DONE.
EN / LV

Privacy Policy

Last updated: 2026-05-06

1. Data controller

This site is operated by SIA "DONE", a Latvian limited liability company.

  • Registration number: 40009873247
  • Registered address: Strēlnieku iela 1A, Riga, LV-1010, Latvia
  • Email: hello@done.win

References to "we", "us", and "our" in this policy mean SIA "DONE".

2. What this policy covers

This policy explains how we handle personal data collected through this website (done.win) and direct communications you send us (e.g. email).

It does not describe how we handle personal data once you become a client — that is governed by your engagement letter and our internal data-handling protocols.

3. What data we collect and why

We process two narrow categories of personal data on this site:

  • Server logs. IP address, user agent, time of access, and the URL requested. Used to operate and secure the site. Legal basis: GDPR Article 6(1)(f) — legitimate interest in keeping the site running and protected against abuse.
  • Email correspondence. Your name, email address, and the content of any message and attachments you send us. Used to reply to you and assess whether to take on the matter. Legal basis: GDPR Article 6(1)(b) — pre-contractual steps at your request — and Article 6(1)(f) — legitimate interest in responding to enquiries.

We do not run analytics, advertising trackers, or behavioural profiling on this site.

4. Cookies

This site sets no cookies and uses no third-party tracking. See our Cookie Policy for details.

5. Recipients and processors

We share personal data only with the processors needed to operate this site and our email:

  • Cloudflare, Inc. — hosting and DNS for done.win. EU edge nodes are used where available; some routing through Cloudflare's global network may involve transfers outside the EEA.
  • Zoho Corporation — email service for @done.win addresses, hosted in Zoho's EU data centre.

Each processor is bound by a data processing agreement that includes the European Commission's Standard Contractual Clauses (SCCs) where any transfer outside the EEA may occur, with supplementary measures as required under Schrems II.

6. International transfers

Personal data is stored in the EU/EEA where possible. Where transfers to third countries occur (principally to the United States via Cloudflare's network), they rely on the SCCs and appropriate supplementary measures.

7. Retention

  • Server logs: retained by Cloudflare for up to 30 days, then deleted.
  • Email correspondence (no engagement opened): retained up to 24 months from the last contact, then deleted.
  • Email correspondence (engagement opened): retained as part of the engagement file for the period required by the engagement letter and applicable Latvian law.

Where Latvian law requires longer retention (for example, accounting records or anti-money-laundering obligations), those statutory periods apply.

8. Your rights

Under the GDPR you have the right to:

  • access your personal data (Art. 15);
  • have inaccurate data corrected (Art. 16);
  • have your data erased where there is no overriding ground for retention (Art. 17);
  • restrict processing (Art. 18);
  • receive your data in a portable format (Art. 20);
  • object to processing based on legitimate interest (Art. 21); and
  • withdraw consent at any time, where processing is based on consent (this does not affect prior lawful processing).

To exercise any of these rights, email hello@done.win. We respond within one month, in line with GDPR Article 12(3).

You also have the right to lodge a complaint with the Latvian supervisory authority — Datu valsts inspekcija (DVI), Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv.

9. Automated decision-making

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

10. Children

Our services are not directed at people under 16, and we do not knowingly collect their data.

11. Changes to this policy

We may update this policy occasionally. The "last updated" date at the top reflects the most recent change. Material changes will be flagged on the homepage.

12. Contact

Questions about this policy or your data: hello@done.win.