Privacy Policy

Who is responsible

The controller is SIA Wonderstore, Reg. No. 40203623395, Dārza iela 13 - 12, Kaķenieki, Annenieku pag., Dobeles nov., LV-3718, which operates Start in Latvia. Contact us at info@startinlatvia.com.

What we collect and why

Messages you send us (WhatsApp, email or the contact form): your name, contact details, country and what you tell us, to answer you and prepare a quote. We do this to answer your request before any contract is signed. We keep a log of contact-form submissions, including ones that could not be delivered or were rejected as spam, so that no message is lost.
Client identity and company information (identity documents, addresses, ownership and source of funds): to provide the formation service and to carry out the identity and anti-money-laundering checks that the law requires of us. The legal bases are performing our contract with you and complying with legal obligations. Without this information we cannot do the checks the law requires, so we cannot provide the service.
Information about other people in your company (owners, board members and beneficial owners): to form and check the company we also need their details. If you give us someone else's details, please tell them. We also get information from public registers and run sanctions and politically-exposed-person checks, as the law requires. The legal basis is complying with legal obligations.
Website usage statistics: aggregate, cookieless statistics that do not identify you (see below), based on our legitimate interest in understanding how the site is used.

Cookies and tracking

We do not use tracking cookies or advertising pixels, and we do not set cookies that need your consent. We measure visits with Cloudflare Web Analytics, which does not use cookies or store an identifier on your device. When you click a WhatsApp or email link we may record that a click happened, on which page, and the domain of the site you came from, without recording who you are or your IP address. To limit form spam and repeated clicks we briefly keep a hashed form of your IP address, normally about an hour. Our web server also keeps standard logs (IP address, browser, pages requested) for about 30 days, for security and troubleshooting, based on our legitimate interest in keeping the site safe.

We share data only as needed to deliver the service. We do not sell personal data.

Who we share personal data with
Who	Why
The electronic signing provider you sign through	To sign the documents.
The Register of Enterprises and other authorities	Where registration or the law requires it.
The banks you deal with	When you ask us to help.
WhatsApp (Meta)	If you write to us on WhatsApp, your message is also processed by WhatsApp under its own terms.
Our email provider (Zoho Mail, EU)	Our email is handled by it.
Cloudflare	Our website is served through Cloudflare, which acts as a proxy and security layer and provides the cookieless statistics. The site is hosted on our own server.
Balansis, our accounting service	It is part of the same company. We share your formation details with it only if you choose to use its services.

Transfers outside the EEA

Some providers, such as Cloudflare and WhatsApp (Meta), may process data outside the European Economic Area. Where that happens we rely on the safeguards the law provides for such transfers, for example standard contractual clauses.

How long we keep it

How long we keep personal data
Data	How long
Messages that did not lead to an order (including the contact-form log)	Up to 12 months after the last message, then we delete them.
Client identity and company records	For as long as we provide the service and for five years after the business relationship ends, as the Law on the Prevention of Money Laundering and Terrorism and Proliferation Financing requires (Article 37). A competent authority can require a longer period. Then we delete or anonymise them.
Web server logs	About 30 days.
Hashed IP for spam limits	Normally about an hour.

How we protect it

We protect the personal data we hold with technical and organisational measures that fit the risk. Our website is served over an encrypted connection (HTTPS). The logs and contact-form submissions we keep are stored on our own server, outside the part of it that the public website serves. We limit access to personal data to what is needed to provide the service.

Your rights

You can ask us:

for access to your data,
to correct it or to delete it,
to restrict or object to its use,
to receive it in a portable format.

If we rely on your consent, you can withdraw it at any time. Some data we must keep by law, and then we cannot delete it on request. We do not make decisions about you by automated means, and the service is for business customers, not for children. Write to info@startinlatvia.com. We may ask you to confirm who you are before we act on a request. We reply without undue delay and in any case within one month of receiving it, as the law requires. If the request is complex, the law allows us to extend that by up to two further months, and we tell you if we do. You can also complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, dvi.gov.lv).

Changes

We may update this policy and will change the date above when we do.