Privacy Policy
Last updated: 1 October 2026
1. Who we are
The controller of your personal data is CFOLink SIA, registration number [registration number], Pils iela 1A, Lielvārde, Ogres nov., LV-5070, Latvia ("CFOLink", "we"). Contact: [email protected], +371 25 654 457.
2. What data we collect and why
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answering your enquiries via the contact form, e-mail or phone | Name, e-mail, message content, phone (if you give it) | Art. 6(1)(f) legitimate interest in responding; Art. 6(1)(b) where you ask for a service offer |
| Cash & Profit MRI express diagnostic | Contact details and the answers you provide about your business (including financial indicators) | Art. 6(1)(b) / (f); we use the answers only to prepare the diagnostic and follow-up with you |
| Partner enquiries | Name, company, e-mail, message | Art. 6(1)(f) legitimate interest in business cooperation |
| Providing and securing the website | Technical data (IP address, browser, date and time of access) in server logs; cookie-consent record | Art. 6(1)(f) legitimate interest in security; strictly necessary cookies need no consent |
| Legal claims and accounting obligations | Correspondence, contract and invoice data | Art. 6(1)(c) and (f) |
We do not ask for special categories of data and do not make decisions based solely on automated processing. Please do not send us such data in free-text fields.
3. Recipients and processors
We do not sell your data. It may be disclosed to service providers acting on our instructions (website hosting, e-mail and cloud storage, IT support, accountants and professional advisers) and to public authorities where the law requires.
4. International transfers
We aim to process data within the EU/EEA. If a provider is located outside the EU/EEA, we rely on an adequacy decision or Standard Contractual Clauses under Chapter V of the GDPR.
5. Retention
- Enquiries that do not lead to a contract: up to 24 months after the last contact.
- Diagnostic answers: up to 24 months, unless you ask for earlier deletion.
- Contract, invoice and accounting records: as required by Latvian law (generally up to 5 to 10 years).
- Server logs: up to 12 months.
- Cookie-consent record: up to 12 months in your browser.
5a. Cookies
Details are in our Cookie Policy.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict or object to processing (including processing based on legitimate interests), to data portability, and to withdraw consent at any time where processing is based on consent. To exercise your rights, write to [email protected]. We will reply within one month.
7. Complaints
You may lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), www.dvi.gov.lv, or with the supervisory authority in your EU country of residence.
8. Security
We use appropriate technical and organisational measures, such as encrypted connections (HTTPS), access control and limiting data access to those who need it. No internet transmission is completely secure.
9. Changes
We may update this policy; the current version is always published here with its date.