Privacy Policy

1. Who is responsible

The data controller is:

2. What data we collect and why

• Contact enquiries. When you submit our contact form we collect your name, email, phone and message, to respond to your enquiry. Legal basis: your consent and our legitimate interest in replying (Art. 6(1)(a)/(f)).
• Cookies and similar technology. See section 3.
• Server logs. Our hosting and application keep technical logs (e.g. errors) for security and reliability. Legal basis: legitimate interest (Art. 6(1)(f)).

We do not sell your data and we do not use it for automated decision-making or profiling.

3. Cookies

Strictly necessary cookies are required for the site to work — remembering your language, keeping your session, and protecting forms (anti-forgery). They are always active and do not require consent.

Analytics cookies (only with your consent) help us understand how the site is used so we can improve it. They are off by default.

You can review or change your choice at any time via Cookie settings.

4. Who we share data with

We share data only with service providers ("processors") acting on our behalf:

• Our website hosting provider.
• Our email provider, to deliver enquiry notifications.
• Google reCAPTCHA, which protects the contact form from spam and processes limited technical data, including your IP address.

5. International transfers

Some providers (e.g. Google reCAPTCHA) may process data outside the EEA, including in the United States. Where this happens, the transfer is protected by appropriate safeguards such as the EU Standard Contractual Clauses.

6. How long we keep it

We keep contact enquiries only as long as needed to handle your request and for a reasonable follow-up period, after which they are deleted. Technical logs are kept for a short period. Cookies expire as described when you give consent.

7. Your rights

Under the GDPR you have the right to access your data; have it corrected or erased; restrict or object to processing; data portability; and to withdraw consent at any time (without affecting earlier processing). To exercise any of these, email note@note.lv.

8. Complaints

If you believe we have not handled your data properly, you may lodge a complaint with the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija) — www.dvi.gov.lv.

9. Changes

We may update this policy from time to time. The date at the top shows when it was last revised.