Last updated: 13 August 2026

Privacy Policy

This Privacy Policy explains how Guenzo Engineering ("we", "us", "our") collects, uses, and protects your personal data when you visit guenzo.com. We are a mechanical design and CAD engineering company based in Liepāja, Latvia, and we comply with the EU General Data Protection Regulation (GDPR).

1. Data we collect

Contact form

When you submit our contact form, we collect your name, email address, phone number, and project message. This data is sent to our team to respond to your inquiry.

AI chat widget

When you use the chat widget, we collect a randomly generated visitor ID and conversation ID (stored in browser local storage), your chat messages, and any email or phone number you voluntarily share for human follow-up.

Analytics data

We use Google Analytics 4 to understand how visitors use our Website, including approximate location, device type, pages visited, and interaction events. IP addresses are anonymised.

Browser storage

We store your language preference (English or Latvian) and chat session identifiers in browser local storage. These are not cookies and do not track you across other websites.

2. How we use your data

• To respond to your project inquiries, questions, and quote requests.
• To prepare proposals, quotes, and project documentation.
• To communicate with you during ongoing engineering projects.
• To deliver the engineering services you have requested.
• To improve our Website and measure marketing performance.
• To send relevant marketing and advertising on LinkedIn and Facebook, where permitted by law.

3. Legal basis for processing (GDPR)

• Consent: You consent when you submit a contact form or share contact details in chat.
• Legitimate interest: We process analytics data and respond to inquiries based on legitimate business interest.
• Contract: We process data as necessary to deliver contracted engineering services.

You can withdraw consent at any time by emailing info@guenzo.com.

4. Cookies and tracking technologies

Our Website does not set tracking cookies. We use browser local storage for language preference and chat session identifiers. Google Analytics 4 may set cookies; IP addresses are anonymised.

We may use the following advertising and analytics technologies:

• LinkedIn Insight Tag — measures ad views, conversions, and retargeting for LinkedIn advertising.
• Meta (Facebook) Pixel — measures ad views, conversions, and retargeting for Facebook and Instagram advertising.
• Google Analytics 4 — understands website traffic and user behaviour.

You can control or delete cookies through your browser settings.

5. Third-party processors

• Supabase (EU-based database hosting) — stores chat conversations and contact form submissions.
• Resend (transactional email) — delivers email notifications to our team.
• Twilio (SMS) — sends SMS notifications to our team for chat follow-up.
• Google Analytics — processes anonymised website traffic data.
• LinkedIn — processes advertising and conversion data via the Insight Tag.
• Meta (Facebook) — processes advertising and conversion data via the Meta Pixel.

6. Data retention

• Contact form inquiries: up to 24 months for reference and follow-up.
• Chat conversations: retained for support follow-up, then deleted when no longer needed.
• Analytics data: per the provider's default retention (Google Analytics: up to 14 months).
• Project data: retained for the contract duration and statutory limitation period.

7. Your rights (GDPR)

• Right of access — request a copy of your personal data.
• Right to rectification — request correction of inaccurate data.
• Right to erasure — request deletion of your data.
• Right to restriction — request limited processing.
• Right to data portability — receive your data in a structured format.
• Right to object — object to processing based on legitimate interest.
• Right to withdraw consent — withdraw consent at any time.

To exercise these rights, email info@guenzo.com. We respond within one month. You can also lodge a complaint with the Latvian Data State Inspectorate (DVI).

8. International data transfers

Some processors (Google, LinkedIn, Meta) are based outside the EU, primarily in the United States. We rely on Standard Contractual Clauses approved by the European Commission to ensure EU-level data protection.

9. Children's privacy

Our Website is intended for business and professional audiences. We do not knowingly collect data from children under 16. Contact us if you believe we have collected data from a child and we will delete it.

10. Security

We take reasonable technical and organisational measures to protect your data, including HTTPS, access controls, and secure cloud hosting.

11. Changes to this policy

We may update this policy. The "Last updated" date indicates the latest revision. Please review this page periodically.

12. Contact