Legal
Privacy policy
What personal data this site collects, why, and what you can do about it. In short: we see only what you choose to send us, and analytics run only if you allow them.
Last updated:
Who is responsible
ikik is responsible for this website and for the personal data described here: we decide why and how it is processed, which makes us the controller under the EU General Data Protection Regulation (GDPR). Write or call with any question about this policy or your data; the contacts are below.
- info@ikik.lv
- Phone
- +37129741376
When you write to us
When you press Submit, the contact form sends what you have entered to Formspree, a form-handling service, which forwards it to our mailbox. Formspree also records the technical data it needs to deliver the message and filter out spam: your IP address, browser and the time of sending. The same data, apart from the technical part, reaches us when you email us directly.
What we receive:
- your name, email address and phone number;
- your website address, if you add it;
- your message and anything else you choose to include;
- the address of the page you sent the form from.
We use it to reply, to prepare an offer and, if we agree to work together, to run the project. The legal basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)). For a general question that does not lead to an offer, it is our legitimate interest in answering the people who write to us (Art. 6(1)(f)).
Giving us this data is voluntary, but without an email address or phone number we cannot reply.
WhatsApp, Telegram and phone
If you contact us through WhatsApp or Telegram, the conversation is carried by that service under its own privacy policy, and we see what the app shows us: your phone number or username, your profile name and your messages. A phone call gives us your number and what you tell us. We use this the same way and on the same legal basis as an enquiry by email.
When you visit the site
Like any web server, ours records each request: your IP address, the date and time, the page requested, the page you came from, and your browser and operating system. We use these logs only to keep the site running and secure, to spot errors and attacks, on the basis of our legitimate interest in a working, safe website (Art. 6(1)(f)). We do not combine them with other data or use them to identify you.
The site loads its fonts and images from its own server. It does not embed videos, maps, social media widgets or advertising.
Analytics and cookies
We use Google Analytics 4, loaded through Google Tag Manager, to learn how the site is used: which pages people read, which language they choose, where they came from and whether they get in touch. We also use Microsoft Clarity, which records how visitors scroll, move and click on a page and builds heatmaps from it, so we can see where the site gets in people’s way. Both run only if you accept analytics in the cookie banner. Until then neither Google Tag Manager, Clarity nor any other analytics script is loaded, and no analytics cookie is set. The legal basis is your consent (Art. 6(1)(a)).
If you accept, these cookies are set on this site:
| Cookie | Purpose | Expires |
|---|---|---|
| _ga | Tells visits from the same browser apart from others | 2 years |
| _ga_<ID> | Keeps the state of the current visit | 2 years |
| _clck | Microsoft Clarity: tells visits from the same browser apart from others | 1 year |
| _clsk | Microsoft Clarity: joins the pages of one visit into a single recording | 1 day |
Google Analytics 4 does not store IP addresses. We keep analytics data for 14 months, have not linked it to any advertising account and have turned Google signals off, so it is not used to build profiles or show you ads.
Clarity never records what you type into form fields: their content is masked before anything is sent. Clarity also sets cookies on Microsoft’s own domains (MUID, CLID, ANONCHK, MR, SM) to recognise the browser across Microsoft services; we tell Clarity that storage for advertising is not allowed. Recordings are kept for 30 days, except a small sample and any we mark, which are kept, like heatmaps, for up to 13 months.
You can change or withdraw your choice at any time through the Cookie settings link at the foot of every page, or by clearing this site’s cookies in your browser. Withdrawing consent does not affect what was collected before. Your choice itself is stored in your browser for 12 months, so the banner does not return on every page; that is strictly necessary and needs no consent. After 12 months, or if the categories change, we ask again.
Who else handles your data
We do not sell personal data or pass it on for anyone else’s marketing. It reaches only the services that run the site and our communication for us:
- DigitalOcean, LLC, which hosts the site and its server logs;
- Formspree, Inc., which receives what you send through the contact form and forwards it to us;
- our email provider, which keeps the mailbox your enquiries arrive in;
- Google Ireland Limited and Google LLC, for analytics, only if you have accepted it;
- Microsoft Corporation, for Clarity, only if you have accepted analytics;
- WhatsApp or Telegram, only if you choose to contact us there;
- our accountant, once we work together and invoice you.
A provider that processes data on our behalf does so under a data processing agreement and only on our instructions. We may also disclose data where the law requires it, for example to a court or a public authority.
Transfers outside the EU
The site is served from DigitalOcean data centres in the European Union. DigitalOcean, Google and Microsoft are US companies, so some data may be accessed from the United States. All three are certified under the EU–US Data Privacy Framework, which the European Commission recognises as giving adequate protection, and their data processing terms add the EU Standard Contractual Clauses as a further safeguard.
Formspree, Inc. is also a US company and handles what you send through the contact form on infrastructure in the United States.
WhatsApp and Telegram decide for themselves where they process your messages; their policies are linked at the end of this page.
How long we keep it
| Data | Kept for |
|---|---|
| An enquiry that does not lead to a project | 12 months after our last message |
| A copy of a form submission in our Formspree account | Deleted together with the enquiry, on the terms above |
| Correspondence and records of a project | The term of the contract, then as long as Latvian accounting and tax law requires |
| Server logs | Up to 30 days |
| Google Analytics data | 14 months |
| Microsoft Clarity recordings | 30 days; a small sample and recordings we mark, up to 13 months |
| Microsoft Clarity heatmaps | 13 months |
After that the data is deleted or made anonymous.
Your rights
Under the GDPR you can ask us to:
- tell you whether we hold data about you and give you a copy (Art. 15);
- correct data that is wrong or incomplete (Art. 16);
- delete it (Art. 17);
- restrict how we use it (Art. 18);
- hand it to you or to another company in a machine-readable format (Art. 20);
- stop using it where we rely on our legitimate interest (Art. 21);
- withdraw your consent at any time, without affecting what was done before (Art. 7(3)).
Write to the email in the first section. We answer within one month, free of charge, and may ask you to confirm who you are before we act.
If you think we handle your data unlawfully, you can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, or to the data protection authority of the EU country where you live.
What we do not do
- We do not sell or rent personal data.
- We do not use it for advertising or build marketing profiles.
- We make no decisions about you by automated means, profiling included.
- The site is meant for businesses and adults, and we do not knowingly collect data from children.
Security
The site is served only over an encrypted HTTPS connection. Access to our mailbox, hosting and analytics accounts is limited to the people who need it and protected by two-factor authentication.
Changes to this policy
When the site or the way we handle data changes, we update this page and the date at the top. If a change affects consent you have given, we ask for it again.