Privacy Policy
IDNTY collects the minimum personal data needed to take your order, get it to your door, and meet our legal obligations as a business — nothing more. We don’t run analytics or ad-tracking scripts, we don’t sell or rent your data, and we don’t send marketing emails unless you separately ask us to.
Who we are
IDNTY is operated by [legal entity name], registered at [registered address], company registration number [reg. no.]. For anything about this policy or your data, contact us at [privacy@idnty.example]. IDNTY is the data controller for the personal data described here.
What we collect, and why
| Data | Why we collect it |
|---|---|
| Name, delivery address, phone number | To ship your order and let the courier reach you |
| Email address | To send order confirmations, shipping updates, and reply if you contact us |
| Order contents and value | To process, pack and invoice your order |
| Payment details | Handled directly by our payment method (see below) — we don’t see or store your full card/bank details ourselves |
| IP address (briefly, on first visit) | To guess whether to show the site in Latvian or English |
We collect this either directly from you at checkout, or automatically (IP address only) on your first visit.
Legal basis for processing
- Performance of a contract — most of what’s above, because we can’t ship you an order without a name and address.
- Legal obligation — invoice and order records are kept to meet Latvian accounting and tax law.
- Legitimate interest — basic fraud prevention and keeping the site secure.
- Consent — only if you separately opt in to something like a newsletter; we don’t currently run one.
Payment
Orders are currently paid by direct bank transfer. We never see or store your full bank account details beyond what’s needed to match your payment to your order. If we add a card/online payment processor in future, that processor (not IDNTY) will handle and store your card details directly, under its own privacy policy.
Who we share your data with
- Courier/shipping company — your name, address and phone number, to deliver your order.
- [Hosting provider name] — hosts the website and the data it processes, as our data processor.
- ip-api.com — a third-party lookup service that receives your IP address on your first visit only, to detect your country and set the site language. No other data is sent to it, and the result (just “lv” or “en”) is what we store, not your IP address itself.
- We do not sell, rent, or share your data with advertisers or marketing platforms, because we don’t work with any.
Cookies
We use a small number of strictly necessary cookies: to remember what’s in your cart, to keep you logged in to your account if you have one, and to remember your language choice (kept for 180 days). We don’t use analytics or advertising cookies.
How long we keep your data
- Order and invoice records: kept for [X years — check the retention period Latvian accounting law requires for your business], as required by law.
- Account data, if you create one: kept until you ask us to delete it.
- Language cookie: 180 days, then it’s requested again on your next visit.
Your rights
Under the GDPR, you can ask us to:
- Access the personal data we hold about you
- Correct it, if it’s wrong or incomplete
- Delete it, once we’re not legally required to keep it (e.g. after the invoice retention period above)
- Restrict or object to certain processing
- Receive a copy of your data in a portable format
To exercise any of these, email [privacy@idnty.example]. If you’re not satisfied with our response, you can lodge a complaint with Latvia’s data protection authority, the Datu valsts inspekcija (Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv).
International transfers
Your data mostly stays within the EU/EEA. The one exception is the brief IP-address lookup described above, sent to a lookup service that may process it outside the EEA — only your IP address is involved, only on your first visit, and it’s not linked to your name or order.
Children
IDNTY isn’t directed at children, and we don’t knowingly collect personal data from children.
Changes to this policy
If we start doing something new with your data — adding a newsletter, an analytics tool, a new payment processor — we’ll update this page before we do it, not after.
Contact us
Questions about your data or this policy: [privacy@idnty.example].