Privacy Policy
Last updated: 2025-01-01
We respect your privacy. This policy explains what personal data we collect, why, and how we protect it in accordance with the EU General Data Protection Regulation (GDPR — Regulation 2016/679).
1. Data Controller
The data controller is:
- Name: SIA "Little Bird" (limited liability company)
- Registration number: 40203436260
- Registered address: Jēkaba iela 26/28 - 37A, Riga, LV-1050, Latvia
- Email: info@consultants.lv
- Phone: +371 20915454
2. What data do we collect?
| Category | Specific data | How collected |
|---|---|---|
| Contact information | Name, surname, email address, phone number | Contact form on website |
| Company data | Company name, job title | Contact form on website |
| Message content | Content of your message | Contact form, email |
| Chat data | Chat conversation content | Website chatbot |
| Technical data | IP address, country (for language detection) | Automatically, when visiting the site |
We do not collect special category personal data (health data, political opinions, etc.).
3. Why do we collect data? (Purposes and legal basis)
| Purpose | Legal basis |
|---|---|
| Responding to your contact form enquiry | Legitimate interests (GDPR Art. 6.1.f) / Contract performance (GDPR Art. 6.1.b) |
| Providing consultancy services | Contract performance (GDPR Art. 6.1.b) |
| Sending requested guide/booklet | Consent (GDPR Art. 6.1.a) |
| Language detection via IP | Legitimate interests — improving website usability (GDPR Art. 6.1.f) |
| Chatbot operation | Legitimate interests (GDPR Art. 6.1.f) |
4. How long do we retain data?
- Contact form enquiries — 2 years from receipt, or longer if a contractual relationship is established
- Chat conversations — not permanently stored in our systems; Claude API processes data but does not retain it long-term
- IP address (language detection) — not stored; processed during session only
- Accounting documents — 10 years in accordance with Latvian law
5. Who do we share data with?
We do not sell or transfer your personal data to third parties for commercial purposes. Data may be shared with the following processors:
- Anthropic, Inc. (USA) — chatbot technology provider. Data transfer takes place under EU Standard Contractual Clauses (SCC). Anthropic privacy policy: anthropic.com/privacy
- Email service provider — hostnet.lv, providing email infrastructure for contact form processing
- Public authorities — where required by law or by competent authorities
6. International data transfers
The chatbot uses Anthropic API (USA). Data transfers take place under Standard Contractual Clauses (SCC) approved by the European Commission, ensuring an adequate level of protection. No other data is transferred outside the EU/EEA.
7. Your rights
Under GDPR, you have the following rights regarding your personal data:
- Right of access — to receive information about what data we process about you
- Right to rectification — to request correction of inaccurate data
- Right to erasure ("right to be forgotten") — to request deletion of data where there is no legitimate basis to continue holding it
- Right to restriction of processing — to request that processing be suspended in certain cases
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests
- Right to withdraw consent — to withdraw consent at any time (without affecting the lawfulness of processing before withdrawal)
To exercise any of these rights, write to info@consultants.lv. We will respond within 30 days.
If you believe your data is being processed unlawfully, you have the right to lodge a complaint with the Data State Inspectorate of Latvia: dvi.gov.lv
8. Cookies
Our website uses only one functional cookie:
| Cookie | Purpose | Duration | Type |
|---|---|---|---|
lb_lang | Saves your chosen language (LV or EN) | 1 year | Functional — necessary for site operation |
We do not use analytics, marketing or tracking cookies. Third-party requests (Google Fonts) may be made to font servers — these are subject to Google's privacy terms.
9. Website security
- SSL/TLS encryption for all data transmission (HTTPS)
- API keys and configuration files protected from public access
- Contact forms protected with honeypot technology against automated spam
10. Changes to this policy
We reserve the right to update this policy. We will notify you of material changes by publishing the new version on our website with an updated date. We recommend reviewing this page periodically.
11. Contact
For questions about personal data processing, please contact us:
📧 info@consultants.lv
📞 +371 20915454
📍 Jēkaba iela 26/28 - 37A, Riga, LV-1050, Latvia