Privacy Policy

1. Who We Are

Amikoi is a travel advisory service incorporated in the Republic of Estonia. For the purposes of data protection law (including the EU General Data Protection Regulation, "GDPR"), Amikoi is the data controller of your personal information.

Contact: [email protected]

2. What We Collect

When you join the Amikoi Waitlist, we collect:

Travel preferences include trip type, duration, budget, research habits, pain points, and value priorities — collected via the optional questionnaire.

We do not collect payment information or sensitive personal data at this stage.

3. How We Use Your Data

Your personal data is used to:

• Register your interest in Amikoi's services
• Notify you about launch updates and founding cohort availability
• Communicate pre-launch information about services
• Understand your travel needs and preferences to personalise our service
• Maintain the integrity and security of the Waitlist

We will not use your data for automated decision-making or profiling.

4. Data Sharing

We do not sell your personal data. We may share it with:

• Email service providers — for delivering waitlist communications (processed under data processing agreements)
• Analytics providers — aggregated, anonymised data only (no personally identifiable information)
• Legal authorities — only when required by law or to protect our legal rights

5. Data Retention

We retain your Waitlist data for as long as necessary to fulfil the purposes described in this policy, or until you request deletion. Specifically:

• Waitlist data: retained until Amikoi launches or you request removal
• Communication records: retained for 2 years after last interaction
• IP addresses: retained for 90 days for security purposes

6. Your Rights Under GDPR

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Restriction — request that we limit how we use your data
• Portability — receive your data in a structured, machine-readable format
• Object — object to our processing of your data
• Withdraw consent — at any time, without affecting the lawfulness of processing before withdrawal

To exercise any of these rights, email [email protected]. We will respond within 30 days.

7. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including:

• Encryption of data in transit (TLS) and at rest
• Access controls and authentication
• Regular security assessments
• Incident response procedures

In the event of a data breach affecting your personal data, we will notify you and the relevant supervisory authority within 72 hours, as required by GDPR.

8. International Transfers

Amikoi is based in the EU. If your data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

9. Cookies and Tracking

The Amikoi waitlist page may use essential cookies for functionality. We do not use tracking cookies or advertising pixels at the Waitlist stage. Any analytics data collected is aggregated and anonymised.

10. Children's Privacy

Amikoi's services are not directed at individuals under 18. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact [email protected] and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the email you provided or by notice on our website. The "Effective Date" at the top indicates when this policy was last revised.

12. Supervisory Authority

If you are dissatisfied with how we handle your data, you have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):

Website: www.aki.ee
Email: [email protected]