Privacy Policy

for pigoid.com

Last updated: September 22, 2026

1. Introduction

This Privacy Policy explains how Cum Laude OÜ (“we”, “our” or “us”) processes personal data when you visit pigoid.com (the “Website”), make a voluntary contribution, purchase a digital product where offered, or contact us. Pigoid is a brand owned and operated by Cum Laude OÜ.

We are responsible for processing personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Estonian Personal Data Protection Act and other applicable laws.

2. Data Controller

Cum Laude OÜ
Registry code: 16686169
Hiie tn 19, Pärnu, Pärnu County 80027, Estonia
Email: info@pigoid.com

3. Personal Data We Collect

The information processed depends on your interaction with the Website and your consent choices:

  • Contact and identity information: your name, email address and information you provide in correspondence or during a transaction.
  • Transaction information: contribution or purchase amount, currency, date, payment status, transaction identifier, billing details and limited payment-method information made available by Stripe. Payment card details are handled by Stripe; we do not receive or store your complete payment card number or security code.
  • Optional supporter acknowledgement: your chosen display name and your permission to consider it for the film credits.
  • Technical and security information: IP address, browser and device information, requests to the Website and information needed to detect errors, abuse or security incidents.
  • Analytics information, with your Statistics consent: pages visited, referral information, approximate location, device and browser characteristics, identifiers, session information and Website interactions. Smartlook can reconstruct sessions from Website content and interactions such as clicks and scrolling.
  • Advertising information, with your Marketing consent: page addresses, page-view events, referral and advertising identifiers, IP address, browser/device information and associated timestamps processed through Google Ads and Meta Pixel.
  • Consent records: your cookie-category choices and information used to remember those choices.

Please do not send unnecessary sensitive information or include sensitive information in an optional supporter display name.

4. How We Collect Your Personal Data

We receive information directly from you when you contact us, submit an optional supporter name or make a contribution or purchase. Stripe provides us with information needed to confirm and administer transactions.

Some information is generated when your browser requests Website content. Optional analytics and advertising information is collected through cookies, tags and similar technologies according to your consent choices. Our cookie banner and consent settings are provided by Complianz.

5. Voluntary Contributions and Supporter Acknowledgements

Contributions are processed on a Stripe-hosted payment page. Stripe processes payment and contact information and provides us with transaction details for administration, receipts, payment issues, fraud prevention and record-keeping. Stripe’s own privacy information applies to its payment services.

Where the optional supporter acknowledgement is offered, you may choose whether your name may be considered for inclusion at the end of the Pigoid film. Providing a name is not required to make a contribution.

We rely on your separate consent to publish your chosen name. If selected, it may appear in the film’s end credits and be visible worldwide through screenings, streaming, broadcasts and other authorised distribution. Inclusion is not guaranteed; we may omit names for production, technical, legal, safety or editorial reasons.

To correct your name or withdraw permission, contact info@pigoid.com. Please contact us before the credits are finalised wherever possible. Withdrawal does not affect the lawfulness of earlier processing. We will assess and act on your request under applicable law; copies already released or held by third parties may be beyond our ability to recall or change. This practical limitation does not remove your statutory rights.

We do not use your contribution email address for email marketing without separate consent.

6. Cookies and Your Choices

Cookies and similar technologies help operate the Website, remember choices and, with your consent, analyse usage and support advertising. The categories in our consent settings are:

  • Functional: necessary functionality, security and remembering consent choices. These essential functions remain active.
  • Preferences: optional functionality that remembers browsing preferences.
  • Statistics: analytics, including Google Analytics and Smartlook.
  • Marketing: advertising technologies, including Google Ads and Meta Pixel.

Our consent setup is intended to activate optional analytics after Statistics consent and advertising tags after Marketing consent. You can decline optional categories without being required to consent to advertising or analytics to make a contribution.

To review or withdraw your choices, open our Cookie Policy and its “Manage your consent settings” section, or use the Website’s Manage Consent control where displayed. The Cookie Policy also provides information about individual cookies. You can delete cookies in your browser; deleting them may cause the banner to appear again.

Changing your consent affects subsequent processing and does not automatically delete data already lawfully collected. Contact us if you also wish to request deletion. Settings on a Stripe-hosted payment page or another external website are governed by that service’s own controls.

7. Third-Party Services

Google Analytics 4

With Statistics consent, Google Analytics helps us understand traffic, referral sources and Website usage. It processes identifiers and information about pages, sessions, devices and interactions. Reports help us improve the Website; analytics data should not be assumed to be fully anonymous.

Smartlook

With Statistics consent, Smartlook provides behavioural analytics, heatmaps and session replay. It can process device/session identifiers, page content and interaction data to help us understand navigation and usability problems. Session replay concerns activity on the Website, not a webcam recording or a recording of your entire computer. Information: Smartlook privacy information.

Google Ads

With Marketing consent, the Google advertising tag processes Website visits and related identifiers to support advertising measurement and remarketing. This can allow advertising audiences to be based on earlier visits and ads to be shown on other sites or services. Google may associate information with other information it holds according to its policies and your Google settings.

Information about Google’s processing: How Google uses information from sites and apps that use its services.

Meta Pixel

With Marketing consent, Meta Pixel sends Website activity, such as page views, and technical information to Meta. Meta can associate this information with a Facebook or Instagram account and use it for advertising measurement and audience matching, including remarketing. Information: Meta Privacy Policy.

Current payment measurement: our current advertising setup does not include a dedicated completed-contribution event or contribution amount/currency reporting to Google Ads or Meta. Processing payment records through Stripe is separate from advertising measurement. We will review this notice and the consent setup before introducing additional payment-conversion tracking.

