Privacy policy.

Last updated: 25 September 2026

Who we are

This website (https://www.obclub.co) is run by OBCLUB, SIA, registration no. 40203708734, Mārupes nov., Mārupe, Lapiņu dambis 6, LV-2167, Latvia ("OB Club", "we", "us"). We are the controller of the personal data described in this policy.

For any privacy question or request, email hello@obclub.co.

What OB Club is

OB Club is a private network for online entrepreneurs, founders and operators. We run a free WhatsApp community, curated in-person events (our flagship is in Riga) and the Behind the Business podcast on YouTube. This website tells you about all of that and lets you contact us or sign up for updates.

What we do not collect

• No user accounts or passwords for visitors.
• No payment details.
• No advertising or cross-site tracking cookies.
• No IP addresses in our own analytics.
• We do not sell or rent personal data to anyone.

What we collect and why

Contact form

When you send us a message we collect your name, email address, the reason for getting in touch (chosen from a list) and your message. We use it to read and reply to your enquiry.

Legal basis: steps you ask us to take before entering into an agreement (GDPR Art. 6(1)(b)), and our legitimate interest in answering people who contact us (Art. 6(1)(f)).

Email updates

When you ask us to keep you posted we collect your email address and the topic you are interested in. We use it to send OB Club updates about events, the podcast and the community.

Legal basis: your consent (Art. 6(1)(a)). You give it by ticking the consent box. You can withdraw it at any time by replying to any of our emails or writing to hello@obclub.co. Withdrawing does not affect emails sent before you did.

Website analytics

We use our own first-party, cookieless analytics to understand which pages are useful. For each page view we record the page path, the referring page, the device type and a hash that rotates daily and is salted, so we can count unique visits for one day without recognising you across days. We set no cookies for this, store no IP address and do no cross-site tracking.

Legal basis: our legitimate interest in running and improving the website (Art. 6(1)(f)).

Server logs

Like any website, our hosting provider automatically processes technical data such as your IP address, browser type and the time of the request in its server logs. This is needed to deliver the site and keep it secure.

Legal basis: our legitimate interest in operating a secure website (Art. 6(1)(f)).

Cookies

The public website sets no non-essential cookies, so there is no cookie banner. The staff-only admin area uses one strictly necessary session cookie to keep staff signed in. It is never set for ordinary visitors.

YouTube videos

Podcast and other videos are embedded through youtube-nocookie.com, and the YouTube player only loads after you click play. Before that, the video thumbnail is loaded from Google's image server (i.ytimg.com) when the page opens, which means Google receives your IP address for that image request. Once you click play, Google's own privacy policy applies to the player: policies.google.com/privacy.

WhatsApp community and Calendly

The WhatsApp community is joined through a public invite link. When you join, your phone number and WhatsApp profile become visible to other members of the group. The group runs on WhatsApp, so WhatsApp's and Meta's terms and privacy policy apply to everything you share there.

The "Become a Partner" button opens Calendly to book a call. Anything you enter there is handled under Calendly's own privacy terms.

Who processes your data for us

We use a small number of service providers (processors) who handle data only on our instructions:

Transfers outside the EU

Submissions are stored in a database hosted in the EU, and the website is served from an EU region. Some of our providers are companies based in the United States. Where personal data may be accessed from or sent outside the EU/EEA, we rely on the European Commission's Standard Contractual Clauses. You can ask us for more detail on these safeguards.

How long we keep data

• Enquiries: up to 24 months after our last contact with you.
• Email sign-ups: until you unsubscribe.
• Analytics: raw events for 13 months, after which only aggregated totals are kept.
• Server logs: for the period set by our hosting provider.

Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you;
• have inaccurate data corrected;
• have your data erased;
• restrict how we use your data;
• receive your data in a portable format;
• object to processing based on our legitimate interests;
• withdraw your consent at any time.

To use any of these rights, email hello@obclub.co. We will reply within one month. We may ask you to confirm your identity before acting on a request.

You also have the right to complain to the Latvian Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv, or to the data protection authority in the EU country where you live or work.

Automated decisions

We do not make decisions about you based solely on automated processing.

Children

This website and OB Club are not directed at anyone under 16, and we do not knowingly collect their data. If you believe a child has sent us personal data, contact us and we will delete it.

Security

The site is served over HTTPS, access to submissions is limited to OB Club staff, and our providers protect data with industry-standard measures. No system is perfectly secure, but if a breach affects your data we will notify you and the authorities as the law requires.

Changes to this policy

We may update this policy when our practices change. The date at the top shows the latest version. If a change is significant, we will highlight it on the website or tell subscribers by email.

Contact

OBCLUB, SIA, Mārupes nov., Mārupe, Lapiņu dambis 6, LV-2167, Latvia.
Email: hello@obclub.co