Privacy policy

1. General Information

This Privacy Policy explains how SIA MANTINAMAN (hereinafter referred to as the “Data Controller”, “we”, “us” or “our”) collects, uses, stores and discloses personal data when you visit our website, place an order, contact us or otherwise use our services.

We process personal data in accordance with the General Data Protection Regulation (GDPR) and applicable laws of the Republic of Latvia.

2. What Personal Data Do We Collect?

Depending on how you use our online store, we may process the following categories of personal data.

2.1. Information You Provide

  • First and last name;

  • Billing and shipping address;

  • Email address;

  • Telephone number, if provided;

  • Information about orders and purchased products;

  • Payment status and transaction identifiers;

  • Information you provide when contacting customer support;

  • Customer account information, if the account feature is available.

We use this data to process orders, arrange deliveries, communicate with customers and fulfil our legal obligations.

2.2. Payment Information

Payments are processed through the payment service providers available in our online store. We may receive information about payment status, transaction identifiers and other limited payment-related information. Full payment card details are generally processed by the relevant payment service provider rather than by us.

2.3. Information Collected Automatically

  • IP address;

  • Browser type and version;

  • Device type and operating system;

  • Language and regional settings;

  • Pages visited and links used;

  • Information about the website from which you accessed our store;

  • Date, time and duration of website visits;

  • Cookie identifiers and similar technologies.

We use this information to operate, secure and improve our website.

3. How Do We Use Personal Data?

We use personal data for the following purposes:

  • To receive, confirm and fulfil orders;

  • To arrange deliveries and provide the necessary information to delivery companies;

  • To process payments and refunds and verify transactions;

  • To respond to enquiries and provide customer support;

  • To maintain, protect and improve our online store;

  • To analyse website usage, where analytics tools are used;

  • To send offers or advertising where permitted and, where necessary, with your consent;

  • To prevent fraud and unauthorised use of our website;

  • To comply with accounting, tax and other legal requirements.

4. Legal Basis for Processing Personal Data

We process personal data on the basis of one or more of the legal grounds established by the GDPR:

  • Performance of a contract — to process and deliver your order;

  • Compliance with a legal obligation — to comply with accounting, tax and other legal requirements;

  • Legitimate interests — to ensure website security, prevent fraud and improve our services while respecting your rights;

  • Consent — to use certain cookies, analytics or marketing tools where your consent is required.

You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

5. Cookies and Similar Technologies

Our website may use cookies to enable shopping cart functionality, remember user preferences, ensure website security, analyse website traffic and support advertising features, where applicable.

Strictly necessary cookies may be used to provide the essential functions of the website. Analytics and advertising cookies that require consent are used only after the appropriate consent has been obtained.

You can manage your cookie preferences using the privacy settings or cookie notice available on our website. You can also delete or block cookies through your browser settings; however, certain website features may not function properly as a result.

6. Sharing Personal Data with Third Parties

We do not sell your personal data to third parties for monetary consideration. Personal data may be shared with the following categories of recipients where necessary.

6.1. Shopify

Our online store operates on the Shopify platform, which provides e-commerce functionality, order management and related technical services. Shopify may process personal data to operate and secure the platform.

Shopify Privacy Policy: https://www.shopify.com/legal/privacy

6.2. Payment Service Providers

Payment processing is provided by the MakeCommerce platform: https://makecommerce.lv/. Accordingly, our company transfers the personal data necessary to process payments to the platform operator, Maksekeskus AS.

6.3. Delivery Companies

To deliver your order, we may share the recipient’s name, shipping address, telephone number, email address and other information necessary for delivery with the relevant delivery company.

6.4. Technology, Analytics and Marketing Service Providers

Where the relevant services are used in our store, personal data may be shared with providers of website maintenance, analytics, customer support or advertising services. The specific providers depend on the applications installed and used in our store.

6.5. Public Authorities and Professional Advisers

We may disclose personal data to accountants, legal advisers, supervisory authorities or other competent authorities where necessary to fulfil legal obligations or protect our legal interests.

7. Transfers of Personal Data Outside the European Economic Area

Some of our service providers, including Shopify and providers of certain applications, may process personal data outside Latvia or the European Economic Area (EEA).

Where personal data is transferred outside the EEA, we ensure that an appropriate legal basis and safeguards are in place, where required by the GDPR. These may include an adequacy decision adopted by the European Commission or Standard Contractual Clauses.

8. Data Retention Period

  • Order and transaction data is retained for the periods required by applicable legislation;

  • Customer communication data is retained for as long as necessary to address the enquiry and resolve related matters;

  • Customer account data is retained while the account remains active, unless another legal basis requires the data to be retained;

  • Marketing data is retained until consent is withdrawn or an objection is received, unless another legal basis applies;

  • Technical log and cookie data is retained in accordance with the settings of the systems and services used.

When personal data is no longer necessary, we delete or anonymise it unless applicable legislation requires otherwise.

9. Your Rights

Under the GDPR, depending on the circumstances, you have the right to:

  • Request access to your personal data;

  • Request the correction of inaccurate data;

  • Request the deletion of your personal data;

  • Request the restriction of processing;

  • Object to processing based on legitimate interests;

  • Receive certain personal data in a structured, commonly used and machine-readable format;

  • Withdraw your consent where processing is based on consent;

  • Object at any time to the use of your personal data for direct marketing;

  • Lodge a complaint with the Data State Inspectorate of Latvia.

These rights apply subject to the conditions and exceptions set out in the GDPR. For example, we may be legally required to retain certain accounting records even after receiving a request for deletion.

10. Children's Privacy

Our store offers toys and products that may be intended for children. However, the ordering process in our online store is intended for adults or for use under adult supervision.

We do not knowingly collect children's personal data for inappropriate marketing purposes. If you believe that a child has provided us with personal data in an inappropriate manner, please contact us.

11. Personal Data Security

We implement reasonable technical and organisational measures to protect personal data against unauthorised access, disclosure, alteration, loss or destruction. However, no method of electronic data transmission or storage can guarantee absolute security.

12. Third-Party Websites

Our website may contain links to third-party websites and services, including payment providers, delivery services and social media platforms.

We are not responsible for the privacy practices of third-party websites that we do not operate. We recommend reviewing the relevant privacy policy before providing personal data to any such website.

13. Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our business operations, the services we use, website functionality or applicable legal requirements.

The current version of this Privacy Policy will always be available on this page together with the date of the latest update.

14. Contact Information

If you have any questions about this Privacy Policy, wish to exercise your data protection rights or require further information about how your personal data is processed, please contact us:

Data State Inspectorate of Latvia: https://www.dvi.gov.lv/

You have the right to lodge a complaint with the Data State Inspectorate of Latvia if you believe that your personal data is being processed in violation of applicable data protection regulations.