Privacy Policy

This policy explains what personal data is processed on the allcredits.lv website (the “Site”), why, on what legal basis and for how long, and what rights you have. It has been prepared in accordance with the EU General Data Protection Regulation (GDPR).

Last updated: October 2026.

1. Who is responsible for your data

The data controller is SIA ESWA, registration number 42403044532, address: Brāļu Skrindu iela 9, Rēzekne, LV-4601, Latvia. For data protection questions, write to info (at) allcredits.lv or use our contact form.

2. What data we process

You don’t need to provide any personal data to use the catalogue: there is no registration, and every page can be viewed without telling us anything about yourself. Data is processed only in the cases described below.

2.1. Contact form

When you write to us through the form, we receive your name, email address, subject and message.

2.2. Reviews and comments

When you leave a review or comment, we receive the name, email address and text you enter, as well as your IP address and the time of submission. Your name and text are published on the Site; your email address and IP address are not.

2.3. Technical data

When you visit the Site, the server automatically records technical data: IP address, browser and device type, the address of the page opened, the referring source, and the date and time of the request.

2.4. Cookies and third-party services

The Site uses services that may store cookies and receive technical data about your device:

• Google Analytics — visitor statistics;
• Google AdSense — displaying advertising;
• Google reCAPTCHA — protecting forms against spam;
• affiliate networks — when you follow a link to a lender, the affiliate network may store a cookie to record your visit.

On your first visit, a window appears in which you can accept or refuse the use of cookies for advertising and statistics. You can change your choice at any time via the privacy settings link on the Site.

For more details, see Information about cookies.

3. Purposes and legal basis

• Replying to your messages — our legitimate interest in responding to enquiries (Article 6(1)(f) GDPR) or, where cooperation is concerned, steps prior to entering into a contract (Article 6(1)(b) GDPR).
• Publishing reviews and comments — your consent, given when you submit a review (Article 6(1)(a) GDPR).
• Operating and securing the Site, protection against spam (technical data, reCAPTCHA) — our legitimate interest (Article 6(1)(f) GDPR).
• Visitor statistics and advertising (Google Analytics, Google AdSense) — your consent to the use of cookies (Article 6(1)(a) GDPR).
• Compliance with legal obligations, for example at the request of public authorities (Article 6(1)(c) GDPR).

We do not use your data for mailings and do not sell it to third parties.

4. How long we keep data

• Contact form messages — for as long as needed to reply and handle related correspondence, after which they are deleted.
• Reviews and comments — for as long as they are published on the Site or until you ask us to delete them.
• Technical data (server log files) — no longer than 1 year.
• Third-party cookies — for the period set by the respective service.

5. Who receives data

Data may be received by: the Site’s hosting provider and email service — only to the extent necessary for the Site and email to work; Google — when the services listed in section 2.4 are used; affiliate networks — only when you follow an affiliate link; public authorities — where required by law.

Google may process data outside the EU, including in the United States. Such transfers take place on a basis provided for by the GDPR, for example the EU Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

6. Your rights

You have the right to:

• find out what data about you we process and receive a copy of it;
• correct inaccurate data;
• request erasure of your data;
• restrict or object to the processing of your data;
• receive your data in a machine-readable format;
• withdraw your consent at any time — this does not affect the lawfulness of processing before withdrawal.

To exercise these rights, write to us at info (at) allcredits.lv. We will reply within one month. If you believe your rights have been violated, you can lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv).

7. Data security

The Site uses the secure HTTPS protocol. Only the Site administration has access to messages from forms and comment data.

8. Changes to this policy

We may update this policy, for example when new services are added. The current version is always published on this page, and the date of the last update is shown at the top.