Your privacy matters.

Who is responsible for your information

The controller is [legal business name], [registered address]. For privacy questions, use our contact form. The controller identity, service providers and retention schedule below must be confirmed before launch.

Information we collect

When you place an order, we use your name, email, delivery address, selected products and order details. When you contact us, we collect the information you submit in the form. Accounts, if you create one, store login and account information. Security logs may contain technical details such as IP addresses and browser information.

Why we use it

We use order and delivery details to perform our contract with you. We retain required transaction records to meet legal obligations. We use enquiry details to respond to your request and rely on our legitimate interest in running the shop and preventing abuse where appropriate. We do not add contact-form senders to a marketing list.

Payments and other service providers

Stripe processes payment information. We do not store full card numbers in the shop. Relevant order details are shared with delivery providers to fulfil orders. Hosting, email and other service providers may process information on our behalf. [Confirm the providers, their roles, hosting locations and any international transfer safeguards.]

How long we keep information

We keep data only as long as needed for its purpose and any legal obligations. [Confirm accounting retention period, contact-enquiry retention period, account deletion policy and security-log retention.]

Cookies and local storage

The shop uses necessary cookies for sessions, security, basket continuity and your market selection. This first pass does not add analytics or advertising trackers. If these are introduced, this notice and any consent controls must be updated before those tools run.

Your rights

Depending on the circumstances, you can ask to access, correct, erase or receive a copy of your information, restrict processing, or object to processing based on legitimate interests. Where processing relies on consent, you can withdraw it. You may complain to the relevant supervisory authority; in Latvia this is the Data State Inspectorate. Contact us to exercise your rights.