Privacy Policy

1. Who we are

DigiDuo is an AI and automation consultancy based in Riga, Latvia, European Union.

For any privacy-related questions, contact us directly at the email above.

2. Data we collect

We collect two categories of data:

2.1 Data you give us directly

When you use the contact form on our website, you may provide:

• Your full name
• Your email address
• Your company or organisation name (optional)
• Your phone number (optional)
• A message describing your enquiry

This information is submitted via Web3Forms, a third-party form processing service. It is forwarded to our email inbox and is not stored in any database we operate. Web3Forms may temporarily hold submission data in accordance with their own privacy policy.

If you email us directly at info@digiduo.ai, we collect only what you choose to include in your message.

2.2 Data collected automatically

When you visit our website, Google Analytics automatically collects:

• Pages visited and time spent on each page
• Approximate geographic location (country/city level — not precise)
• Device type, browser, and operating system
• Referral source (how you arrived at our site)
• Anonymised IP address

This data is aggregated and anonymised. We cannot identify you personally from Google Analytics data.

3. How we use your data

We do not use your personal data for automated decision-making or profiling. We do not send marketing emails unless you have explicitly asked us to stay in touch.

4. Legal basis for processing

Under GDPR, we rely on the following legal bases:

• Legitimate interests (Article 6(1)(f)) — for responding to contact form enquiries and emails. Our legitimate interest is running a business and responding to people who contact us.
• Legitimate interests — for Google Analytics, to understand website performance and improve our content.
• Consent (Article 6(1)(a)) — where we ask for it explicitly (e.g. if we add a newsletter sign-up in future).

5. Data sharing and third parties

We do not sell, rent, or trade your personal data. We use the following third-party services that may process data on our behalf:

We may disclose personal data if required to do so by law or in response to valid requests by public authorities.

6. How long we keep your data

• Contact form enquiries — retained in our email inbox for as long as reasonably necessary to follow up, and deleted when no longer needed (typically within 2 years if no engagement follows).
• Client correspondence — retained for the duration of the engagement plus a reasonable period thereafter for legal and accounting purposes (up to 5 years).
• Google Analytics data — retained for 14 months per our account settings, after which it is automatically deleted by Google.

7. Your rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access — you can request a copy of the personal data we hold about you.
• Right to rectification — you can ask us to correct inaccurate or incomplete data.
• Right to erasure — you can ask us to delete your personal data where there is no compelling reason for us to continue holding it.
• Right to restrict processing — you can ask us to limit how we use your data in certain circumstances.
• Right to data portability — you can ask for your data in a structured, commonly used format.
• Right to object — you can object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, you can withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, email us at info@digiduo.ai. We will respond within 30 days.

You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (dvi.gov.lv), which is the supervisory authority for data protection in Latvia.

8. Cookies and analytics

Our website uses cookies. Specifically:

• Google Analytics cookies (_ga, _ga_*) — these are set by Google Analytics to distinguish users and track sessions. They are analytics cookies, not strictly necessary for the website to function.

We do not currently use a cookie consent banner, as our analytics use is limited and the data is anonymised. However, you can prevent Google Analytics from collecting data about you by installing the Google Analytics Opt-out Browser Add-on, or by adjusting your browser's cookie settings.

We do not use advertising, targeting, or social media cookies.

9. Security

Our website is served over HTTPS (TLS encryption). Our server is hosted on Hetzner in Germany, within the EU. We take reasonable technical precautions to protect your data, but no method of transmission over the internet is 100% secure. We recommend not sending highly sensitive information via contact forms.

10. Contact us

If you have questions about this policy, want to exercise your rights, or have a concern about how we handle your data, please contact us:

We will respond to all requests within 30 days. For complaints, you may also contact the Latvian Data State Inspectorate at dvi.gov.lv.