Privacy Policy

WHO WE ARE

The controller of your personal data is:

SIA LEPICUR
Registration number 40203280657
Legal address: Elizabetes iela 21a, Rīga, LV-1010, Latvia
Email: info@lepicur.com
Phone: +371 26 782 953

WHAT DATA WE COLLECT

• When you place an order: your name, billing and delivery address, email address and phone number, the products you order, the order value and any notes you add — including the recipient’s details and your message when you send a gift.
• When you create an account: your login details and order history. Passwords are stored in encrypted form.
• When you pay: payments are processed by EveryPay. We receive confirmation of the payment and limited details such as the payment method; we never see or store your full card number.
• When you contact us by email, phone, WhatsApp or the form on our website: your name, contact details and the content of your message.
• When you subscribe to our newsletter: your email address.
• When you browse our website: technical data such as your IP address, browser and device type, the pages you visit and how you arrived at our site, collected through cookies and similar technologies (see Cookies below).

HOW WE USE YOUR DATA

• To take, process and deliver your order and to provide customer service — performance of a contract (Article 6(1)(b) GDPR).
• To issue invoices, keep accounting records and submit tax reports — our legal obligations (Article 6(1)(c) GDPR).
• To answer your enquiries and to protect our website and business against fraud and misuse — our legitimate interests (Article 6(1)(f) GDPR).
• To understand how our website is used and to improve it — our legitimate interests for cookieless visitor statistics, and your consent for analytics cookies (Article 6(1)(a) GDPR).
• To send you our newsletter and to show you our advertising on other websites — your consent (Article 6(1)(a) GDPR).

Where we rely on your consent, you can withdraw it at any time. This does not affect the processing carried out before you withdrew it.

WHO WE SHARE YOUR DATA WITH

We do not sell your personal data. We share it only with the service providers who help us run our shop, and only as far as they need it:

• EveryPay — payment processing.
• DHL, Latvijas Pasts and ACE Logistics — delivery of your order.
• Our website and email hosting provider, with servers in Riga, Latvia.
• Our web developer — maintenance of our website and our visitor statistics.
• Google (Google Analytics, Google Tag Manager, Google Ads and Google Maps) and Meta (Facebook, Instagram and WhatsApp) — website analytics, advertising, the map on our Contacts page and our Instagram feed.
• Our accounting firm — bookkeeping and invoicing.
• The State Revenue Service of Latvia (Valsts ieņēmumu dienests) — the tax and accounting reports we are required by law to submit. We share data with other state authorities only where the law requires it.

We will not sell, purchase, provide, exchange or in any other manner disclose account or transaction data, or personal information of or about a cardholder, to anyone except our acquirer, Visa and Mastercard, or in response to valid government demands.

TRANSFERS OUTSIDE THE EU

We store and process your data in the European Union. Google and Meta may process data in the United States. Both are certified under the EU–US Data Privacy Framework, and transfers to them are also covered by the European Commission’s Standard Contractual Clauses.

HOW LONG WE KEEP YOUR DATA

• Orders and invoices: for the period required by Latvian accounting and tax law.
• Customer account: until you delete it or ask us to delete it.
• Messages and enquiries: for as long as we need them to deal with your request, and for up to three years afterwards.
• Newsletter: until you unsubscribe.
• Visitor statistics: three years.

COOKIES

Cookies are small files that your browser stores on your device. Our website uses:

• Essential cookies — keep your cart, checkout and account login working, and remember your cookie choice and your language.
• Order attribution — WooCommerce records how you arrived at our website, for example from a search engine or social media, and keeps this with your order.
• Analytics cookies — Google Analytics shows us how visitors use our website.
• Advertising cookies — Google Ads and the Meta Pixel measure our advertising and let us show it to people who have visited our website.
• Embedded content — the Google map on our Contacts page and the Instagram feed on our homepage load content from Google and Meta, which may set their own cookies.

When you first visit our website, we ask for your consent to analytics and marketing cookies, and they are not used until you give it. You can change your choice at any time through Cookie settings at the bottom of every page.

You can block or delete cookies at any time in your browser settings. If you block essential cookies, the cart and checkout may not work.

VISITOR STATISTICS

To understand how our website is used and to improve it, we measure visits with SitesPro Analytics, a self-hosted installation of the open-source tool Umami run for us by our web partner SitesPro. It does not use cookies or any other storage on your device and does not collect personal data: your IP address is not stored, and visits cannot be linked to you or followed across other websites.

When you add a product to the cart, open the checkout or complete an order, we record that step together with the product, the order value and the order number, so that we can see how the shop performs. This information does not identify you to the statistics service.

The statistics are processed on servers in the European Union (Hetzner, Germany) and kept for three years, after which they are deleted.

SECURITY

Our website uses an encrypted (HTTPS) connection. Card details are entered in EveryPay’s secure payment form and never reach our servers. Access to customer data is limited to the people who need it to process orders and answer enquiries.

YOUR RIGHTS

Under the General Data Protection Regulation (GDPR) you have the right to:

• access the personal data we hold about you and receive a copy of it;
• have inaccurate data corrected;
• have your data deleted or its use restricted;
• receive your data in a portable format;
• object to our use of your data, and to direct marketing at any time;
• withdraw your consent at any time.

To use any of these rights, write to info@lepicur.com. We will reply within one month.

You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), www.dvi.gov.lv.

CHILDREN

Our website is not intended for children, and we do not knowingly collect personal data from children under 13. If you believe a child has given us personal data, please contact us and we will delete it.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. The date at the top of this page shows when it was last changed.

CONTACT US

If you have any questions about this Privacy Policy or your personal data, contact us at info@lepicur.com, by phone on +371 26 782 953, through our Contacts page, or at Elizabetes iela 21a, Rīga, LV-1010, Latvia.