Who is responsible
Data controller: SIA "Skajnet", registration number 40203344888, a Latvian sabiedrība ar ierobežotu atbildību (SIA), VAT registration number LV40203344888, with registered office at Rigondas gatve 4 - 6, Rīga, LV-1067, Latvia, operating under the Pragmatic Loop brand.
Privacy contact: privacy@pragmaticloop.com.
Data this site and business may receive
- The first-party inquiry form may receive your name, work email, company or team, selected service route, workflow summary, systems involved, and consent confirmation. It has no file upload, visitor account, client-side or third-party analytics, advertising tracker, third-party CAPTCHA, or automatic reply.
- The form uses one strictly necessary session cookie for same-origin CSRF protection and a ten-minute resend limit. The cookie expires when the browser session ends; its server-side token and timestamps are limited to about 30 minutes and do not contain the inquiry text.
- The Workflow Fit Check and n8n review brief process fixed structured choices only in the browser. The private webhook failure triage follows the same local-only pattern and accepts no free text, payload, credential, URL, identifier, or upload. The site sends and stores none of those choices. A clipboard copy or email composition is created only when the visitor chooses that action; the visitor’s browser, clipboard, and email application then operate under their own controls.
- Hosting infrastructure may process IP address, user agent, timestamp, requested path, referrer, and security log data. A private first-party process reduces the host's existing AWStats file to fixed traffic, day, origin-category, and robot-family totals. It discards IP/host, raw referrer, query, search-term, login, user-agent, and error-detail sections in memory and does not store or print them locally.
- If you contact us by form, email, marketplace, or another channel, we may receive your name, professional contact details, platform username, message, and project information you choose to provide.
- For lead research, we may record minimal professional information from a public marketplace listing: role, company where shown, country, source URL, public budget signal, fit notes, and listing status.
- Do not send passwords, access tokens, payment-card data, government IDs, health data, or personal data about other people in an initial inquiry.
Purposes and proposed legal bases
| Purpose | Proposed basis |
|---|---|
| Respond to an inquiry and evaluate a requested project | Steps requested before a possible contract |
| Maintain security, prevent abuse, and preserve a minimal audit record | Legitimate interests, balanced against individual rights |
| Measure aggregate first-party server traffic and distinguish operational or crawler activity from possible acquisition signals | Legitimate interests, using data minimisation and no visitor-side tracking |
| Maintain required accounting, contractual, or legal records | Legal obligation or contract, as applicable |
| Send optional marketing not necessary for an inquiry | Consent where required; no automated marketing is active at launch |
The applicable basis depends on the real interaction and may change if the service or legal obligation changes.
Retention schedule
- Unconverted inquiries: deletion or anonymisation 12 months after the last substantive contact, unless a dispute or legal duty requires longer.
- Inquiry-form session data: approximately 30 minutes server-side; the essential cookie itself expires with the browser session.
- Public lead-research records: review every 90 days; remove closed records from active targeting while retaining minimal aggregate evidence.
- Proposal and negotiation records: retention for 24 months unless a contract, dispute, or legal obligation requires longer.
- Client and accounting records: retained for the period required by the contract and applicable Latvian accounting, tax, and company law.
- Hosting and security logs: retained according to the hosting configuration only as long as needed for availability, abuse prevention, and incident investigation.
- Private traffic aggregates: fixed counters retained for 13 rolling report months. The fetched AWStats file has no durable local copy; provider-side log and AWStats retention remains subject to the hosting configuration.
Your rights
Depending on the applicable law, you may request information and access, correction, deletion, restriction, portability, or object to processing. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing. You may also complain to the competent supervisory authority.
EU guidance describes these rights and the information a controller must provide: European Commission: information for individuals. If the controller is established in Latvia, the supervisory authority is the Data State Inspectorate.
AI and automated decisions
AI may assist internal research, classification, drafting, and software workflows. Pragmatic Loop does not use the launch website to make solely automated decisions that create legal or similarly significant effects for visitors. Prices, contracts, payments, deadlines, and project acceptance remain human decisions.
Questions and requests
Contact privacy@pragmaticloop.com. We may need proportionate information to verify a request and protect another person’s data.
Effective 17 July 2026. Prepared against GDPR Articles 13 to 15 and current European Commission guidance. Applicable law and authoritative interpretation remain controlling.