Privacy Policy
Last updated: 11 October 2026
This policy explains what personal data Spirit-Box collects when you visit spirit-box.com, ask for a quote, book a consultation, contact us, ask to become a Spirit-Box partner or take part in our referral programme, why we use it, and what your rights are.
1. Who we are
The controller of your personal data is:
SIA Spirit-Box
Reg. No. 40203721431
Parka iela 2-3, Priekuļi, Priekuļu pag., Cēsu nov., LV-4126, Latvia
Email: info@spirit-box.com
Phone / WhatsApp: +371 25 555 847
Spirit-Box is the official sales office of SIA Your Dream House (Reg. No. 42103094638, Ģenerāļa Baloža iela 3-46, Liepāja, LV-3414, Latvia), the factory that builds Spirit-Box homes.
We have not appointed a Data Protection Officer, as we are not required to. For any privacy question, write to info@spirit-box.com.
2. What data we collect
Data you give us
- Quote / contact form: your name, email address, phone number (with country code), referral code (optional) and your message (for example, which model you are interested in and where your site is). All fields are required except the referral code.
- Consultation booking: your first name, last name, email address, phone number and the date and time you choose.
- Partner enquiries: sent through our contact form, with the same fields as a quote request.
- Referral programme: if you are a Spirit-Box owner, your name and contact details as a code owner, your referral code and the credit you receive. If you buy with a referral code, the code you used, linked to your order.
- Email, phone and WhatsApp: whatever you send us, such as your contact details, site location, plans, photos or documents.
- If you become a customer: your billing and delivery address, the site address and access details, the contents of your Sales Agreement, payment records, and correspondence about production, delivery, assembly and warranty.
Please do not send us more personal data than we need (for example, ID documents) unless we ask for it.
Data collected automatically
- Technical data: when you visit the site, our hosting provider (Netlify) processes your IP address, browser type, device information, the pages requested and the date and time, in server logs. This is needed to deliver the site and keep it secure.
- Cookies and similar technologies: see section 10.
3. Why we use your data and our legal basis
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Answering your enquiry, preparing a quote, sending our catalogue | Form and message data | Steps at your request before entering into a contract (Art. 6(1)(b)) |
| Arranging and holding a consultation | Booking data | Steps at your request before entering into a contract (Art. 6(1)(b)) |
| Answering a partner enquiry and sending our catalogue and partner information | Contact form data | Steps at your request before entering into a contract (Art. 6(1)(b)) |
| Running the referral programme for code owners: issuing your code, granting and keeping track of your credit | Code owner's identity and contact details, referral code, credit records | Performance of a contract: the Referral Programme Terms (Art. 6(1)(b)) |
| Linking a referral code to the order it is used in, telling the code owner that a purchase with their code has been completed, and preventing misuse of codes | Referral code, the fact that an order was completed and paid | Legitimate interest (Art. 6(1)(f)): running a fair referral programme; for the new buyer's discount, also performance of the Sales Agreement (Art. 6(1)(b)) |
| Concluding and performing the Sales Agreement: production, transport, assembly, handover, warranty | Customer data | Performance of a contract (Art. 6(1)(b)) |
| Keeping accounting and tax records | Invoices, payment records, the contract | Legal obligation (Art. 6(1)(c)) |
| Following up on a quote we sent you, within a reasonable time | Contact data, enquiry | Legitimate interest (Art. 6(1)(f)): replying to people who have shown interest in our homes |
| Running the website securely, preventing abuse and spam | Technical data | Legitimate interest (Art. 6(1)(f)): a working, secure website |
| Establishing, exercising or defending legal claims | Relevant records | Legitimate interest (Art. 6(1)(f)): protecting our legal position |
| Analytics and other non-essential cookies (we do not use any at present; see section 10) | Cookie data | Your consent (Art. 6(1)(a)) |
Where we rely on legitimate interest, we have balanced our interest against your rights. You can object at any time (see section 8).
Where we rely on consent, you can withdraw it at any time. This does not affect processing before you withdrew it.
Do you have to give us your data? No. But without your contact details we cannot reply to your enquiry or prepare a quote, and without the data needed for the Sales Agreement we cannot sell or deliver a home to you.
We do not send newsletters or marketing emails. If we ever do, we will ask for your consent first where the law requires it.
4. Who receives your data
We do not sell your personal data. We share it only with:
Service providers who process data for us (processors)
- Hosting and forms: Netlify, Inc. (USA) hosts the website. Submissions of the quote / contact form and the consultation booking are received through Netlify Forms and sent to us by email at info@spirit-box.com.
- Email: Google (Google Workspace / Gmail). Email sent to info@spirit-box.com is stored and handled in Google's systems.
- Domain and email forwarding: name.com, Inc. (USA) manages our domain and forwards email sent to info@spirit-box.com.
Independent recipients
- WhatsApp (Meta): if you choose to contact us on WhatsApp, your messages are also processed by WhatsApp under its own privacy policy. For users in the EU/EEA, the provider is WhatsApp Ireland Limited.
- SIA Your Dream House (the manufacturer): if you request a quote or become a customer, we share the details needed to prepare the quote, build, deliver and assemble your home and handle warranty claims.
