Privacy Policy
Last updated:
This policy explains what personal data SIA PRIME CUTS (“Noctra”, “we”) collects through www.yourdomain.com, why we collect it and what rights you have under the EU General Data Protection Regulation (GDPR).
01 Who we are
The data controller is SIA PRIME CUTS, registration No. 40203731213, Krišjāņa Barona iela 30-2, Rīga, Latvia. You can contact us about privacy at hello@yourdomain.com.
02 What data we collect
- Contact form: your name, email, optional company and website address, the package and budget you choose and your message.
- Client panel (clients only): your login email, change requests you send, project files, invoices and statistics about your website.
- Analytics (only with your consent): pages visited, approximate location (country/city), device and browser type, and how you arrived at the site, collected by Google Analytics 4.
- Technical data: our hosting provider keeps short-lived server logs (IP address, time, requested page) for security and troubleshooting.
- Chatbot demo: the demo assistant runs entirely in your browser. Messages you type into it are not sent to us or stored.
03 Why we use it and on what legal basis
- To reply to your enquiry and prepare a quote: steps before entering into a contract (GDPR Art. 6(1)(b)).
- To measure and improve the website with analytics: your consent (Art. 6(1)(a)), which you can withdraw at any time.
- To keep the site secure and working: our legitimate interest (Art. 6(1)(f)).
- To meet accounting and legal obligations if you become a client (Art. 6(1)(c)).
04 Cookies and local storage
We store your cookie choice and language in your browser's local storage. This is necessary and needs no consent. Google Analytics cookies (_ga, _ga_*) are set only after you accept analytics, and last up to 14 months. You can change your choice any time with the “Cookie settings” link in the footer.
05 Who we share data with
We do not sell personal data. We use trusted processors who act on our instructions: our hosting provider, our email and form service, and Google Ireland Ltd for analytics. Where data may be transferred outside the EEA (for example to Google LLC in the USA), the transfer is covered by the EU–US Data Privacy Framework or Standard Contractual Clauses.
06 How long we keep it
- Enquiries that don't lead to a project: up to 12 months.
- Client and contract data: as long as accounting law requires, usually 7 years.
- Client panel data: while you are a client and up to 12 months after the contract ends.
- Analytics data: 14 months.
- Server logs: up to 30 days.
07 Your rights
You have the right to access your data, correct it, have it deleted, restrict or object to its processing, receive it in a portable format, and withdraw consent at any time. Email us at hello@yourdomain.com and we will reply within 30 days. You can also lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or the authority in your country.
08 Security
The site is served over HTTPS, access to our systems is limited to people who need it and protected with two-factor authentication, and we keep only the data we need.
09 Changes to this policy
If we change this policy, we will update the date at the top of this page. Important changes will also be shown on the website.