Privacy policy.Privacy
policy.

The data controller is the operator listed under “Who we are” on this page. If you have any questions about your data or want to use your rights, email us at the contact email shown there.

• Account data: your name, email address and an encrypted password when you create an account.
• Order data: the name, email address, note and products you enter when you send an order request, plus the order status and dates.
• “Notify me” data: your email address and the product you asked about.
• Technical data: your IP address, browser type and pages requested, which our hosting provider records in short-lived server logs for security.
• Visit statistics: anonymous page-view counts from Vercel Web Analytics. It does not use cookies and does not identify you personally.

We do not collect payment card data — online payment is not available.

• To create and run your account and handle your orders, including order confirmations and shipping emails — performance of a contract (GDPR Art. 6(1)(b)).
• To email you when a product becomes available, only if you asked us to — your consent (Art. 6(1)(a)). You can withdraw it at any time.
• To keep the site secure, prevent abuse and understand how many people visit which pages — our legitimate interests (Art. 6(1)(f)).
• To keep records we are required to keep by law, for example for accounting — legal obligation (Art. 6(1)(c)).

We do not sell your data, use it for advertising or make automated decisions about you.

We use a small number of service providers who process data only on our instructions:

• Supabase — database and account login.
• Vercel — website hosting and anonymous visit statistics.
• Resend — sending emails (order confirmations, password resets, notifications).

Some of these providers are based in the United States. Where data leaves the European Economic Area, it is protected by the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.

• Account data: until you ask us to delete your account.
• Orders: as long as needed to complete the order and handle any complaints, and longer only where accounting law requires (up to 5 years).
• “Notify me” sign-ups: until we send the notification or you ask us to remove you.
• Server logs: a short time, as set by our hosting provider.

You have the right to access your data, correct it, have it deleted, restrict or object to its use, receive it in a portable format and withdraw consent at any time. You can change your name and email in “My account”; for everything else, email us and we will answer within one month.

If you think we handle your data unlawfully, you can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv).

Accounts and orders are intended for people aged 13 and over. If you are younger than 13, please ask a parent or guardian to create the account or place the order for you.

We only use essential cookies and browser storage. See our Cookie policy for the full list.

If we change how we use personal data, we will update this page and the date at the top. For important changes we will also let account holders know by email.