Privacy Notice
Last updated: 01 August 2026
Add the final retention schedule, subprocessors, cookie inventory, international transfer safeguards and data-protection contact.
Controller
Your Company SIA, Riga, Latvia. Contact: support@example.com.
Data collected
Account identity, contact details, profile and skills, booking records, payment and payout references, ratings, support messages, security logs, device/IP information and private work evidence.
Purposes and legal bases
Data is used to perform marketplace contracts, process payments, verify service completion, prevent fraud, secure accounts, resolve disputes, meet accounting/tax duties and improve the service. The final notice must map each purpose to contract, legal obligation, legitimate interest or consent as appropriate.
Payments
Full card details and connected-account identity checks are handled by the payment provider. NALDERN stores transaction identifiers, statuses and reconciliation information but is not designed to store full card numbers.
Private evidence
Evidence images are not published on worker profiles. Access is limited to the submitting professional and authorised administrators. Production storage must use private object storage, encrypted transport and a documented deletion schedule.
Recipients
Data may be shared with payment, hosting, database, object storage, email, security, accounting and professional advisers where necessary and subject to suitable agreements.
Your rights
Depending on applicable law, users may request access, correction, deletion, restriction, portability or objection and may complain to the Latvian Data State Inspectorate or another competent supervisory authority.
Security
The application includes password hashing, signed sessions, CSRF protection, rate-limited logins, optional email verification and admin TOTP, private evidence routes, upload validation, event idempotency and audit logs. Production also requires HTTPS, managed backups, monitoring, least-privilege access and incident response.