SIA Direkt Design
Registration No. 40203779277
Registered address: Vidzemes prospekts 10–19, Zaķumuiža, Ropažu pag., Ropažu nov., LV-2133, Latvia
Email: hello@direkt.design
Last updated: 12 September 2026
Who we are
SIA Direkt Design ("Direkt Design", "we", "us") provides subscription-based graphic design services to businesses. We are the datacontroller for the personal data described in this policy.
For any question about this policy or your data, contact hello@direkt.design.
What data we collect and why
If you are a client or enquire about our services
Data | Purpose | Legal basis |
|---|---|---|
| Name, business email, company name, job title | Communicating with you, delivering theservice | Performance of a contract |
| Billing details, company address, VAT number,payment history | Processing payments, issuing invoices | Performance of a contract; legalobligation |
| Project briefs, files and correspondence | Producing and delivering design work | Performance of a contract |
| Records of invoices and transactions | Meeting accounting and tax obligationsunder Latvian law | Legal obligation |
We do not have access to your full card details. Card payments are handled directly by Stripe.
If we contact you about our services
We carry out business-to-business outreach. Where we do, we may hold:
Data | Purpose | Legal basis |
|---|---|---|
| Business contact details (name, role, company, business email),publicly available company information, and our own notes onyour company's public visual materials | Assessing whether our servicesmay be relevant, and contactingyou about them | Legitimate interests(direct B2Bmarketing) |
This information is collected from publicly available business sources such as company websites, public business registers and publicprofessional profiles. We do not collect data from private accounts or purchase contact lists.
You can ask us to stop at any time by replying to any message or emailing hello@direkt.design. We will remove your details promptlyand keep a minimal record only to ensure we do not contact you again.
If you visit our website
Our website is hosted on Framer, which may set cookies and collect basic technical data such as IP address, browser type and pagesvisited, for security and to measure site usage. Where non-essential cookies are used, we ask for your consent first. You can withdrawconsent at any time through your browser settings.
Who we share data with
We use the following service providers ("processors"), who process data on our behalf under written agreements:
Provider | Purpose | Location |
|---|---|---|
| Stripe | Payment processing and subscription billing | EU / USA |
| Google (Google Drive / Workspace) | File storage, email, document collaboration | EU / USA |
| Framer | Website hosting | EU / USA |
We also share data with our accountant and, where required, with tax authorities, in order to meet our legal obligations.
We do not sell personal data, and we do not share it for third-party advertising.
International transfers
Some of our providers are based outside the European Economic Area, or may process data outside it. Where that happens, transfers areprotected by the European Commission's Standard Contractual Clauses or another safeguard recognised under the GDPR. You can askus for details of the safeguards that apply.
How long we keep data
• Client project files and correspondence: for the duration of the subscription and up to twenty-four (24) months afterwards, sothat we can respond to follow-up requests. Deleted sooner on request, subject to our legal retention duties.
• Invoices and accounting records: for the period required by Latvian accounting and tax law (currently five years).
• Prospect and outreach data: up to twelve (12) months from the last contact, unless you become a client or ask us to delete itsooner.
• Opt-out records: kept indefinitely, in minimal form, so that we do not contact you again.
Data we process on behalf of clients
If you are a client and you provide us with personal data belonging to your own customers, staff or contacts — for example a mailing listto be used in an email design — you remain the controller of that data and we act as your processor.
In that role we process such data only on your instructions, keep it confidential, apply appropriate security measures, and delete orreturn it on request. The relevant terms are set out in our Terms of Service.
Security
We use access-controlled cloud storage, two-factor authentication where available, and encrypted connections. Access to client files islimited to those who need it to deliver the service — currently a single designer.
No system is completely secure. If a data breach occurs that is likely to result in a risk to your rights, we will notify you and thesupervisory authority as required by law.
Your rights
Under the GDPR you have the right to:
• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data erased where there is no ongoing legal or contractual need for it
• Restrict or object to processing, including objecting to direct marketing at any time
• Receive your data in a portable format
• Withdraw consent where processing is based on consent, without affecting processing carried out before withdrawal
To exercise any of these rights, email hello@direkt.design. We will respond within one month.
If you are not satisfied with our response, you may lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija,www.dvi.gov.lv) or with the supervisory authority in your own country.
Changes to this policy
We may update this policy from time to time. The current version is always published on our website with the date it was last updated.Material changes affecting clients will be notified by email.
Contact
SIA Direkt Design, Registration No. 40203779277, Vidzemes prospekts 10–19, Zaķumuiža, Ropažu pag., Ropažu nov., LV-2133, Latvia