- Transport, crane and assembly partners: for customers, the delivery address, site access details and a contact name and phone number.
- Code owners in the referral programme: if you buy with a referral code, we tell the code owner only that a purchase with their code has been completed. We never tell them your price or any other details of your order.
- Accountants, auditors, banks, insurers and legal advisers, where needed.
- Public authorities and courts, where the law requires it.
5. International transfers
Some of our providers are based in, or access data from, countries outside the European Economic Area (EEA), mainly the USA (Netlify, Google, name.com, and Meta for WhatsApp).
We transfer data outside the EEA only with a safeguard required by the GDPR:
- an adequacy decision of the European Commission, including the EU-US Data Privacy Framework for US companies certified under it, or
- Standard Contractual Clauses approved by the European Commission, with additional measures where needed.
Netlify: Netlify, Inc. (USA) hosts the website and receives the form and booking submissions, so this data is transferred to the USA. This transfer relies on the safeguards described in Netlify's Data Processing Agreement (EU–US Data Privacy Framework and/or Standard Contractual Clauses).
You can ask us for more information about these safeguards at info@spirit-box.com.
6. How long we keep your data
| Data | How long |
|---|---|
| Enquiries, quotes, booking requests and partner enquiries that do not lead to a contract | 24 months after our last contact, then deleted |
| Partner data, if you become a Spirit-Box partner | For the duration of the partner agreement, and then until the time limits for legal claims have passed |
| Referral programme data (code owner, referral code, the link between a code and an order, credit records) | For as long as the credit can be used (up to 24 months after it is granted), and then for the periods required by accounting and tax law (see the accounting and tax records row below) |
| Customer data, the Sales Agreement and correspondence | For the duration of the contract and the warranty period, and then until the time limits for legal claims have passed |
| Accounting and tax records (invoices, payment records) | As required by law. Under the Latvian Accounting Law, source documents are kept for at least 5 years and some records for 10 years |
| Server logs | For the period set by our hosting provider (Netlify) for its logs, and no longer than needed to deliver the site and keep it secure |
| Your cookie notice setting | 12 months, after which we show the notice again |
When a period ends, we delete the data or make it anonymous.
7. How we protect your data
We use providers with recognised security standards, encrypted connections (HTTPS), access controls and two-factor authentication on our accounts. Only people who need your data for the purposes above can access it.
8. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- rectification of inaccurate or incomplete data;
- erasure ("right to be forgotten"), where the law allows;
- restriction of processing in certain cases;
- data portability: receive data you gave us in a structured, machine-readable format, where processing is based on consent or a contract and is automated;
- object at any time to processing based on our legitimate interest, for reasons relating to your situation;
- withdraw your consent at any time, where processing is based on consent.
To use any of these rights, email info@spirit-box.com. We will reply within one month. We may ask you to confirm your identity first. Using your rights is free of charge, unless a request is clearly unfounded or excessive.
9. Your right to complain
If you think we have handled your data unlawfully, you can complain to the Latvian supervisory authority:
Datu valsts inspekcija (Data State Inspectorate of Latvia)
Elijas iela 17, Riga, LV-1050, Latvia
www.dvi.gov.lv · pasts@dvi.gov.lv
You can also complain to the data protection authority in the EU/EEA country where you live or work, or where the alleged breach took place. We would appreciate the chance to resolve your concern first, so please contact us.
10. Cookies
Cookies are small files that a website stores on your device. Similar technologies, such as local storage, work in the same way, and this section covers them too.
Strictly necessary cookies are needed for the site to work, for example to remember that you have seen our cookie notice, and to keep the site and the form secure. They do not need your consent. You can block them in your browser, but parts of the site may then not work.
Analytics cookies: we do not use any at present. If we add an analytics tool in future, we will set analytics cookies only with your consent, ask for your choice in a cookie banner first and update this policy before we start.
Marketing cookies: we do not use any.
| Name | Provider | Purpose | Type | Duration |
|---|---|---|---|---|
| Cookie notice setting | Spirit-Box | Remembers that you have seen our cookie notice | Strictly necessary | 12 months |
You can delete cookies at any time in your browser settings. If we add analytics cookies, you will be able to change or withdraw your choice at any time through "Cookie settings" at the bottom of every page.
Embedded content: if the site embeds content from other services (for example videos, maps or a booking calendar), those services may set their own cookies. We load them only after you consent, or we use a privacy-friendly embed.
11. Automated decisions
We do not make decisions about you based solely on automated processing, including profiling, that have legal or similarly significant effects on you.
12. Children
Our website and our homes are aimed at adults. We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data, contact us and we will delete it.
13. Links to other websites
Our site may link to other websites, such as WhatsApp. We are not responsible for their privacy practices. Please read their privacy policies.
14. Changes to this policy
We may update this policy, for example when we add a new service or tool. The date at the top shows when it was last changed. If the changes are significant, we will show a notice on the site or, where appropriate, tell you directly.
15. Contact
SIA Spirit-Box
Parka iela 2-3, Priekuļi, Priekuļu pag., Cēsu nov., LV-4126, Latvia
info@spirit-box.com · +371 25 555 847
This document is available in several languages. Translations are provided for convenience; if they differ, the English version prevails, except where mandatory consumer law of your country provides otherwise.