Privacy Policy
Updated: 12 June 2026
On this page, we explain how Viral Links processes personal data. We believe it is important to keep data collection to a minimum and to process data confidentially.
1. Controller
Viral Links
Contact details: riku@virallinks.fi
For privacy-related matters, you can contact us using the same email address.
2. What data do we collect and why?
Before becoming a client: contact requests
The Viral Links website is a cookieless website. The website does not use cookies and does not collect personal data based on browsing alone.
If you contact us through a form, we process the information that you provide in the form. This may include, for example:
When a form is submitted, technical source information related to the contact request may also be processed, such as the page from which the form was submitted, the time of submission, referrer, landing page, UTM parameters and ad click parameters. This information is used to understand the origin of the contact request.
- name
- email address
- phone number
- company name
- website address
- message content
- the service you are interested in
- any calculator or assessment tool selections linked to the form
Flow of form data
Form data is securely forwarded through Resend and arrives in Viral Links' email in the Google Workspace environment.
Form data is not stored in a separate website database.
Viral Links may receive an internal notification about new contact requests in Discord. The notification may include the form information needed to notice and process the contact request.
During the client relationship
When we work together, we process the data needed to manage the client relationship, invoicing and project delivery.
This may include, for example:
- names and contact details of the client's contact persons
- basic company information
- information needed for the project
- information needed for advertising, measurement and reporting
- information related to invoicing, agreements and managing the client relationship
3. Tools we use during client work
Google Workspace and Google tools
Viral Links uses Google Workspace and other Google tools for communication, documentation, project management, reporting and client work.
These may include, for example:
During client work, data may also be processed in the client's own Google services, such as Google Ads, Google Analytics, Google Tag Manager, Google Merchant Center or Google Looker Studio.
In these situations, Viral Links acts according to the access rights granted by the client and the agreed assignment. The client's own Google accounts and advertising, analytics or reporting services are also subject to the terms, privacy policies and data management settings of those services.
- Gmail
- Google Drive
- Google Docs
- Google Sheets
- Google Slides
- Google Meet
- Google Calendar
- Google Looker Studio
OpenAI Business / ChatGPT
Viral Links may use OpenAI Business / ChatGPT tools to support client work. Under OpenAI's business-use terms, data processed in the ChatGPT Business environment is not used by default to train OpenAI's models.
Other service providers
Viral Links may also use other service providers, for example for forwarding forms, internal notifications, the technical implementation of the website, invoicing and accounting.
4. Regular disclosures and subprocessors
We do not sell, rent or disclose personal data to third parties for marketing purposes.
We use trusted service providers to enable the technical implementation of the website and client work. These may include, for example:
Service providers process data only to the extent required to provide the service.
Because we use modern cloud services, data may technically be transferred to or stored outside the EU/EEA. We aim to ensure that service providers commit to safeguards required by the GDPR, such as standard contractual clauses or other applicable transfer mechanisms.
- Google Workspace and Google Cloud services
- Resend
- Discord
- OpenAI
- Cloudflare
- website hosting and infrastructure services
- invoicing and accounting services
5. Legal bases for processing
Depending on the situation, the processing of personal data is based on one or more of the following legal bases.
Preparing or performing a contract
When you contact us to request an assessment, offer or more information about a service, processing may be necessary in order to take steps prior to entering into a contract.
If you are a client, data is processed for the performance of a contract.
Legitimate interest
We may process personal data based on legitimate interest, for example to respond to contact requests, manage client relationships, ensure website security, develop services and understand the source of contact requests.
Legal obligation
In some situations, data may be processed to comply with legal obligations, such as accounting or taxation obligations.
Consent
If any processing is based on consent, you may withdraw your consent at any time.
6. Data retention
Contact requests
If a contact request does not lead to a client relationship or other cooperation, the information related to the contact request is retained only for as long as handling the request requires. Unnecessary data is deleted regularly.
Client data
Data processed during a client relationship is retained for as long as the client relationship is active and afterwards for as long as necessary, for example because of the agreement, customer service, invoicing, accounting or legal obligations.
After the client relationship ends, we retain only the data that we have a justified need or legal obligation to retain.
7. Data security
We protect personal data with appropriate technical and organisational measures.
These include, for example:
- limiting access only to people who need it
- access rights management
- secure cloud services
- data minimisation
- avoiding unnecessary data
- handling form data server-side
- technical protection of the website against harmful traffic
8. Your rights
Under applicable data protection law, you have the right to:
If you have questions about privacy or want to exercise your rights, contact us by email:
riku@virallinks.fi
We may ask for additional information if needed to verify your identity.
- request access to the data we hold about you
- request correction of inaccurate data
- request deletion of your data
- request restriction of processing
- object to the processing of your data in certain situations
- request data portability where the right applies
- withdraw consent if the processing is based on consent
9. Right to lodge a complaint
If you believe that your personal data is being processed unlawfully, you have the right to lodge a complaint with the competent data protection authority.
In Finland, the supervisory authority is the Office of the Data Protection Ombudsman.
10. Cookies and browser storage
The Viral Links website does not use cookies.
The website's possible limited browser storage is explained in more detail in the cookie policy:
11. Changes to this policy
We may update this privacy policy if our services, the tools we use or our personal data processing practices change.
