Privacy policy

In force from 23 October 2026 · Version 1.1

1. Who is the controller

The controller of personal data is:

• KALME, SIA
• Registration No.: 43603092426
• VAT registration No.: LV43603092426
• Legal address: Ganību dambis 24D, Riga, LV-1005
• Email: [email protected]
• Phone: +371 27177070

For questions about data processing, contact us using the details above.

2. What data we collect

2.1. Account data

When you register on the KALME platform, we collect:

• Email address
• First name and surname
• Phone number

KALME does not use passwords. You log in with a one-time code sent by email or with your Google account (in the iOS app also with your Apple account).

2.1.1. Phone number and SMS code

When you register, you give your phone number and we confirm it with a 6-digit code sent by text message (SMS). The code is valid for 5 minutes. The message is sent by SIA "T2R" (Text2Reach, reg. No. 40103242606, Riga, Latvia) as our processor; it receives your phone number and the text of the message. We keep the confirmed number in your account to prevent fake accounts and to contact you about your requests.

2.1.2. Registration questionnaire

After your first login you answer a short questionnaire: what you want to do (buy, sell or both), the types of property (forest, land, house, apartment) and the municipalities. If you want to sell, you give the property address or cadastre designation. We keep the answers in a separate database to show you relevant data and to contact you about your plans.

2.1.3. Notice of a new registration

When a registration is complete, the KALME manager receives an internal notice in the Telegram app. The notice contains only the account number (ID), your role (buyer, seller or both) and whether the phone is confirmed (yes/no): no name, email, phone number or address.

2.1.4. Logging in with Google

If you log in with your Google account, Google Ireland Ltd. passes us your email address, first name, surname and Google account identifier. During the login, the cookies g_state and kalme_next are stored in your browser for 10 minutes (see the Cookie policy).

2.1.5. Request form (buy/sell, contact)

If you fill in a request or contact form on the website, we receive: your name, email, phone (if you give it), message, what you are looking for or selling (type, municipalities, cadastre designation or address), the page language and the address of the page the request was sent from, and the Google Ads click identifier (if it was stored with your consent, see 2.5). We keep the request in a separate database and send it to [email protected]. We keep the IP address only as a salted hash, to limit spam.

2.2. Listing data (Market section)

When you publish a property listing, you submit:

• The property address and cadastre number
• Area, price, description
• Photographs
• Geographic location (GPS coordinates or cadastre ID)
• Other information you give about the property

Important: the content of a listing (except your contact details) is publicly available to all KALME visitors and to search engines. Before you publish, make sure that:

• You own the property or have the right to publish it
• The people shown in the photographs have agreed to their publication
• The photos contain no data of other persons (car number plates, documents and similar)

2.3. Communication data

When you contact another user or us, we keep the content of the messages to provide the service and to resolve disputes.

2.4. Usage data

The following is collected automatically:

• IP address (anonymised after 30 days). When you register, we keep the IP address only as a salted hash together with the account number, to detect mass or abusive registrations; these records are deleted after 30 days
• Browser type, device type, operating system
• Page visit logs
• Cookies (see the Cookie policy)

2.5. Statistics and marketing data (only with consent)

If you have allowed statistics or marketing cookies in the cookie consent window, data about your behaviour on the platform (pages viewed, clicks, session length) is collected and passed to these service providers:

• Google Analytics: page view statistics
• Meta Pixel (Facebook, Instagram): advertising effectiveness
• TikTok Pixel: advertising effectiveness
• LinkedIn Insight Tag: advertising effectiveness
• Google Ads: advertising remarketing

If you came from a Google ad and allowed marketing cookies, we keep the ad click identifier (gclid) for 90 days in the first-party cookie kalme_gclid, so that Google Ads can count a registration or request. Without marketing consent this cookie is not stored.

More detail: Cookie policy.

3. Why we process data

4. Passing data to third parties

We do not sell your personal data to advertising networks. In some cases, however, data is passed to these recipients:

4.1. Infrastructure service providers (processors)

To run the platform, we use:

• Cloudflare, Inc. (USA): website infrastructure, cloud storage (R2), content delivery, security. Data transfer to the USA is based on standard contractual clauses (SCC) under Article 46 of the GDPR.
• Google Workspace (Google Ireland Ltd., EU): for email communication ([email protected]).
• SIA "T2R" (Text2Reach, reg. No. 40103242606, Latvia): sending SMS codes to your phone number.
• Google Ireland Ltd. (EU): logging in with a Google account.
• Telegram: internal notices to the KALME manager about new registrations; only the account ID, role and phone confirmation yes/no are passed (no personal contact details). Telegram servers may be located outside the EU.
• AS Citadele banka (Latvia) with the Klix payment solution: payment processing (the Kalējs subscription), invoicing. During a payment, Citadele Klix receives your first name, surname, email and card details (we do not see the card number; it goes directly to Citadele Klix). Data is processed in the European Union (Latvia) under the GDPR; no data is transferred outside the EU. See klix.app.

These partners work under a data processing agreement (DPA) and the requirements of the GDPR.

