🏢 Who is responsible for your data?

For the purposes of applicable data protection law, the data controller responsible for personal information processed in connection with the Zelta Siers website and online store is:

---

1️⃣ Personal information we collect

The personal information we collect depends on how you interact with our website, shop and services.

We may process the following categories of information:

• Contact information, including your name, email address, telephone number, billing address and delivery address
• Order and transaction information, including products purchased, order history, returns, refunds, delivery method and transaction information
• Payment-related information, such as payment method, payment status and transaction confirmation
• Account information, where customer accounts are used, including account preferences and settings
• Communication information, including emails, customer service enquiries, complaints and other communications with us
• Technical information, including IP address, browser type, device information, identifiers and information about how our website is used
• Marketing and preference information, including newsletter preferences and interactions with our marketing where applicable

---

2️⃣ Where your information comes from

We may receive personal information:

• Directly from you when you place an order, create an account, contact us or subscribe to communications
• Automatically when you use our website, including through cookies and similar technologies
• From Shopify and service providers that help us operate our online store
• From payment, delivery, analytics or marketing providers where necessary to provide their services

---

3️⃣ Why we use your personal information

Processing your order

We use your information to process orders, receive payments, prepare products, arrange delivery, provide order confirmations, handle returns and refunds and provide customer service.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

Legal and accounting obligations

We may process transaction, invoice and customer information where necessary to comply with tax, accounting, consumer protection and other legal requirements.

Legal basis: compliance with a legal obligation.

Security and fraud prevention

We may process information to secure our website and store, prevent fraudulent transactions, investigate suspicious activity and protect our business and customers.

Legal basis: our legitimate interests in protecting our business, customers and services.

Customer service and business administration

We may use information to answer questions, resolve complaints, improve our services and manage our relationship with customers.

Legal basis: performance of a contract and/or our legitimate interests in operating and improving our business.

Marketing

Where permitted, we may use your contact details to send news, offers or other promotional communications.

Where consent is required, we will only send such marketing after you have provided consent. You can unsubscribe from marketing emails at any time using the unsubscribe link contained in the message.

Legal basis: consent and, where permitted by applicable law, legitimate interests.

---

4️⃣ Shopify

Our online store is powered by Shopify. Shopify provides the ecommerce infrastructure that allows us to operate the website, shopping cart, checkout and other online store functions.

Information submitted through our online store may therefore be processed by Shopify and its service providers in order to provide, secure and improve the Shopify platform and the services used by our store.

Shopify may process information in countries outside your country of residence and uses appropriate data transfer mechanisms where required by applicable law.

More information about Shopify's privacy practices is available at: Shopify Privacy.

---

5️⃣ Who we may share information with

We only share personal information where reasonably necessary for our business, to provide your order or services, or where required by law.

This may include:

• Shopify and providers supporting our website and online store
• Payment service providers that process payments and payment confirmations
• Delivery providers, including DPD, Omniva and Latvijas Pasts where used for your order
• IT, hosting, security and cloud service providers
• Accounting and professional service providers where necessary
• Analytics and advertising partners where those services are enabled and their use is permitted under applicable law
• Public authorities where disclosure is required by law or a valid legal request

We do not disclose personal information to third parties simply for them to use for unrelated purposes.

---

6️⃣ Cookies, analytics and advertising

Our website may use cookies and similar technologies required for functions such as the shopping cart, checkout, security, language preferences and customer sessions.

We may also use analytics, advertising or other non-essential technologies to understand website use and measure or improve our marketing.

Where consent is legally required for non-essential cookies or similar technologies, these technologies will be used in accordance with your cookie choices.

You can manage available cookie preferences through the cookie controls provided on our website and, where applicable, through your browser settings.

---

7️⃣ International data transfers

Some of our service providers operate internationally. This means personal information may in certain cases be processed outside Latvia or outside the European Economic Area (EEA).

Where personal information is transferred outside the EEA, appropriate safeguards will be used where required, such as an adequacy decision, Standard Contractual Clauses or another legally recognised transfer mechanism.

---

8️⃣ How long we keep your information

We retain personal information only for as long as reasonably necessary for the purpose for which it was collected and to meet applicable legal, tax, accounting, contractual and dispute-resolution requirements.

Different categories of information may therefore be retained for different periods.

When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where reasonably possible and legally permitted.

---

9️⃣ Security

We use reasonable organisational and technical measures intended to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

Please do not send passwords, complete payment card information or other highly sensitive information to us through unsecured communication channels.

---

🔟 Your GDPR rights

Subject to the conditions and exceptions provided by applicable law, you may have the right to:

• Request information about how we process your personal information
• Request access to personal information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information where the legal requirements are met
• Request restriction of processing in certain circumstances
• Object to certain processing, including direct marketing
• Receive certain information in a structured, commonly used and machine-readable format and request data portability where applicable
• Withdraw consent at any time where processing is based on consent
• Exercise applicable rights relating to automated decision-making and profiling

Withdrawal of consent does not affect the lawfulness of processing that took place before consent was withdrawn.

To exercise your rights, contact us at info@zeltasiers.lv. We may request information necessary to verify your identity before responding to a request.

---

📧 Marketing preferences

You can unsubscribe from promotional emails at any time by using the unsubscribe link included in our marketing messages.

Even if you unsubscribe from marketing, we may still send service-related communications that are necessary for an existing order, transaction or customer relationship.

---

👶 Children's privacy

Our online store is not specifically directed at children and we do not knowingly collect personal information from children where they are not legally able to provide such information or consent.

If you believe that a child has provided personal information to us improperly, please contact us so that we can review the situation.

---

⚖️ Complaints about personal data

If you have a concern about how we process your personal information, please contact us first and we will try to resolve the matter.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Latvia, the supervisory authority is the Datu valsts inspekcija (Data State Inspectorate).

---

🔄 Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our services, technology, business practices or legal requirements.

The most recent version will be published on this page and the date below will be updated accordingly.

---

📩 Contact

If you have questions about this Privacy Policy, our privacy practices or wish to exercise your data protection rights, contact us:

Last updated: October 15, 2026