Privacy Policy

PRIVACY POLICY VĒRDIŅŠ-P.R., SIA

Effective Date: 19 May 2026

VĒRDIŅŠ-P.R., SIA (“we”, “us”, “our”, or “VĒRDIŅŠ”) is committed to protecting your privacy and ensuring the lawful and transparent processing of your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our e-commerce platform, place orders, or interact with us.

We operate in full compliance with the General Data Protection Regulation (GDPR) (EU 2016/679), the Latvian Personal Data Processing Law, and other applicable data protection regulations.

1. Data Controller

Company Name: VĒRDIŅŠ-P.R., SIA VAT Number: LV44103006614 Registration Number: Nr. C25246 Registration Date: 29 October 2004 Registered Address: Latvia, European Union

Contact Details for Privacy Matters: Email: privacy@verdinsp.com Phone: +371 25 218 448

You can contact us at any time regarding this Privacy Policy or the exercise of your data subject rights.

2. Information We Collect

We collect the following categories of personal data:

A. Information You Provide Directly

• Contact details: full name, email address, phone number, billing and shipping address
• Account information: username, password, company name (for B2B customers)
• Order-related data: order history, products purchased, payment details, delivery instructions
• Communication data: messages, inquiries, support tickets, feedback, and reviews
• Identification documents (if required for high-value orders or AML compliance)
• Payment preferences (bank details, RIA Money Transfer information, Bitcoin wallet addresses when provided)

B. Information Collected Automatically

• Technical data: IP address, browser type and version, device type, operating system, time zone
• Usage data: pages visited, time spent on site, clickstream data, referring/exit pages
• Cookies and tracking technologies (see Section 9)

C. Information from Third Parties

• Shipping partners (delivery status updates)
• Payment processors and financial institutions
• Business partners and marketing platforms (if you consent)

3. Purposes and Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR:

4. Data Sharing and Disclosure

We may share your personal data with:

• Service Providers: Hosting providers, logistics/shipping companies, payment processors, email service providers, and customer support tools.
• Professional Advisors: Lawyers, accountants, auditors (when necessary).
• Public Authorities: When required by law (tax authorities, law enforcement, customs).
• Business Transfers: In the event of merger, acquisition, or sale of assets.

We do not sell your personal data to third parties for marketing purposes.

Special Note on Payments: For orders under USD/EUR 1,500, payments processed via RIA Money Transfer or Bitcoin may involve sharing limited necessary information with these service providers. Bitcoin transactions are pseudonymous by nature; we do not collect additional wallet data beyond what is required to verify payment.

5. International Data Transfers

As an EU-based company, we primarily process data within the European Economic Area (EEA). When data is transferred outside the EEA (e.g., to shipping partners or cloud providers), we ensure appropriate safeguards such as:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions
• Other GDPR-approved mechanisms

6. Data Security

We implement appropriate technical and organizational measures to protect your data, including:

• Encryption of sensitive data (SSL/TLS)
• Secure payment processing
• Access control and regular security audits
• Staff training on data protection

Despite these measures, no system is completely impenetrable. You are responsible for keeping your account credentials confidential.

7. Data Retention

We retain your personal data only as long as necessary for the purposes outlined above or as required by law:

• Order and financial records: minimum 7–10 years (accounting & tax obligations)
• Marketing consent: until you withdraw consent
• Inactive accounts: deleted or anonymized after 24–36 months of inactivity (after notification)

8. Your Data Subject Rights (GDPR)

You have the following rights regarding your personal data:

• Right of Access – Request a copy of your data
• Right to Rectification – Correct inaccurate data
• Right to Erasure (“Right to be Forgotten”)
• Right to Restrict Processing
• Right to Data Portability
• Right to Object to processing (including marketing)
• Right to Withdraw Consent at any time
• Right not to be subject to automated decision-making (including profiling)

To exercise any of these rights, please contact us at the email address above. We will respond within one month (free of charge in most cases).

9. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience, analyze site usage, and deliver personalized content. You can manage your cookie preferences through our Cookie Consent Banner or your browser settings.

For detailed information, please refer to our Cookie Policy (available on our website).

10. Children’s Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal data from children. If we discover such data has been collected, we will delete it immediately.

11. Third-Party Links

Our website may contain links to external sites. We are not responsible for the privacy practices of those third parties. We encourage you to read their privacy policies.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website with a new effective date. We will notify you of material changes via email or website notice where required by law.

13. Contact Us

For any questions or concerns about this Privacy Policy or our data practices, please contact us:

VĒRDIŅŠ-P.R., SIA Email: privacy@verdinsp.com Address: Cēsu iela 11, Valmiera, LV-4201 Latvia

You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority.