OwnerLeap — Buy & Sell Businesses in the Baltics

1. Who we are

This Privacy Policy applies to OwnerLeap SIA (registration number 40203707118), a limited liability company registered in Latvia, operating the platform at ownerleap.com(the "Platform"). OwnerLeap SIA is the data controller responsible for your personal data.

If you have any questions about this policy or how we handle your data, contact us at: martins@ownerleap.com

2. What data we collect

We collect the following categories of personal data:

Buyers: full name, email address, phone number (optional), company name (optional), buyer type, and account password (stored in encrypted form).
Sellers: full name, email address, phone number, and any information you voluntarily provide about your business during our onboarding process.
Brokers: full name, company name, email address, and phone number.
Usage data: pages visited, actions taken on the Platform, browser type, and IP address, collected automatically when you use the Platform.

3. Why we collect it and our legal basis

To provide the service (legal basis: contract)

We use your name, email, and contact details to create and manage your account, process access requests to listings, and communicate with you about your use of the Platform.

To contact you about your enquiry (legal basis: legitimate interest)

When you submit a seller or broker enquiry, we use your contact details to follow up by phone or email. We have a legitimate interest in responding to genuine business enquiries.

To comply with legal obligations (legal basis: legal obligation)

We may retain certain records to comply with applicable laws, including Latvian commercial and tax law.

4. Who we share your data with

We do not sell your personal data. We share it only with the following third-party service providers who help us operate the Platform:

Supabase — database and authentication infrastructure. Data is stored on servers within the European Union.
Vercel — hosting provider for the Platform.

All third-party providers are bound by data processing agreements and are required to handle your data in accordance with GDPR.

5. How long we keep your data

Account data: retained for as long as your account is active. If you close your account, we delete your personal data within 30 days unless we are required to retain it by law.
Enquiry data: retained for up to 2 years from the date of submission to allow us to follow up and maintain records of business relationships.
Usage data: retained for up to 12 months.

6. Your rights

Under GDPR, you have the following rights regarding your personal data:

Right of access — you can request a copy of the personal data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your personal data where there is no legitimate reason for us to continue processing it.
Right to restriction — you can ask us to restrict processing of your data in certain circumstances.
Right to data portability — you can request your data in a structured, machine-readable format.
Right to object — you can object to processing based on legitimate interests.

To exercise any of these rights, email us at martins@ownerleap.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) at www.dvi.gov.lv.

7. Cookies

We use essential cookies only — specifically, authentication cookies set by Supabase to keep you signed in. We do not use advertising, analytics, or tracking cookies. No consent banner is required for strictly necessary cookies under GDPR.

8. Data security

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Passwords are stored in encrypted form and are never accessible to us. All data is transmitted over HTTPS.

9. Changes to this policy

We may update this Privacy Policy from time to time. We will notify registered users of any material changes by email. The current version is always available at ownerleap.com/privacy.

10. Contact

OwnerLeap SIA
Reg. No. 40203707118
Kalēju iela 74 – 23
Rīga, LV-1050, Latvia
martins@ownerleap.com
+371 2924 3056