Google Tag Manager and Site Kit

These tools help integrate and manage Website tags and Google services. A tag-management tool does not replace consent requirements for the services it loads.

Stripe

Stripe processes payments, payment confirmations, security and fraud-prevention information. Depending on the activity, Stripe acts as our processor or as an independent controller, including for some regulatory and security purposes. See the Stripe Privacy Policy.

Vimeo and embedded content

We embed Vimeo videos. When an embedded player loads, your browser connects to Vimeo and may transmit IP address, browser/device information and video interactions. Optional embedded content is subject to the relevant consent controls on the Website. See Vimeo’s Privacy Policy. Following links to external websites brings you under those websites’ privacy practices.

8. Purposes and Legal Bases

  • Consent (Article 6(1)(a) GDPR): optional analytics, advertising and preference technologies, and separately the optional publication of a supporter name.
  • Contract or steps requested by you (Article 6(1)(b)): processing needed to fulfil a purchase, deliver a product where offered or carry out an agreed payment transaction.
  • Legal obligation (Article 6(1)(c)): accounting, tax records and responding to legally binding requirements.
  • Legitimate interests (Article 6(1)(f)): administering voluntary contributions where not covered by a contract, answering enquiries, maintaining Website security, preventing fraud and handling disputes, after considering your rights and interests.

We do not rely on legitimate interests as a substitute for consent to non-essential analytics or advertising cookies. You may withdraw consent at any time. Necessary payment information is required to process a transaction; optional tracking and supporter acknowledgement are not.

9. How We Use Your Personal Data

We use the information described above to operate and secure the Website, administer contributions and purchases, issue confirmations, respond to enquiries, fulfil record-keeping obligations and handle disputes. With the relevant consent, we also analyse usage, improve usability and support advertising measurement and remarketing. A chosen supporter name is considered for publication only with the separate permission described above.

We do not sell personal data for money. Consented advertising involves sharing information with Google and Meta as explained in this policy.

10. Recipients and Sharing

Recipients may include:

  • Website hosting, infrastructure, email and technical support providers.
  • Stripe and payment-related partners needed to process transactions.
  • Google and Smartlook for consented analytics; Google and Meta for consented advertising.
  • Vimeo when its embedded content loads.
  • Film production and distribution partners where needed to prepare and publish an optional supporter acknowledgement.
  • Accountants, legal advisers and authorities where necessary or legally required.

Processors act under applicable processing arrangements. Providers acting as independent controllers are responsible for their own processing as described in their privacy notices. Where joint controllership applies to a specific processing activity, the relevant service terms allocate responsibilities; you can contact us about your rights.

A supporter name included in released credits is public. Your payment details and email address are not included in the credits.

11. Data Retention

Retention depends on the purpose and type of information:

  • Transaction and accounting records: retained for the applicable statutory accounting and tax periods, and longer only where a lawful requirement or a specific dispute requires it.
  • Correspondence: retained while handling your request and for as long as reasonably needed to document its resolution or address related claims.
  • Technical and security records: retained for operational troubleshooting and security needs; records relating to incidents may be kept while those incidents are investigated.
  • Analytics and session recordings: retention is governed by the service’s configured retention window and the purpose of analysing Website usage. Cookie expiry is separate from how long a provider retains collected data.
  • Advertising information: retention depends on the relevant provider’s processing and applicable audience or data-retention settings. Provider notices linked above explain their practices.
  • Supporter acknowledgement: retained as needed to prepare the credits, document permission and distribute the film. Names already published may remain in distributed copies, subject to applicable rights.

You may contact us for information about the retention applicable to your data. When data is no longer necessary and there is no lawful reason to retain it, we delete it or irreversibly anonymise it.

12. International Transfers

Our service providers may process data outside the European Economic Area, including in the United States. Such processing is subject to applicable GDPR transfer requirements. Depending on the provider and transfer, safeguards may include a European Commission adequacy decision or Standard Contractual Clauses with any necessary supplementary safeguards. We do not assume that every provider or transfer is covered by the same mechanism.

Contact us to request information about the safeguards applicable to a particular transfer or a copy of relevant safeguards, subject to necessary redactions. Provider privacy information is linked in section 7. An optional name published in film credits may also become accessible worldwide.

13. Security

We use technical and organisational measures appropriate to the risks to protect personal data against unauthorised access, disclosure, alteration and loss. No online transmission or storage system is completely secure.

14. Your Rights

Subject to the GDPR’s conditions, you may request access, correction, erasure, restriction of processing or data portability, and may object to processing based on legitimate interests. You may object to direct marketing, including related profiling, and withdraw consent at any time.

Send requests to info@pigoid.com. We may need proportionate information to verify your identity. We normally respond within one month; if a lawful extension is necessary, we will explain it within that period. Some data may need to be retained to meet legal obligations or establish, exercise or defend legal claims.

You may complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon) or to the competent supervisory authority in your country of habitual residence, place of work or the alleged infringement.

15. Children’s Privacy

The Website is intended for a general audience and is not specifically directed at children. We do not knowingly collect personal data from children without parental authorisation where such authorisation is required. Where a person cannot validly make a payment or give consent independently, appropriate parent or guardian involvement is required.

Please contact us if you believe a child’s information has been collected without the necessary authorisation.

16. Changes to This Policy

We may update this policy to reflect changes in our processing or legal requirements. The current version is published on this page with its update date. Where a change requires new consent or additional notice, updating this page alone does not replace that requirement.

17. Contact Information

Cum Laude OÜ
Registry code: 16686169
Hiie tn 19, Pärnu, Pärnu County 80027, Estonia
Email: info@pigoid.com

info@pigoid.com