Privacy Notice

Last updated: 01 August 2026

Controller

Your Company SIA, Riga, Latvia. Contact: support@example.com.

Data collected

Account identity, contact details, profile and skills, booking records, payment and payout references, ratings, support messages, security logs, device/IP information and private work evidence.

Purposes and legal bases

Data is used to perform marketplace contracts, process payments, verify service completion, prevent fraud, secure accounts, resolve disputes, meet accounting/tax duties and improve the service. The final notice must map each purpose to contract, legal obligation, legitimate interest or consent as appropriate.

Payments

Full card details and connected-account identity checks are handled by the payment provider. NALDERN stores transaction identifiers, statuses and reconciliation information but is not designed to store full card numbers.

Private evidence

Evidence images are not published on worker profiles. Access is limited to the submitting professional and authorised administrators. Production storage must use private object storage, encrypted transport and a documented deletion schedule.

Recipients

Data may be shared with payment, hosting, database, object storage, email, security, accounting and professional advisers where necessary and subject to suitable agreements.

Your rights

Depending on applicable law, users may request access, correction, deletion, restriction, portability or objection and may complain to the Latvian Data State Inspectorate or another competent supervisory authority.

Security

The application includes password hashing, signed sessions, CSRF protection, rate-limited logins, optional email verification and admin TOTP, private evidence routes, upload validation, event idempotency and audit logs. Production also requires HTTPS, managed backups, monitoring, least-privilege access and incident response.