Privacy policy
This website sets no cookies and builds no profiles. Fonts and all other assets are served from this domain; your browser makes no requests to third parties when you visit. We measure the site's reach without cookies using Plausible, as described below. The only input on this site, the address of your studio website, is not processed here but handed over to our portal, see below.
You are not obliged to provide any personal data. Without the technical connection data described below, the site cannot be delivered. We make no automated decisions and do no profiling.
Controller
- Controller
- Leon & Vera OÜ
- Data protection officer
- heyData GmbH, Schützenstraße 5, 10117 Berlin, Germany, datenschutz@heydata.eu
- Address
- Sepapaja tn 6, 15551 Tallinn, Estonia
- Contact
- hello@leonandvera.com
Hosting and server logs
This website is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. When you visit the site, the hosting provider automatically processes technical connection data (IP address, date and time of access, requested resource, browser and operating system information) in server logs. This processing is necessary to deliver the website and to ensure its stability and security (Art. 6(1)(f) GDPR). Transfers to the USA are safeguarded under the EU-US Data Privacy Framework and standard contractual clauses; a copy of the safeguards is available on request. Log data is not merged with other data sources and is kept only as long as needed for security and stability, then deleted.
Reach measurement
We measure the use of this website with Plausible Analytics, a service of Plausible Insights OÜ, Västriku tn 2, 50403 Tartu, Estonia. Plausible sets no cookies, stores no IP addresses and builds no profiles. It records page views, the referring page, browser and device type and the country, aggregated and without reference to any person. The measurement runs through our own domain and is forwarded to Plausible on our server; your browser still makes no request to third parties. The legal basis is our legitimate interest in a data-sparing measurement of reach (Art. 6(1)(f) GDPR). The data stays in the EU.
Entering your website
When you enter your studio website on the start page, it is not processed on this site but handed over in the link to our portal app.leonandvera.com, where you create your account. The portal's privacy notice applies there. This site does not store the address.
If you use our software: processing on your behalf
If you use the software for your studio, we process your prospects' data - who enquires, what they write, which trial session they book - on your behalf. For that you are the controller and we are the processor under Art. 28 GDPR. What that means, which providers we use for it and how we protect the data is set out in the data processing agreement you conclude at sign-up. For the data of your own account - your e-mail address, your settings, your invoices - we remain the controller, and this policy applies.
Google Calendar
If you connect your Google Calendar in the portal, we access your calendars with your permission through the Google Calendar API (scopes calendar.readonly and calendar.events). We read the list of your calendars and the free and busy times of the calendar you choose, to determine free slots for trial sessions, and we create the appointments for booked trial sessions there; only those appointments are changed or deleted. We do not read other appointments, store them or show them to anyone. We store only the access token Google issues, encrypted in our database, and the identifier of the chosen calendar. You can disconnect at any time in the portal's settings or in your Google account; we then delete the token. Data received from Google APIs is used in accordance with the Google API Services User Data Policy, including the Limited Use requirements: only for the function described here, never passed on, never sold, not for advertising and not to train models.
Contact by email
If you contact us by email, we process the personal data you provide (name, email address, content of your message) to handle your enquiry (Art. 6(1)(b) and (f) GDPR). We keep correspondence only as long as needed for this purpose or as required by statutory retention duties. Our email runs on Google Workspace (Google Ireland Ltd. / Google LLC); the same transfer safeguards described above apply.
External links
This site links to brand websites such as sestala.com and robla.fit. Those sites are separate services with their own privacy policies.
Your rights
Under the GDPR you have the right to access, rectification, erasure, restriction of processing, data portability and objection. You also have the right to lodge a complaint with a supervisory authority - in Estonia, the Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) - or with the supervisory authority of your place of residence.
Right to object
Where we process data based on legitimate interests, you can object at any time for reasons arising from your particular situation. Write to hello@leonandvera.com.
Last updated: September 2026