Privacy Policy

About us

Controller: Communication factory SIA, registration No. 40203110555, legal address: Cēsu iela 9-62, Riga, LV-1012, Latvia, operating under the Directa brand (hereinafter – Directa).

In this Privacy Policy, “you”, “your” and similar expressions mean any visitor to the website www.directa.lv (hereinafter – the website). “We”, “our” and similar expressions mean Communication factory SIA.

This Privacy Policy explains how Directa processes personal data, how you can exercise your rights as a data subject, and other matters related to personal data protection. It applies to the processing of personal data on the website www.directa.lv and in connection with its operation.

When processing personal data, Directa complies with the General Data Protection Regulation (EU) 2016/679 (hereinafter – the Regulation), the Latvian Personal Data Processing Law and other applicable laws of the Republic of Latvia.

Your privacy

Our goal is to tell you as clearly as possible how and why we use your personal information, so that you feel safe sharing your personal data with us.

We take appropriate measures to keep your personal data secure and to process it in accordance with applicable data protection laws.

We protect your personal information and respect confidentiality in everything we do. This policy tells you what data we may collect about you, how we use it, what your rights are and how you can contact us.

We regularly follow developments in data protection and privacy, so this Privacy Policy may be changed or supplemented. The current version is always published on the website and replaces all previous versions from the moment of publication.

What personal data do we process and why?

Data provided in the contact and consultation request form
Full name, company name, email address, phone number (if provided), services of interest and the content of your question.
Purpose
To respond to your request, contact you about a free consultation and, if you wish, prepare an offer or conclude a contract.
Legal basis
Your consent (Article 6(1)(a) of the Regulation) and taking steps at your request prior to entering into a contract (Article 6(1)(b) of the Regulation).

In line with the data minimisation principle, the form only requires the data we need to contact you and understand your request.

Communication history
Email correspondence and other messages you send us.
Legal basis
Our legitimate interest in providing quality customer service, efficient business management and protecting our interests in the event of possible claims (Article 6(1)(f) of the Regulation).

Website usage and technical data
IP address, browser and device settings, time of visit, pages visited and other data collected through cookies and similar technologies.
Legal basis
For cookies necessary for the website to function and for security – our legitimate interest in operating the website and preventing its misuse. For statistics and analytics cookies – your consent, which you can give or withdraw in the cookie banner or in your browser settings.

Where do we get personal data from?

We obtain personal data from you: when you fill in a form on the website, write to us or otherwise contact us, and when you visit the website. We may receive technical and statistical data from service providers that ensure the website's operation, security and statistics.

If the data you have provided has changed, please let us know so that we can correct it.

Who do we share your personal data with?

We do not sell your personal data and do not share it with third parties for their direct marketing purposes.

Service providers (processors)
Your data is processed only by the service providers needed to run the website and our communication:
– Squarespace – hosting of the website and its forms;
– Proton AG – email services.
We assess whether our service providers apply appropriate security measures. They may process your data only on our instructions and may not use it for other purposes.

Law enforcement, state and local government authorities
To fulfil our legal obligations, we may share your personal data with law enforcement, state and local government authorities upon their request, as well as with courts and legal service providers where necessary to protect our legitimate interests.

Transfers of personal data outside the European Union and the European Economic Area (EU/EEA)

We aim to process your personal data within the EU/EEA. Our website hosting provider Squarespace may also process data in the United States. In that case, the transfer is based on the EU-U.S. Data Privacy Framework or on standard contractual clauses approved by the European Commission.

Proton AG processes data in Switzerland, for which the European Commission has adopted an adequacy decision.

How long do we keep your personal data?

We keep the data provided in the form and in our communication for as long as needed to respond to your request and agree on further cooperation. If no cooperation follows, we delete this data no later than 12 months after our last contact.

If we conclude a contract, we keep the data for the duration of the contract and for as long as required by law (for example, retention periods for accounting documents) or as needed to protect our legitimate interests.

Where processing is based on your consent, we stop it as soon as you withdraw your consent. After the retention period ends, the data is securely deleted or irreversibly anonymised.

You are responsible for storing and deleting data on your own device (you can delete the cache and cookies in your browser settings).

How do we protect your personal data?

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure or destruction, including encrypted data transfer (HTTPS) and access restrictions. We also recommend that you follow safe computer and internet practices.

What are your rights?

As a data subject, you have the rights provided by the Regulation and other applicable laws, including:

Access to personal data
You have the right to confirmation of whether we process personal data about you, and to access that data.

Rectification
If you believe that information about you is incorrect or incomplete, you have the right to ask us to correct or complete it.

Erasure
You have the right to ask us to delete your personal data if there is no longer a legal basis for processing it. This does not apply where the law requires us to keep the data.

Restriction of processing
In certain cases, you have the right to ask us to temporarily restrict the processing of your data, for example while its accuracy is being checked.

Data portability
You have the right to receive the data you have provided to us in a structured, commonly used format and to transfer it to another controller.

Withdrawal of consent
Where we process your personal data based on your consent, you have the right to withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before it.

Objection to processing
You have the right to object to the processing of your personal data based on our legitimate interests. We will stop processing unless we have compelling legitimate grounds that override your interests, or the processing is necessary for the establishment, exercise or defence of legal claims. You also have the right to object at any time to the processing of your data for direct marketing purposes.

To exercise your rights, email us at info@directa.lv. We will respond within one month. To protect your data, we may ask you to confirm your identity.

Which law governs the website?

The operation of the website and all relations between you and Communication factory SIA are governed by the laws of the Republic of Latvia and applicable European Union law.

Who can I contact with questions?

If you have any questions, comments or requests regarding this Privacy Policy or the processing of your personal data, please contact us. If you are not satisfied with our response, you have the right to lodge a complaint with the supervisory authority – the Data State Inspectorate of Latvia (www.dvi.gov.lv).

Controller contact details
Communication factory SIA (Directa)
Reg. No. 40203110555
Cēsu iela 9-62, Riga, LV-1012, Latvia
Email: info@directa.lv

Last updated: 12 October 2026.

This is a translation. In case of any discrepancy, the Latvian version of the Privacy Policy prevails.