Privacy Policy

Last updated: February 25, 2026

1. Data Controller

The data controller for personal data processed through this Website is:

  • SIA "Baltic Oranges"
  • Registration number: 40203707813
  • Anniņmuižas bulvāris 19 - 35, Rīga, LV-1067, Latvia
  • Email: hello@e2eagenticbridge.com

We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the Latvian Personal Data Processing Law.

2. What Data We Collect

We collect and process the following categories of personal data:

2.1 Data You Provide

  • Contact information (name, email address) when you reach out via our contact form or email
  • Business information provided during consulting engagement discussions
  • Any other information you voluntarily submit to us

2.2 Data Collected Automatically

  • IP address and approximate geolocation
  • Browser type and version, operating system
  • Pages visited, time spent, referring URL
  • Device identifiers and screen resolution

3. Legal Basis for Processing

We process personal data on the following legal bases under Article 6 GDPR:

  • Consent (Art. 6(1)(a)): For analytics cookies and marketing communications, where applicable. You may withdraw consent at any time.
  • Contractual necessity (Art. 6(1)(b)): To respond to your inquiries and provide requested services.
  • Legitimate interest (Art. 6(1)(f)): To maintain and improve our Website, ensure security, and analyze usage patterns. Our legitimate interest does not override your fundamental rights and freedoms.
  • Legal obligation (Art. 6(1)(c)): To comply with applicable laws, including tax and accounting requirements under Latvian law.

4. Cookies and Tracking

Our Website uses the following types of cookies:

  • Strictly necessary cookies: Essential for Website functionality. These do not require consent.
  • Analytics cookies: We may use Google Analytics or similar services to understand how visitors interact with our Website. These cookies are placed only with your consent.
  • Performance cookies: Used by our hosting provider (Vercel) for load balancing and performance optimization.

You can manage cookie preferences through your browser settings. Disabling certain cookies may affect Website functionality.

5. Third-Party Services

We use the following third-party services that may process your personal data:

  • Vercel Inc. (San Francisco, USA) — Website hosting and delivery. Vercel processes server logs including IP addresses. Data transfers to the US are covered by Vercel's Data Processing Agreement and EU Standard Contractual Clauses.
  • Google Analytics (if enabled) — Website analytics. Data is anonymized where possible. Google LLC participates in the EU-US Data Privacy Framework.

We ensure that all third-party processors provide adequate data protection guarantees in compliance with Chapter V of the GDPR.

6. Data Retention

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected:

  • Contact form submissions: 2 years from last communication
  • Client engagement data: Duration of the engagement plus 5 years (legal obligations)
  • Server logs and analytics data: 14 months
  • Accounting records: 5 years as required by Latvian tax law

7. Your Rights Under GDPR

As a data subject, you have the following rights under the GDPR:

  • Right of access (Art. 15): Obtain confirmation of whether your data is being processed and request a copy.
  • Right to rectification (Art. 16): Request correction of inaccurate personal data.
  • Right to erasure (Art. 17): Request deletion of your personal data ("right to be forgotten").
  • Right to restriction (Art. 18): Request restriction of processing in certain circumstances.
  • Right to data portability (Art. 20): Receive your data in a structured, machine-readable format.
  • Right to object (Art. 21): Object to processing based on legitimate interests, including profiling.
  • Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at hello@e2eagenticbridge.com. We will respond within 30 days as required by law.

8. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA), specifically the United States, through our use of Vercel hosting services. Such transfers are safeguarded by:

  • EU Standard Contractual Clauses (SCCs)
  • The EU-US Data Privacy Framework, where applicable
  • Supplementary technical and organizational measures

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include encrypted data transmission (TLS/SSL), access controls, and regular security assessments.

10. Children's Privacy

Our Website and services are not directed at individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy to reflect changes in our practices or applicable law. We will post the revised policy on this page with an updated date. We encourage you to review this policy periodically.

12. Supervisory Authority

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Latvian Data State Inspectorate:

  • Datu valsts inspekcija
  • Elijas iela 17, Rīga, LV-1050, Latvia
  • Website: www.dvi.gov.lv
  • Email: pasts@dvi.gov.lv

13. Contact

For any questions or requests regarding this Privacy Policy or your personal data: