Privacy Policy

Last updated: 20 March 2026

Barefoot Baltic ("we", "us", "our") is a trading name of Ronda Sprints Solutions SIA (Registration No. 40203595104), a company registered in Latvia at Brīvības gatve 418-27, Rīga, LV-1024. We operate the website barefootbaltic.com. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website or use our services.

We are committed to protecting your privacy and complying with the EU General Data Protection Regulation (GDPR) and applicable Latvian data protection laws.

1. Who We Are

Barefoot Baltic is a trading name of Ronda Sprints Solutions SIA, a guided tour and excursion service registered in Latvia. We are registered with the Latvian Consumer Rights Protection Centre (PTAC) as an authorised tourism services provider. For any privacy-related enquiries, you can reach us at:

Legal entity: Ronda Sprints Solutions SIA
Registration No.: 40203595104
Address: Brīvības gatve 418-27, Rīga, LV-1024, Latvia
Email: daiga@rondasprints.com
Phone / WhatsApp: +371 26 440 152

2. What Information We Collect

We may collect the following types of personal information:

Contact information: your name, email address, and phone number when you reach out to us via WhatsApp, email, or a booking platform.
Booking information: details related to your tour booking, including dates, group size, and any special requirements you share with us.
Website usage data: anonymised information such as pages visited, time spent on pages, browser type, and device type, collected through analytics cookies (only if you consent).

We do not collect sensitive personal data such as health information, religious beliefs, or financial details beyond what is necessary for processing a booking.

3. How We Use Your Information

We use the information we collect for the following purposes:

To respond to your enquiries and communicate with you about tours and bookings.
To organise and deliver the tours and excursions you book.
To improve our website and services based on anonymised usage patterns.
To send you information about new tours or services, but only if you have given us explicit consent to do so.

We will never sell, rent, or share your personal information with third parties for marketing purposes.

4. Legal Basis for Processing

Under the GDPR, we process your personal data based on the following legal grounds:

Consent: when you contact us, subscribe to updates, or accept analytics cookies.
Contractual necessity: when we need your information to fulfil a tour booking.
Legitimate interest: to improve our website and services, provided this does not override your privacy rights.

5. Cookies

Our website uses cookies — small text files stored on your device. We use the following types:

Essential cookies: these are necessary for the website to function properly (e.g., remembering your cookie consent preference). They cannot be disabled.
Analytics cookies: these help us understand how visitors use our website by collecting anonymised data. They are only activated if you give your consent via our cookie banner.

We do not use advertising cookies, tracking cookies, or any third-party marketing cookies.

You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site, which will trigger the consent banner again.

6. Third-Party Services

When you book a tour through a third-party platform such as GetYourGuide or Viator, your booking is subject to their respective privacy policies. We encourage you to review those policies directly:

When you contact us via WhatsApp, your messages are subject to WhatsApp's Privacy Policy.

7. Data Retention

We retain your personal information only for as long as is necessary to fulfil the purposes outlined in this policy. Specifically:

Booking data: retained for up to 2 years after your tour for follow-up, record-keeping, and legal compliance.
Enquiry data: retained for up to 1 year if no booking is made.
Analytics data: anonymised and aggregated; no personally identifiable data is retained.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

Access: you can request a copy of the personal data we hold about you.
Rectification: you can ask us to correct any inaccurate information.
Erasure: you can request that we delete your personal data ("right to be forgotten").
Restriction: you can ask us to limit how we process your data.
Portability: you can request your data in a structured, machine-readable format.
Objection: you can object to the processing of your data for certain purposes.
Withdraw consent: you can withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

To exercise any of these rights, contact us at daiga@rondasprints.com. We will respond within 30 days.

9. Data Security

We take reasonable measures to protect your personal information from unauthorised access, alteration, or destruction. Our website uses HTTPS encryption for all data transmitted between your browser and our server.

10. Children's Privacy

Our website is not directed at children under 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected data from a child, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last updated" date. We encourage you to review this page periodically.

12. Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija):

Website: www.dvi.gov.lv
Email: info@dvi.gov.lv

13. Contact

If you have any questions about this Privacy Policy or how we handle your data, please get in touch:

Barefoot Baltic (Ronda Sprints Solutions SIA)
Reg. No. 40203595104
Brīvības gatve 418-27, Rīga, LV-1024, Latvia
Email: daiga@rondasprints.com
WhatsApp: +371 26 440 152