Privacy

Last updated: 12 October 2026

This notice explains how Natural Chaga OÜ handles personal data when you use SOLVIQA™, send a business enquiry or choose to receive the MUSHEEZ® newsletter.

Who is responsible

Natural Chaga OÜ, trading as MUSHEEZ®, is the controller of personal data collected through SOLVIQA™. Our Estonian registry number is 14486621 and our address is Kõrve, Pillapalu küla, Anija vald, Harju maakond, 74502, Estonia. Contact business@musheez.eu about this notice or your data rights.

Enquiries and business relationships

We collect your name, company, email address, target markets, countries, message and selected Concept Finder configurations. These may include the concepts, mushrooms, applications, vitamin systems, nutrient targets, extract amounts you choose. We also record the enquiry reference, time and submission metadata. We use this information to respond, send an acknowledgement and manage discussions about your project.

For company representatives, our lawful basis is our legitimate interest in answering business enquiries and managing professional relationships, under GDPR Article 6(1)(f). Where you personally request steps towards a contract with us, Article 6(1)(b) applies to the processing necessary for those steps. We use Article 6(1)(c) where a legal obligation requires it. Required contact fields let us respond; without them we cannot process a website enquiry. Please avoid sensitive personal information and confidential formulations.

Optional MUSHEEZ newsletter

Newsletter subscription is optional and separate from your enquiry. If you opt in, we use your email address for occasional MUSHEEZ® news and offers based on consent, under Article 6(1)(a). We record your choice, the wording and the time. Authorised staff may transfer consenting contacts and relevant consent evidence to Smaily, provided by Sendsmaily OÜ, Estonia. You can unsubscribe using the link in a newsletter or by emailing business@musheez.eu. Withdrawal does not affect the lawfulness of earlier processing. Enquiry acknowledgements do not subscribe you to marketing.

Security cookies and usage information

We process proportionate technical information for our legitimate interest in protecting the service and preventing spam. Hosting and security logs may include IP addresses, browser details, request times and security events. Gravity Forms does not store an IP address in the enquiry entry. Akismet screens relevant form information and technical metadata for spam; its privacy information is at Akismet privacy information.

The Concept Finder uses a session cookie for submission security and temporary rate limiting. Restricted preview access also uses a necessary access cookie, normally lasting about one hour. These are not advertising cookies. Your ideas list and selected liquid configurations are kept in browser session storage so they remain available as you move between pages in the same tab. They do not contain your contact details or message and are cleared when the tab session ends. Shared links contain concept choices and model settings, not your contact details or message; anyone receiving a link can read those choices subject to access controls.

We do not use optional browser-event analytics in the Concept Finder. The server records aggregate counts of saved enquiries without visitor identifiers in those counters. Hosting logs and stored enquiries are separate from these totals.

Who receives information

Authorised MUSHEEZ® staff handle enquiries. WordPress.com and Automattic provide hosting, database storage, security and backups; Automattic also provides Akismet. Gravity Forms stores enquiry records within our WordPress installation. Google Workspace handles enquiry emails. WP Mail SMTP, provided by WPForms LLC, connects our Google account through its one-click authorisation service; its message logging is disabled. Smaily handles newsletter contacts supplied by authorised staff. Advisers or authorities may receive relevant records when necessary for legal obligations or the establishment, exercise or defence of legal claims.

International processing

Our providers and their subprocessors may process information outside the European Economic Area, including in the United States. Automattic and Google publish processing terms that include European Commission standard contractual clauses for relevant transfers; Smaily publishes its processing terms and international subprocessor list. You can contact business@musheez.eu to ask about the safeguards applicable to your information and how to obtain a copy. We do not describe the processing chain as EU-only.

How long we keep information

We review new or unanswered enquiries after 12 months without meaningful contact and permanently delete them within 24 months of the last meaningful contact unless a documented reason justifies retention. Active commercial projects remain while genuinely active, with annual review. Closed or abandoned enquiries are normally deleted 24 months after closure or last meaningful contact, whichever is later. Limited records may be retained longer for specific legal, contractual or dispute obligations. We review deletions quarterly and act sooner where needed to meet these deadlines.

Newsletter consent evidence is kept while the subscription is active and normally for three years after withdrawal where justified to demonstrate how consent was handled. We retain only the minimum suppression information needed to respect opt-outs and review its continued need. Temporary exports and test records are removed when no longer needed.

WordPress.com publishes a 30-day retention period for its PHP error and web-server logs. Its Business service provides a six-month backup restore window while the plan is active and a 30-day backup retention period after plan removal. Deleting live records does not immediately remove them from earlier restricted backups. We reapply deletions and opt-outs if a backup is restored.

Akismet states that most spam-related data is deleted after two weeks to 90 days, with a small subset retained longer. Google’s processing terms allow up to 180 days for system deletion after an unrecoverable deletion instruction, subject to their terms and legal exceptions. These provider periods do not extend our routine use of closed enquiry records.

Your rights

Subject to GDPR conditions, you can request access, correction, erasure, restriction and portability. You can object to processing based on legitimate interests and to direct marketing, and withdraw marketing consent at any time. We do not make solely automated decisions that produce legal or similarly significant effects about you. Contact business@musheez.eu; we may verify your identity proportionately and normally respond within one month.

You may complain to the Estonian Data Protection Inspectorate, Andmekaitse Inspektsioon, at www.aki.ee, or another competent supervisory authority, including where you live or work.

SOLVIQA™ by MUSHEEZ® · Natural Chaga OÜ, Estonia