4.1.1. Statistics and marketing partners (only with consent)

If you allow the relevant category in the cookie window, data is also passed to these service providers:

• Google LLC / Google Ireland Ltd.: Google Analytics (statistics), Google Ads (advertising)
• Meta Platforms Ireland Ltd.: Meta Pixel (Facebook, Instagram advertising tracking)
• TikTok Information Technologies UK Ltd.: TikTok Pixel (advertising tracking)
• LinkedIn Ireland Unlimited Company: LinkedIn Insight Tag (advertising tracking)

These services may transfer your data to the USA or other countries using SCC. These partners may combine KALME data with other data they already hold about you (for example, from your profiles on their platforms). More detail: Cookie policy.

You can withdraw your consent at any time in the KALME cookie settings.

4.2. Other platform users

The content of a listing (except your contact details) is publicly available. Your contact details are disclosed to the other party only when you or the other party actively click the "Contact" button.

4.3. KALME partners (only with your separate consent)

KALME may work with third parties: banks, valuers, insurers, lawyers and other real estate companies. Your listing or account data is passed to these partners only if you have given separate consent (a separate box in the registration or listing form).

You can withdraw your consent at any time by contacting us or in your account settings. Withdrawal does not affect processing already carried out.

4.4. Law enforcement authorities

If we receive a lawful request from a court, the prosecutor's office or an investigating authority, we provide the requested data in accordance with Latvian law.

5. Data transfer outside the European Union

The KALME platform infrastructure is provided by Cloudflare, Inc. (USA). Part of the data (static content, cloud backups, network statistics) is stored on or moved to servers in the USA.

The data transfer is based on the standard contractual clauses (SCC) approved by the European Commission and the Cloudflare data processing agreement (DPA), available at Cloudflare DPA.

6. How long we keep data

After these periods, the data is deleted or anonymised.

7. Your rights

Under the GDPR you have these rights:

• Right of access: to receive a copy of the data we process about you.
• Right to rectification: to ask us to correct inaccurate data.
• Right to erasure ("the right to be forgotten"): to ask us to delete data if there is no longer a legal basis for processing it.
• Right to restriction of processing: to pause processing while we deal with your request.
• Data portability: to receive your data in a machine-readable format (JSON/CSV) and pass it to another service provider.
• Right to object: to object to processing based on legitimate interest.
• Withdrawal of consent: to withdraw consent you gave earlier, at any time.

You can delete your account with all account data yourself on the map: My cabinet → Delete account. To use your other rights, write to [email protected]. We will reply within 30 days (in line with Article 12.3 of the GDPR).

8. Complaints

If you believe that we process your data unlawfully, you have the right to complain to the Data State Inspectorate:

• Web: www.dvi.gov.lv
• Email: [email protected]
• Address: Elijas iela 17, Riga, LV-1050

Before that, we invite you to contact us; questions can often be resolved faster.

9. Security

We use these security measures:

• TLS encryption for all data exchange (HTTPS)
• We do not use passwords; login codes are one-time and short-lived
• IP addresses used to protect registration and request forms are kept only as salted hashes
• Access control to the database: only authorised KALME staff
• Regular security backups (R2 cloud, encrypted)
• Security incident monitoring 24/7

If a data breach occurs that may result in a high risk to your rights, we will inform you within 72 hours in line with Articles 33 and 34 of the GDPR.

10. The State Land Service and public registers

The KALME platform shows data from the State Land Service (the cadastre information system, the address register, the real estate market database) and other public data sources (the Rural Support Service, the Latvian Geospatial Information Agency).

State Land Service open data is used under the Creative Commons Attribution 4.0 (CC BY 4.0) licence. Data source: State Land Service, vzd.gov.lv/lv/atvertie-dati.

This data is not personal data where it concerns the physical characteristics of real estate (area, purpose of use, coordinates, cadastral value, soil quality score).

We do not publish the personal data of owners (names, personal identity numbers) on the map or in listings, even if it is technically available through the cadastre database; under the State Real Estate Cadastre Law this is information of restricted availability.

11. Children's data

KALME services are not intended for persons under 16. We do not knowingly collect data from minors. If we learn that we have received data from a person under 16, that data will be deleted.

12. Automated decision-making

KALME does not carry out automated decision-making that would have legal or similarly significant effects for you (Article 22 of the GDPR).

13. Changes to this policy

This policy may be updated from time to time. We will announce significant changes by email at least 14 days before they take effect. The current version of the policy is always available at /en/legal/privacy/ (Latvian original: /legal/privatuma-politika).

Version history

• Version 1.1 (23 October 2026): added the phone number and SMS code (SIA "T2R", Text2Reach), the registration questionnaire, the internal Telegram notice without personal contact details, logging in with Google, the request form, the Google Ads click ID cookie kalme_gclid (only with consent), registration IP hashes; the password removed; the retention period for accounting data aligned with the data deletion page (5 years); account data is deleted immediately when the account is deleted; payments: the Kalējs subscription.
• Version 1.0 (26 April 2026): original version.

KALME, SIA · Reg. No. 43603092426 · Ganību dambis 24D, Riga, LV-1005 · [email protected] · +371 27177070