or where the law requires it.
- Cloudflare, our hosting provider: it serves the website, its pictures and its database.
- Our email provider: it receives and stores the emails you send us.
Some of these providers may handle data outside the European Economic Area. When they do, the GDPR requires safeguards, such as the European Commission's standard contractual clauses.
How long we keep it
We keep your emails for as long as we need them to answer you and to keep our business records. If we work together, we keep what the law requires for accounting. The not-found notes are kept in a small, capped list in which the oldest are removed first.
Your rights
Under the GDPR you can ask us:
- for a copy of the personal data we hold about you;
- to correct it, or to delete it;
- to limit how we use it, or to stop using it;
- to give it to you, or to another organisation, in a common format.
Where we rely on your consent, you can withdraw it at any time. Email hello@eliaswood.com and we will reply within one month.
Complaints
If you are not happy with how we handle your data, please tell us first. You can also complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee, or to the data protection authority in your own country.
Changes to this policy
When we change how we use personal data, for example if we add analytics, we will update this page and the date below.
Last updated: 6 October 2026