Privacy Policy

1. Who we are

This website (latviaresidence.com) is operated by SIA "Las Palmas", a Latvian limited liability company.

• Registration number: 42103079906
• Registered office: Rietumkrasta iela 2-11, Liepāja, LV-3416, Republic of Latvia
• Data controller email: info@latviaresidence.com
• Phone: +371 28 100 597

We are the data controller for personal data collected through this website. We are subject to the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Latvian Personal Data Processing Law.

2. What data we collect

We collect only the data we need to respond to your enquiry and to deliver our consulting services.

2.1 When you contact us

• Your name and email address
• Phone number, including WhatsApp number, if you choose to provide it
• Country of residence and nationality, if you tell us
• The content of your message, including any information about your family or finances you choose to share

2.2 When you download our handbook

• Your name and email address
• Country of residence and nationality

2.3 When you become a client

The full document set required by Latvian immigration law and anti-money-laundering regulations — passports, bank statements, source-of-funds documents, criminal record certificates, and family documents — for you and any family member included in the application.

2.4 Automatically when you visit the site

• Your IP address
• Your browser type and operating system
• The pages you view and the time of your visit

We use Cloudflare Web Analytics, which is privacy-friendly and does not use tracking cookies. We do not use Google Analytics, Facebook Pixel, or any other third-party tracking technology on this website.

3. Why we collect this data (legal bases)

Under GDPR Article 6, every act of data processing requires a legal basis. Here are the bases we rely on:

• Consent (Article 6(1)(a)) — when you fill in the contact form or subscribe to receive the handbook by email, you give consent for us to use that information to respond to you.
• Contract (Article 6(1)(b)) — when you become a client, we process your data to perform the contract we have signed with you.
• Legal obligation (Article 6(1)(c)) — Latvian anti-money-laundering law requires us to verify your identity and document the source of the funds you transfer into Latvia. We are required to retain certain records for a minimum of five years after the end of our business relationship.
• Legitimate interest (Article 6(1)(f)) — we have a legitimate interest in maintaining server logs, in defending against fraud and abuse, and in improving our website. We balance this against your rights and freedoms and we collect only what is necessary.

4. Who we share your data with

We share your data only with the following recipients, and only to the extent strictly necessary to deliver the service you have asked for.

• Mārtiņš Grīnbergs, sworn advocate of the Latvian Bar — our legal counsel. He receives your application documents in order to file your residence permit application with the Office of Citizenship and Migration Affairs of the Republic of Latvia. He is bound by professional secrecy under Latvian law.
• The Office of Citizenship and Migration Affairs (OCMA) of the Republic of Latvia — the state authority that issues residence permits. Your application documents are submitted to OCMA as part of the formal filing.
• The Latvian state budget and Ministry of Finance — for the €10,000 state contribution required by law.
• Cloudflare, Inc. — our hosting and content-delivery provider. Server logs are routed through Cloudflare's infrastructure. Cloudflare is GDPR-compliant under EU Standard Contractual Clauses.
• SIA "Mailgroup Latvia" / inbox.eu — our email service provider. Your messages to info@latviaresidence.com are stored on their infrastructure inside the European Union.

We do not sell your data. We do not transfer your data to any third party other than those listed above. We do not transfer your data outside the European Economic Area except as part of Cloudflare's global infrastructure (and Cloudflare's data-transfer mechanisms are GDPR-compliant).

5. How long we keep your data

• Contact form messages and unsolicited enquiries: 24 months from the date of the last interaction, then deleted.
• Handbook download email list: until you unsubscribe.
• Client records (signed contract, source-of-funds file, application file): minimum five years after the end of the contractual relationship, as required by Latvian anti-money-laundering law. Longer if required by other applicable law.
• Server logs: 90 days, then deleted.

6. Your rights under GDPR

You have the following rights, which you can exercise free of charge at any time by writing to info@latviaresidence.com.

• The right of access (Article 15) — to obtain a copy of the personal data we hold about you.
• The right to rectification (Article 16) — to correct inaccurate data.
• The right to erasure (Article 17) — to ask us to delete your data, where one of the GDPR grounds for erasure applies.
• The right to restrict processing (Article 18) — to ask us to stop using your data in specified ways.
• The right to data portability (Article 20) — to receive your data in a machine-readable format.
• The right to object (Article 21) — to processing based on legitimate interest.
• The right to withdraw consent — where the processing is based on your consent. Withdrawal does not affect the lawfulness of processing before the withdrawal.
• The right to lodge a complaint with the Latvian Data State Inspectorate (dvi.gov.lv) or with the data protection authority in your country of residence.

We will respond to any rights request within 30 days. If your request is complex or you make several requests, we may extend this period by a further 60 days and will tell you why.

7. Cookies

This website does not use tracking cookies. We use only essential cookies that the website requires to function — for example, a cookie that remembers your language preference if you choose one. See our Cookie Policy for the full list and how to opt out.

8. Security

We use industry-standard technical and organisational measures to protect your data. The website runs over HTTPS with TLS 1.3 encryption. Source-of-funds files and application documents are stored on encrypted infrastructure. Access to client files is restricted to Jānis Rupeiks and Mārtiņš Grīnbergs personally. We do not store payment card data — payments for legal fees and state contributions are made by bank transfer directly to the recipient.

9. Children

This website is not intended for use by anyone under the age of 18, and we do not knowingly collect data from anyone under 18. The investor of the residence permit must be an adult. Children included in a family application are documented through their parent or legal guardian.

10. Changes to this policy

We may update this policy from time to time, for example when we add a new feature to the website or when the law changes. The "Last updated" date at the top of this page tells you when the current version was published. If we make material changes, we will notify existing clients and email subscribers in advance.

11. Contact