Privacy Policy

1. Introduction

SOLUNA, SIA operates THEROOTEDANDRESOURCEDSHIFT.COM. We are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and applicable Latvian data protection law. This Privacy Policy explains what data we collect, why we collect it, how we use it, and what rights you have.

2. Legal Basis for Processing

• Consent (Art. 6(1)(a)): When you submit your name and email to register for our training, or when you accept our cookie policy, you provide explicit consent for us to process your data for those specific purposes.
• Legitimate interests (Art. 6(1)(f)): For website analytics and service improvement, where our interests do not override your fundamental rights.
• Contract performance (Art. 6(1)(b)): Where processing is necessary to deliver a service you have requested, such as confirming a booking.

3. What Data We Collect

• Identity data: First name, last name
• Contact data: Email address, phone number (where voluntarily provided)
• Interaction data: Responses to pre-qualification questions
• Technical data: IP address, browser type, device type, pages visited, session duration, referring URLs
• Marketing data: Your preferences regarding receiving communications from us

4. How We Use Your Data

• To deliver training content and resources you have requested
• To confirm and manage session bookings
• To send follow-up communications related to your enquiry
• To improve website performance and advertising effectiveness
• To comply with our legal obligations

5. Data Retention

• Email marketing data: Retained until you unsubscribe or request deletion
• Booking and session records: Retained for 3 years following your last interaction
• Website analytics data: Retained for up to 26 months

6. Cookies and Tracking Technologies

We use cookies and third-party tracking tools to understand how visitors interact with our website, measure advertising performance, and improve our services. Non-essential cookies are only placed after you provide consent via our cookie notice on first visit.

• Strictly necessary: Required for the website to function. No consent required.
• Analytics: Google Analytics — anonymous usage statistics
• Advertising: Meta Pixel (Facebook/Instagram) and TikTok Pixel — advertising measurement and retargeting

You may withdraw cookie consent at any time through your browser settings or by contacting us. Pre-ticked consent boxes are not used on this website.

7. Third-Party Service Providers

We use the following third-party processors who may handle personal data on our behalf. All are contractually required to comply with GDPR.

Provider	Purpose	Privacy Policy
MailerLite	Email marketing	mailerlite.com/privacy-policy
Calendly	Appointment scheduling	calendly.com/privacy
Wistia	Video hosting	wistia.com/privacy
Google Analytics	Website analytics	policies.google.com/privacy
Meta Platforms	Advertising (Facebook/Instagram)	facebook.com/privacy/policy
TikTok	Advertising and analytics	tiktok.com/legal/privacy-policy

8. International Data Transfers

Some of our third-party providers operate outside the European Economic Area (EEA). Where personal data is transferred internationally, we ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission under GDPR Article 46.

9. Your Rights Under GDPR

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Request correction of inaccurate or incomplete data
• Right to erasure (Art. 17): Request deletion of your personal data
• Right to restriction (Art. 18): Request that we restrict processing of your data
• Right to data portability (Art. 20): Receive your data in a structured, machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior processing

To exercise any of these rights, contact: rita@therootedandresourcedshift.com. We will respond within 30 days.

10. Right to Lodge a Complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with the competent supervisory authority.

Latvia: Data State Inspectorate (Datu valsts inspekcija) — dvi.gov.lv — info@dvi.gov.lv

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated by email or notice on our website. The current version is always available at THEROOTEDANDRESOURCEDSHIFT.COM.

12. Contact