Privacy Policy

Updated September 25, 2026

The data controller is SIA "Coffee Room" (Latvia, reg. No 40103835510, VAT No LV40103835510, address Marijas iela 1-17, Riga, LV-1050). This policy explains which personal data we collect, why, and for how long we keep it.

1. Data we collect

Account: e-mail, name, phone, city and district, language.

Profile and listings: everything you publish yourself — description, photo, hourly rate, skills, availability.

Verifications: photos of an identity document and a selfie, certificates — only if you submit them. They are never published.

Usage: messages, bookings, answers on whether a meeting took place and their reasons, reviews, profile views, which phone numbers you opened and when, technical logs.

Payments: plan, amount, access period, status (paid, refunded), renewal cancellation, receipt link, the time of your consent to start right away, and your customer, payment and subscription numbers at Stripe. You enter card details on Stripe's page — we neither receive nor store them.

Service events: opening the payment window (by which action, for which profile or listing, on which page and in which language), starting a payment, payment, renewal, renewal cancellation, refund, your answer to “Did you find a nanny?” in an e-mail, starting to fill in a profile or listing, an automatic check of a profile or listing text being triggered (a contact or a word from the moderation list was found). If you are not signed in, opening the payment window is recorded without linking it to you.

Traffic source: on your first visit we remember where you came from (UTM tags, gclid, gbraid, wbraid, referring site, landing page) and save it with your account when you sign up.

E-mails: the e-mail service tells us whether an e-mail was delivered, opened and whether a link was clicked (e-mails contain a tracking pixel and links go through a redirect).

2. Why we use data

To provide the service (performance of a contract): account, search, messaging, bookings, contact access.

For safety and fraud prevention (legitimate interest): identity checks, records of cancellations and no-shows, handling reports, automatic checks of profile and listing texts for contact details and prohibited words, comparing phone numbers with other accounts.

For e-mail notifications (contract performance and legitimate interest). We send tips and reminders (e-mails after the payment window, profile tips, a reminder to answer about a meeting or leave a review, a reminder about an unfinished profile or listing) to users of the service (legitimate interest).

If you opened the payment window but have never bought access, we send up to 5 e-mails over about two weeks: “Picked a nanny?”, how quickly nannies reply, plans and cancellation terms, new nannies in your city and, last, “Did you find a nanny?” (legitimate interest). We send no more than one such e-mail a day and none between 22:00 and 08:00 Tallinn time. The series stops as soon as you buy access; a new one can start no earlier than 60 days after the previous one ends. Every e-mail has an unsubscribe link.

For payment processing (contract performance and legal obligations): opening and renewing access, cancelling renewal, refunds, closing access after a disputed payment, accounting.

For payment e-mails (performance of a contract): a receipt after each payment, a notice of a failed charge, a reminder before renewal, confirmations of renewal cancellation and refunds.

Service events help payments work, show us where families stop, and help us improve the service (performance of a contract and legitimate interest).

You can unsubscribe from promotional e-mails via the link in the e-mail or in your account.

3. Who we share data with

Processors: Supabase (database and files, European Union, Frankfurt), Vercel (hosting), Stripe (payments: it receives your e-mail address, and you enter your card details and the address needed for VAT on its page), Resend (e-mail). Data processing agreements are in place with all of them.

Other users: your public profile or listing, with phone numbers, e-mail addresses and links in its texts hidden. A specialist's phone number opens to a family with contact access via the “Show phone” button and stays visible to that family. A family's phone number is visible to a specialist in their conversation after the specialist's first message. In a conversation with a family, a nanny sees that family's ratings from other nannies (stars, tags, number of meetings) and its reliability: meetings, no-shows and late cancellations.

Authorities where required by law.

4. Retention

We keep account data while the account exists and delete it when the account is deleted.

Verification documents are deleted within 30 days after the decision; only the badge remains on the profile.

Messages and bookings are kept while the account is active.

Purchase records are deleted together with the account. Service events are kept after the account is deleted, without a link to you. We do not store card details; receipts and payment records are kept by Stripe.

5. Your rights

You have the right to access, rectify and erase your data, restrict processing, object, and port your data. To delete your account, write to the address shown at the bottom of this page. The controller is established in Latvia, so complaints may be lodged with the Latvian Data State Inspectorate (Datu valsts inspekcija); a user living in Estonia may also turn to the Estonian Data Protection Inspectorate.

6. Cookies

We use only cookies necessary for the service (sign-in, language). Visit statistics are collected without cookies and without identifying you. If we add marketing cookies, we will ask for separate consent.

Contact: info@lapsehoidja24.ee