Privacy policy
Effective Date: August 13, 2026
SIA “Kairos Solutions” (hereinafter – Data Controller or we) operates the online store and website truepaw.eu (hereinafter – the Website or Services). The online store is hosted on the Shopify platform, which provides us with e-commerce infrastructure.
This Privacy Policy describes how we collect, process, store, and protect personal data of Data Subjects (Buyers and Website visitors) in compliance with Regulation (EU) 2016/679 (GDPR) and applicable laws of the Republic of Latvia.
1. General Provisions
1.1. Personal data means any information relating to an identified or identifiable natural person (Data Subject).
1.2. The Data Controller complies with statutory data protection principles (lawfulness, fairness, transparency, purpose limitation, data minimization, accuracy, storage limitation, integrity, confidentiality).
2. Categories of Personal Data Processed
-
Contact Information: Name, surname, delivery address, billing address, phone number, email address.
-
Financial & Payment Data: Payment method, transaction amount, confirmation, partial card/bank details (processed by licensed payment institutions).
-
Order & Transaction Data: Purchased products, order history, delivery method, customer communications.
-
Account Information: Username, encrypted password, preferences.
-
Technical & Usage Information: IP address, device/browser details, browsing history, cookies.
-
Communication Data: Customer support inquiries, emails, reviews.
3. Purposes and Legal Bases
Processed pursuant to Article 6(1) of GDPR:
-
Contract Performance (Art. 6(1)(b)): Order execution, invoicing, shipping, customer support.
-
Legal Obligation (Art. 6(1)(c)): Statutory accounting, tax, and consumer law compliance.
-
Legitimate Interests (Art. 6(1)(f)): IT security, business administration, fraud prevention, legal claims.
-
Consent (Art. 6(1)(a)): Newsletter subscriptions and non-essential cookies (revocable anytime).
4. Data Recipients & Processors
-
Payment Processing Providers:
-
MakeCommerce (Maksekeskus AS): Baltic (LV, EE, LT) and Finnish online bank links and card payments.
-
Shopify Payments (Shopify International Limited): Visa, MasterCard, Maestro, Amex, Apple Pay, Google Pay, Shop Pay.
-
-
Logistics & Delivery Partners:
-
SIA "Omniva" (lockers & couriers);
-
SIA "DPD Latvija" (lockers & couriers);
-
SIA "Venipak Latvija" (lockers & couriers);
-
VAS "Latvijas Pasts" (lockers, post offices, couriers).
-
-
IT Platforms & Others: Shopify Inc., accounting providers, state authorities as required by law.
5. International Data Transfers
Where data is processed outside the EEA (via Shopify or global partners), transfers comply with GDPR safeguards using Standard Contractual Clauses (SCCs).
6. Retention Periods
-
Accounting records: 5 years pursuant to the Law on Accounting.
-
Contractual records & correspondence: 10 years pursuant to the Civil Law limitation period.
-
Marketing data: until consent withdrawal.
7. Data Subject Rights & Contacts
Rights include access, rectification, erasure, restriction, portability, consent withdrawal, and complaint filing with the Data State Inspectorate of Latvia (www.dvi.gov.lv, info@dvi.gov.lv).
Contact for privacy requests: info@truepaw.eu.