This policy explains which personal data we process, why, and what your rights are. Valid from 26 October 2026.
1. Controller
KRIPARO SIA, registration no. 40203646896, registered address: Bauskas iela 29 k-2 – 43, Riga, LV-1004, Latvia, e-mail: grezni@grezni.eu, phone: +371 22402795.
2. What data we process and why
- To fulfil your order (performance of contract): name, e-mail, phone, delivery address or parcel locker, ordered items, payment status, gift card text.
- For accounting (legal obligation): invoice data.
- For your customer account (performance of contract): account details and order history, if you create an account.
- For communication (legitimate interest): content of e-mail correspondence, data from the business enquiry form.
- For newsletters (consent): your e-mail – only if you have subscribed; you can unsubscribe at any time via the link in every e-mail.
- For website operation and security (legitimate interest): IP address, technical logs, cookies.
3. Who we share data with
We share data only with those who help fulfil your order: delivery companies (Omniva, SmartPosti, DPD, Latvijas Pasts) – name, phone, e-mail and delivery point; the payment service provider – payment data; the website hosting provider (servers in the European Union); our accounting service provider; public authorities where required by law. We do not sell your data.
4. How long we keep data
- Order and invoice data – 5 years (Latvian Accounting Law).
- Customer account – until the account is deleted.
- Newsletter e-mail – until you unsubscribe.
- Correspondence and enquiries – up to 2 years after the last contact.
5. Your rights
You have the right to access, rectify and erase your data, restrict or object to its processing, receive your data in a portable format and withdraw your consent. Write to grezni@grezni.eu – we will reply within one month. If you believe your data is processed unlawfully, you may lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).
6. Cookies
- Necessary: cart and session, language choice, security, wishlist – the store does not work without them, so no consent is required.
- Analytics and marketing: used only with your consent, which you can change at any time in the cookie settings or delete in your browser.
7. Changes
We may update this policy; the current version is always on this page.