Stoneks OÜ · effective from 20 October 2026
Privacy Policy
This page explains what personal data Stoneks OÜ (registry code 14270312, Vesilennuki 20, Tallinn; hereinafter “Stoneks”) collects on the website stoneks.com, what the data is used for and what your rights are.
Stoneks OÜ is part of Loneva Holding, a stone manufacturing and sales group that also includes Stoneks AB and the group’s own stone factory, Nordgranit OÜ. The group covers the entire value chain – from manufacturing in our own factory to sales, measurement, delivery and installation.
1. What data we collect
- Quote requestname, email, phone, location of the work, dimensions, description, uploaded drawings or photos, selected stones.
- Bookingwhen you book a time at the sample showroom via Acuity Scheduling: name, email, phone and the selected time.
- Website useGoogle Analytics 4 collects anonymous usage statistics (page views, device, country, traffic source). To identify the source of an enquiry, we store advertising and campaign parameters (e.g. utm, gclid) in cookies so that we know where the enquiry came from.
- Chatname, email, phone (optional), location, your answers about the project (room, stone, dimensions, timing) and messages you provide in the website chat window (Pipedrive LeadBooster), including a chat with a sales representative.
2. What we use the data for
To prepare and send quotes, to arrange measurement and installation, to perform the contract and fulfil the warranty, to respond to enquiries and to measure the performance of the website and marketing. The legal basis is taking the steps necessary to enter into a contract (quote, order), our legitimate interest (handling enquiries, analytics) and your consent (marketing cookies, where these are enabled). We process enquiry and chat data to answer your enquiry and prepare a quote (steps prior to entering into a contract, Article 6(1)(b) GDPR). Managing enquiries in our customer system, routing them to the right sales team, filtering spam and measuring the performance of our advertising are based on our legitimate interest in replying quickly and accurately and in managing our marketing (Article 6(1)(f)); you may object to that processing at any time.
3. Who we share data with
Data is processed on our behalf by service providers: Pipedrive (customer management and chat; Pipedrive OÜ, Estonia, data stored in Pipedrive’s EU data centre), Anthropic (AI assistance, see section 3a), Postmark (sending emails), Acuity Scheduling (bookings), Google (Analytics and reCAPTCHA for spam protection) and the web hosting provider. Data is not sold to third parties.
The group’s own factory. We share enquiry and order data with Nordgranit OÜ, the group’s own stone factory, so that your products can be manufactured, delivered and installed. Nordgranit OÜ also runs the group’s shared enquiry and customer management platform, where your enquiry and order are handled. Nordgranit OÜ uses the data only for these purposes and under an intra-group data processing agreement that gives your data the same protection throughout the group.
Advertising measurement. To measure the performance of our advertising, we send Meta Platforms Ireland Ltd, through the group’s shared advertising account (Stoneks AB), data on the progress of your enquiry at the following points: when the enquiry is received, when it is passed to the sales team, when you book a showroom visit and when the enquiry is closed (with or without an order). We send a hashed (pseudonymised) email address, phone number and enquiry ID, the web page the enquiry came from and, where available, technical data (IP address, browser identifier and Meta cookie and ad-click identifiers); when the enquiry is closed, also the value and currency of the quote or order. Meta matches the data against its users solely to measure the results of our advertising. The basis is our legitimate interest in measuring and managing our marketing (Article 6(1)(f)). You may object at any time by emailing sales@stoneks.com: we will flag your contact details in our system and no further data about your enquiry, including its outcome, will be sent to Meta; data already sent cannot be recalled. We will reply within one month. Meta may process the data in the USA under the EU–US Data Privacy Framework.
Transfers outside the European Union. Data is generally stored in the EU. The AI service (Anthropic, PBC), Pipedrive’s sub-processors (Amazon Web Services, Cloudflare) and the providers of the group platform (Vercel Inc., Supabase Inc.) may process data in the United States. Such transfers are protected by the European Commission’s standard contractual clauses (Article 46(2)(c) GDPR) and supplementary measures, including encryption. The chat messaging sub-processor is located in the United Kingdom, which is covered by a European Commission adequacy decision (Article 45). You can request a copy of the clauses by writing to sales@stoneks.com.
3a. AI assistance in handling enquiries
To reply quickly, we use an artificial intelligence (AI) service that reads your enquiry (the message and contact details), summarises it, identifies the project type, material and location, and filters out spam so that the enquiry reaches the right sales team. The AI does not make decisions about you: every enquiry is reviewed and handled by a member of our staff. The provider, Anthropic, PBC (USA), processes the data on our behalf under a data processing agreement and the European Commission’s standard contractual clauses, deletes the data within 30 days and does not use it to train its models.
4. Retention
We keep enquiry and quote data for up to 3 years from the last communication, and data related to orders and warranties for the duration of the accounting and warranty obligation periods. Analytics data is anonymous and is retained in accordance with the Google Analytics settings. The AI provider deletes the data sent to it within 30 days; the summary and extracted fields are kept by us together with the enquiry for the retention period stated above (3 years).
5. Cookies
We use necessary cookies (for forms and chat to work), analytics cookies (GA4) and attribution cookies (_track_*), which store the source of an enquiry for up to 90 days. You can manage cookies in your browser settings.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to object to processing based on legitimate interest (including advertising measurement), to receive the data you provided in a machine-readable format, and to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon). Requests: sales@stoneks.com or +372 56 920 370.
7. Changes
We update this page when necessary; the current version is always available at this address.