Privacy policy
This policy was last updated: 2026-07-30
Who we are
This website is operated by SIA "Male Grooming" (brand "Lumberjack Barbershop"). Registration number: 40103900666. VAT number: LV40103900666. Registered address: Gunāra Astras iela 8 k-1 - 83, Riga, LV-1082, Latvia. For any questions about personal data, contact: info@lumberjack.lv. We are the data controller for the data we collect on this website.
What data we collect and where from
| Where | What data | Processor |
|---|---|---|
| Booking | name, phone, email, visit history | Altegio |
| Forms (franchise, gift card, careers, free cut) | name, phone, email, message | Resend (delivery), Telegram (leads) |
| Anti-bot protection on forms | IP, browser data | Cloudflare Turnstile |
| Analytics and advertising (only with consent) | visits, source, device data, click data | Google (Analytics, Ads) |
| Site operation and logs | IP, technical request data | Vercel |
| Cache and rate limiting | IP (temporarily) | Upstash Redis |
| Geo-routing | country by IP | Vercel |
Site content is managed in Sanity CMS, which does not store visitor personal data.
Why we process data (legal basis)
Performance of a contract (GDPR Art. 6(1)(b)): processing bookings and providing services. Consent (GDPR Art. 6(1)(a)): communication via forms, and analytics and advertising cookies. Legitimate interests (GDPR Art. 6(1)(f)): site security, anti-bot protection, technical logs.
Analytics and advertising cookies are used only if you have accepted them in the consent banner. You can withdraw consent at any time.
Who we share data with
We use trusted processors that handle data only on our behalf: Altegio (bookings), Vercel (hosting), Upstash (caching), Resend (email delivery), Cloudflare (anti-bot), Telegram (receiving leads), Google (visit analytics and advertising performance, only with consent). We do not sell personal data to third parties.
Data transfers outside the EU
Some processors (Vercel, Cloudflare, Telegram, Google) may process data outside the European Economic Area. In such cases we rely on the European Commission's Standard Contractual Clauses (SCC) to ensure an adequate level of data protection.
How long we keep data
Booking data: while the client is active, no longer than 24 months after the last visit. Form submissions: until the enquiry is resolved, no longer than 12 months. Analytics data: per Google settings (e.g. up to 14 months). Technical logs: short-term, for security purposes.
Your rights
You have the right to access, rectify, erase, restrict processing of, object to processing of, and port your data, and to withdraw consent at any time (including analytics and advertising cookies via the cookie settings on the site). To exercise these rights, contact info@lumberjack.lv.
If you believe your rights have been violated, you may lodge a complaint with the supervisory authority: Datu valsts inspekcija (State Data Inspectorate of Latvia, www.dvi.gov.lv).
Data security
We apply appropriate technical and organisational measures to protect data against unauthorised access, loss or disclosure, including encrypted connections (HTTPS) and anti-bot protection.
Contact and updates
For questions about this policy, contact info@lumberjack.lv.