Last updated: [DATE]
This policy explains what personal data [LEGAL ENTITY NAME] ("Baltic Stack", "we") collects through this website, why we collect it, and what you can ask us to do with it.
Who we are
[LEGAL ENTITY NAME], [REGISTRATION NUMBER], [REGISTERED ADDRESS]. For any question about this policy or about your data, write to hello@balticstack.com.
What we collect
- Data you send us. When you submit the contact form we receive the name, email address, and message you typed, plus anything you attach.
- Technical data. Our server logs record IP address, browser, and the pages requested. These logs are kept for [N] days for security and debugging.
- Analytics. [DESCRIBE — e.g. Google Analytics 4 with IP anonymisation, or "we do not use analytics cookies". Do not claim less tracking than you actually run.]
Why we use it
To reply to your enquiry, to deliver work you have engaged us for, to keep the site secure, and to meet accounting and tax obligations. We do not sell personal data, and we do not use your enquiry to add you to a mailing list without asking.
Legal basis
[Under the GDPR, our basis is: consent for analytics cookies, legitimate interest for security logs, contract performance for project work, and legal obligation for financial records. Adjust to match reality.]
Cookies
[List each cookie or category you set, what it does, and how long it lasts. If you show a consent banner, say how a visitor withdraws consent. If you set no cookies beyond the session cookie Laravel needs, say exactly that — it is a shorter and more credible section.]
Who else sees your data
[Name your processors: hosting provider, email provider, analytics provider, and where each stores data. "Third parties" on its own is not a disclosure.]
How long we keep it
Enquiries that do not become projects are deleted after [N] months. Project records are kept for [N] years where accounting rules require it.
Your rights
You can ask for a copy of your data, ask us to correct or delete it, or object to how we use it. Email hello@balticstack.com and we will respond within 30 days. If you are unsatisfied you may complain to your national data protection authority.
Changes
When this policy changes we update the date at the top. Material changes will be announced on this page.