Privacy Policy

This Privacy Policy explains how SIA "OneZero", registration number 41503079902, registered at Kolkasraga iela 3 – 15, Rīga, LV-1002, Latvia ("OneZero", "we"), collects, uses, and protects personal data when you visit onezero.lv, request a consultation, or engage our services.

We comply with the EU General Data Protection Regulation (GDPR) and Latvian data protection law.

1. Data we collect

When you visit our website

• Standard server log data: IP address, browser type, referrer, pages visited, timestamps.
• Cookie data: see our cookie section below.

When you request a consultation

• Contact information: name, email, phone number, company name.
• Business information: monthly revenue band, services of interest, current marketing setup.
• Anything you choose to share in the form's free-text fields.

When you engage us as a Client

• Billing information: legal entity, address, VAT number, bank details (for invoicing).
• Account access credentials and analytics data necessary to deliver the service.

2. How we use your data

• To respond to inquiries — when you book a consultation, we use your contact details to schedule the call and send relevant materials.
• To deliver our services — for active Clients, we process data to run campaigns, produce reports, and communicate.
• For invoicing & legal compliance — billing data is retained as required by Latvian tax and accounting law.
• To improve the website — anonymized analytics help us understand what content visitors find useful.
• For marketing — only with your explicit opt-in. You can unsubscribe at any time.

3. Legal basis

We process personal data on the following legal bases:

• Consent — for marketing emails, optional cookies, and the consultation form.
• Contract — for delivering services to active Clients.
• Legal obligation — for accounting, tax, and regulatory record-keeping.
• Legitimate interest — for basic website analytics and security.

4. Cookies

Our website uses cookies to function correctly and to understand how visitors use it. We use:

• Strictly necessary cookies — required for the site to work (always on).
• Analytics cookies — to measure traffic and improve the site (only with consent).
• Marketing cookies — for advertising platforms (Meta, Google) (only with consent).

You can change your cookie preferences at any time through your browser settings.

5. Sharing your data

We never sell your data. We share it only with trusted processors who help us run our business, under written data-processing agreements:

• Hosting and infrastructure: Shopify Inc. (e-commerce platform), hosting providers.
• Form processing: Typeform (consultation form).
• Email delivery: Klaviyo, Google Workspace.
• Analytics: Google Analytics, Meta Pixel (only with consent).
• Accounting: our certified accountant in Latvia.

We may also disclose data when required by law, court order, or to protect our legal rights.

6. Data retention

• Consultation form submissions: up to 24 months from submission, unless you become a Client.
• Active Client data: for the duration of the engagement plus 5 years (Latvian accounting law).
• Marketing subscribers: until you unsubscribe.
• Server logs: up to 90 days.

7. Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten"), subject to legal retention obligations.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent at any time.
• Lodge a complaint with the Latvian Data State Inspectorate (dvi.gov.lv).

To exercise any of these rights, email us at ilja@onezero.lv. We will respond within 30 days.

8. Security

We use industry-standard measures (encrypted connections, access controls, principle of least privilege) to protect personal data. No system is 100% secure, but we work continuously to keep your data safe.

9. International transfers

Some of our processors (e.g. Shopify, Google) are based outside the EU. Where data leaves the EU, we rely on Standard Contractual Clauses or equivalent legal mechanisms approved under GDPR.

10. Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available here, with the "Last updated" date showing the most recent revision.