Privacy Policy — Horizon Grid

1. Who we are

Horizon Grid SIA ("Horizon Grid", "we", "us") is a company registered in Latvia (registration no. 40203602016), with its registered address at Marijas iela 18A-10, Riga, LV-1011, Latvia. We are the data controller for personal data collected through horizongrid.eu (the "Site"), unless stated otherwise.

Contact for privacy matters: andreyfrost@gmail.com.

2. What personal data we collect

Contact form / consultation requests: name, email address, company or startup name, and the content of your message.
Booking a call: if you schedule a consultation through our booking tool, the scheduling provider processes your name, email and the details you provide, under its own privacy policy.
Usage data: if you consent to analytics cookies, we (or our processors) collect standard technical data such as pages viewed, referrer, device/browser type and approximate location derived from IP address.
Cookie preferences: your consent choices, stored in your browser.

We do not knowingly collect special categories of data (e.g. health, biometric, political opinions) through the Site, and we ask that you do not include such information in messages to us.

3. Why we process your data and our legal basis (GDPR)

Purpose	Data used	Legal basis (Art. 6 GDPR)
Responding to enquiries and consultation requests	Name, email, message	Steps taken at your request prior to entering a contract (Art. 6(1)(b)) / legitimate interest in responding to enquiries (Art. 6(1)(f))
Scheduling calls	Name, email, booking details	Performance of a contract / your consent to the booking provider
Site analytics	Usage data	Your consent (Art. 6(1)(a)), given via the cookie banner
Legal compliance, fraud prevention	As relevant	Legal obligation (Art. 6(1)(c)) / legitimate interest (Art. 6(1)(f))

4. How long we keep it

We keep enquiry and consultation data for as long as needed to respond and to maintain a reasonable business record of the relationship, and delete or anonymise it when no longer needed, unless a longer period is required by law. Analytics data is retained per the applicable analytics provider's default retention settings unless configured otherwise.

5. Who we share it with

We do not sell personal data. We may share limited data with:

Service providers who help us run the Site (e.g. hosting on Vercel, email, scheduling/analytics tools), acting as processors under data processing terms;
Professional advisers (legal, accounting) where necessary;
Authorities, where required by law.

6. International transfers

Some of our service providers (e.g. hosting, scheduling, analytics) may process data outside the EEA, including in the United States. Where this happens, we rely on appropriate safeguards recognised under GDPR, such as the EU Standard Contractual Clauses or a provider's adequacy-recognised certification.

7. Your rights under GDPR (EEA / UK / Switzerland)

If you are located in the EEA, UK or Switzerland, you have the right to:

Access the personal data we hold about you;
Request correction of inaccurate data;
Request erasure ("right to be forgotten"), subject to legal exceptions;
Request restriction of processing;
Object to processing based on legitimate interest;
Request data portability, where technically feasible;
Withdraw consent at any time, without affecting prior lawful processing;
Lodge a complaint with your local supervisory authority — in Latvia, the Data State Inspectorate (Datu valsts inspekcija).

To exercise any of these rights, contact us at andreyfrost@gmail.com. We will respond within one month as required by GDPR.

8. Your rights under CCPA / CPRA (California & US visitors)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you the right to:

Know what personal information we collect, use, disclose and (if applicable) sell or share;
Request deletion of your personal information, subject to exceptions;
Correct inaccurate personal information;
Opt out of the "sale" or "sharing" of personal information — we do not sell or share personal information as those terms are defined by CCPA/CPRA;
Limit use of sensitive personal information — we do not knowingly collect sensitive personal information through the Site;
Non-discrimination for exercising any of these rights.

To submit a request, email andreyfrost@gmail.com with "CCPA Request" in the subject line. We will verify your request using the information reasonably available to us before acting on it.

This policy is a general template covering the categories of processing typical of a consulting website and is provided for transparency. It does not replace tailored legal advice; if your use of the Site changes materially (e.g. you add new tracking tools, payment processing, or start handling special-category data), have it reviewed by a qualified lawyer before relying on it.

9. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top reflects the most recent revision. Material changes will be reflected on this page.

10. Contact

Horizon Grid SIA, Marijas iela 18A-10, Riga, LV-1011, Latvia
Email: andreyfrost@gmail.com