Privacy Policy
This policy explains what personal data we collect when you visit this website or contact us, why we collect it, and the rights you have over it. We keep the site deliberately light: there is no account to create, nothing to buy here, and no advertising or cross-site tracking.
Who we are
This website is operated by Concept 27 SIA, trading as Sidecar (“Sidecar”, “we”, “us”). We are the data controller for the personal data described below.
Concept 27 SIA
Nīcgales iela 38-63, Riga, Latvia, LV-1035
Reg. Nr. 40203495052
hello@sidecar.world
What we collect
- What you send us. When you use the contact form we collect the name and email address you provide, your message, and the optional budget range you select. These are voluntary - you decide what to write.
- Basic technical data. Like any website, our hosting keeps short-lived server logs (for example your IP address, browser type and the pages requested) to run the site securely and diagnose problems.
- Aggregate analytics. We use Vercel Web Analytics, which is privacy-friendly and cookieless. It records anonymous, aggregated figures such as page views, referrers and approximate country. It does not use tracking cookies, does not build a profile of you, and cannot be used to identify you.
We do not use advertising or tracking cookies, and we do not sell your data or share it for marketing.
Why we use it, and our legal basis
- To answer you. We use the details from the contact form to reply to your enquiry and, if it leads there, to discuss working together. Legal basis: your consent and, where relevant, steps taken at your request before entering a contract (GDPR Art. 6(1)(a) and (b)).
- To run the site safely. We use technical data to keep the site available, secure and free of abuse. Legal basis: our legitimate interests (GDPR Art. 6(1)(f)).
- To understand usage. We use cookieless, aggregate analytics to see which work resonates and improve the site. Legal basis: our legitimate interests in a well-run site, balanced by the fact that the measurement is anonymous.
Who processes it for us
We keep the stack small and rely on a few reputable providers who process data on our instructions:
- Vercel - hosting, the cookieless analytics above, and file storage for the images and video shown on the site.
- Neon - the managed database that stores contact submissions and site content.
- Our email provider - so we can receive and reply to your message.
Our database and file storage are hosted in the EU (Frankfurt region). Where any provider processes data outside the EEA, that transfer is covered by appropriate safeguards such as the European Commission’s Standard Contractual Clauses.
How long we keep it
We keep contact submissions only for as long as needed to handle your enquiry and any reasonable follow-up, after which they are deleted. Server logs are short-lived and rotate automatically. Analytics data is aggregated and holds nothing that identifies you.
Your rights
Under the GDPR you can ask us to:
- access the personal data we hold about you;
- correct it if it is wrong, or complete it if it is incomplete;
- delete it, or restrict how we use it;
- object to processing based on our legitimate interests;
- receive it in a portable format; and
- withdraw any consent you gave, at any time.
To exercise any of these, write to hello@sidecar.world. You also have the right to lodge a complaint with the Latvian supervisory authority, the Data State Inspectorate (Datu valsts inspekcija), at dvi.gov.lv.
Changes to this policy
If we change how we handle data, we will update this page and the date above. Material changes will be made clear here.