Privacy policy

Last updated 31 August 2026.

This is a translation provided for convenience. In case of any discrepancy, the Latvian version of this policy prevails.

This privacy policy explains what personal data SIA “Bouwart Timber Frame Houses” (“Bouw Art”) collects through this website, why we process it, who can access it, how long we keep it and what your rights are under the General Data Protection Regulation (GDPR).

Controller

The data controller is SIA “Bouwart Timber Frame Houses”, Reg. No. 40203251982, “Bucenieki”, Iecavas pagasts, Bauskas novads, LV-3913, Latvia. For any question about the processing of personal data, write to info@bouwart.lv.

What data we collect

We collect only the data you give us yourself, plus a small amount of technical data needed to keep the site secure.

• Through the contact form.Your name, email address, telephone number and the text of your message.
• Through a configurator request.The same contact details, plus the house model, size, facade, level of completion and extras you selected, your notes, and the page the request was sent from.
• When you write or call us.Whatever you tell us in the course of that contact.
• Technical data.To prevent abuse of the forms we keep an irreversible hash of your IP address for a few hours. The IP address itself is not stored, and this data cannot be used to identify you.

Providing your data is voluntary, but without contact details we cannot reply to your enquiry.

Why we process it, and on what basis

• To answer your enquiry and prepare a quotation. GDPR Article 6(1)(b) — steps taken at your request prior to entering into a contract.
• To keep the website secure. GDPR Article 6(1)(f) — our legitimate interest in preventing abuse of the forms.
• To meet legal requirements, including accounting and tax obligations. GDPR Article 6(1)(c).
• To send news or marketing messages. GDPR Article 6(1)(a) — your consent. The checkbox on the form covers only replying to your message; we send marketing only where you have separately and explicitly agreed to it, and you can withdraw that consent at any time.

Who can access the data

Your data is accessible to a limited number of Bouw Art staff who need it to do their work. In addition we use the following service providers:

• The website server. A submitted request is passed on immediately — the content of requests is not stored on the website server.
• Our email provider. The request arrives in our mailbox at info@bouwart.lv.
• Google Ireland Limited / Google LLC. Requests are recorded in a Google Sheets spreadsheet, which is our principal record of enquiries. Google acts as a data processor here, and data may be processed outside the European Economic Area; such transfers are governed by the EU–US Data Privacy Framework and by the standard contractual clauses approved by the European Commission.

We do not sell or trade your personal data. We may disclose it to public authorities where the law requires it.

How long we keep it

• Enquiries and correspondence — two years from the last contact, where no contract follows. They are deleted after that.
• Where a contract follows — for as long as the law requires, including the retention periods for accounting records.
• Consent to marketing messages — until you withdraw it.
• Technical hashes — a few hours.

How we protect it

The website runs over an encrypted HTTPS connection, access to the data is limited to authorised people, and the content of requests is not stored on the website server. We use both technical and organisational security measures, but no method of transmitting or storing data on the internet is completely secure.

Cookies and similar technologies

• Functional storage. Your choice of light or dark appearance, and your answer to the cookie question, are saved in your browser. Neither ever leaves your device, and neither is used to identify you.
• Analytics. Visit statistics are enabled only after you consent. Until you do, no analytics cookies are set.
• Third-party content. Where a page embeds third-party content such as Instagram or YouTube, that service may set its own cookies under its own privacy policy.

You can delete or block cookies in your browser settings, or use private browsing mode.

Automated decision-making

We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you.

Your rights

Under the GDPR you have the following rights:

• Right of access. To be told why and how your personal data is processed, and to receive a copy of it free of charge in a commonly used electronic format.
• Right to rectification. To have inaccurate or incomplete personal data corrected or completed without undue delay.
• Right to be forgotten. To withdraw your consent and have your personal data erased, once it is no longer needed to provide the services or to meet legal requirements.
• Right to restrict processing. To have processing restricted where you object to it and we have no legitimate grounds to continue.
• Right to object. To object to the processing of your data at any time, unless there are compelling legitimate grounds for it.
• Right to data portability. To receive your data in a structured, commonly used format, or to have it transmitted to another controller.
• Right to lodge a complaint. If you believe your data is not being processed lawfully, you have the right to complain to the Latvian Data State Inspectorate.

To exercise any of these rights, write to info@bouwart.lv. We reply within one month.

Changes to this policy

We may update this policy from time to time. The current version is always available on this page, and any substantive change is reflected in the date at the top.