1. Who is responsible

The controller for the personal data processed on doingbusiness.live is Doing Business Live SIA, Matisa str 61 - 23, Riga, LV-1009, Latvia ("we", "us"). For anything in this policy, write to info@doingbusiness.live.

2. What we collect

What you give us

  • Name and email address when you create an account
  • Profile information you add, such as a short bio, a picture and links to social profiles
  • What you send through the contact form: name, email address, company and message
  • Email address and company when you join a waitlist
  • Reviews and forum posts you publish
  • For the Opportunity Scan: the website address you enter and your answers to the scan questions

What is collected automatically

  • Technical data your browser sends with every request: IP address, browser, operating system and device, the page requested and the page you came from. Our hosting providers process it to deliver the site and keep it secure.
  • Only with your consent: which pages you read, for how long and from roughly where, measured by Google Analytics (see section 3).

3. Cookies and similar technologies

We store only what the site needs, and use analytics only if you agree:

  • Necessary: Signing in keeps a session in your browser's local storage, and your cookie choice is stored the same way. These need no consent, because the site cannot work without them.
  • Analytics (Google Analytics): Loaded only after you click Accept in the cookie banner. It sets the cookies _ga and _ga_<id>, which are kept for up to two years. If you click Decline, Google Analytics is not loaded and no analytics cookies are set.

You can change your choice at any time with the button below, or with “Cookie settings” in the site footer. Withdrawing consent stops Google Analytics and deletes its cookies; it does not affect processing that took place before.

4. Why we use your data, and on what legal basis

  • Your account, your profile and the services you use, including the Opportunity Scan: to perform our contract with you (Art. 6(1)(b) GDPR).
  • Answering what you send us through the contact form: to take the steps you asked for before a contract (Art. 6(1)(b) GDPR) or, for other enquiries, our legitimate interest in answering them (Art. 6(1)(f) GDPR).
  • Updates and newsletters: only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
  • Analytics: only with your consent (Art. 6(1)(a) GDPR).
  • Delivering the site securely and preventing abuse: our legitimate interest in a working and safe website (Art. 6(1)(f) GDPR).
  • Legal obligations, such as tax and accounting records: Art. 6(1)(c) GDPR.

5. The Opportunity Scan

When you scan a website, we read its public pages the way a visitor's browser would, and build a report from what we read, the address you entered and your answers.

  • Google PageSpeed Insights: we send the website address to Google, which loads that site's start page to measure how fast it is. Nothing else you enter is sent to Google.
  • OpenAI: the text we read from the public pages and your answers to the scan questions are sent to OpenAI, which writes the explanatory parts of the report. Your name and email address are not sent.
  • Your account: the address, your answers and the report are stored in your account, and the report is emailed to you.

The report is produced automatically and is a basis for a conversation. We make no decisions about you based solely on automated processing that have legal or similarly significant effects on you (Art. 22 GDPR).

6. Who receives data

We do not sell personal data. These providers process it for us:

  • Vercel: hosts the website.
  • Google Cloud: runs our servers, in the EU (Finland).
  • Supabase: our database and sign-in, in the EU (Sweden).
  • Google: delivers our email.
  • Google Analytics: only with your consent, see section 3.
  • Google PageSpeed Insights and OpenAI: for the Opportunity Scan, see section 5.

We also pass on data to authorities, courts or professional advisers where the law requires it, or to establish, exercise or defend legal claims.

7. Transfers outside the EU and EEA

Vercel, Google and OpenAI are based in the United States or belong to groups based there, so data can reach the United States. These transfers rest on the European Commission's adequacy decision for the EU-US Data Privacy Framework where the provider is certified under it, and otherwise on the Commission's standard contractual clauses (Art. 45 and 46 GDPR).

8. How long we keep data

  • Account, profile, scans and reports: for as long as your account exists, or until you ask us to delete them.
  • Contact form messages: for as long as we need them to answer and follow up your enquiry.
  • Analytics cookies: up to two years, or until you withdraw your consent.
  • Records the law requires us to keep: for the period the law sets.

9. Your rights

Under the General Data Protection Regulation you have the right to:

  • access the personal data we hold about you (Art. 15)
  • have inaccurate data corrected (Art. 16)
  • have your data erased (Art. 17)
  • have processing restricted (Art. 18)
  • receive your data in a portable format (Art. 20)
  • object to processing based on our legitimate interests (Art. 21)
  • withdraw your consent at any time, without affecting processing before the withdrawal (Art. 7(3))

To use these rights, write to info@doingbusiness.live.

You also have the right to lodge a complaint with a supervisory authority (Art. 77) — in Latvia the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv), or the authority where you live or work.

10. Data security

We use appropriate technical and organisational measures to protect your personal data. No transmission over the internet is completely secure, however.

11. Links to other websites

Our website links to other websites. We are not responsible for how those sites handle your data.

12. Changes to this policy

We update this policy when what we do with data changes. The date at the top is the date of the last change.

13. Contact

Questions about this policy go to:

Doing Business Live SIA
Matisa str 61 - 23, Riga, LV-1009, Latvia
Email: info@doingbusiness.live