Privacy policy

This policy explains what personal data we process when you visit letivelosipedi.lv or place an order, why we process it and what rights you have. We process data in accordance with Regulation (EU) 2016/679 (the General Data Protection Regulation, GDPR) and the Latvian Personal Data Processing Law.

Controller

The controller of your personal data is SIA "Nepashvikai", registration No. 40103243508, Ādmiņu iela 4, Rīga, LV-1009, Latvia, which runs the shop "Lēti Velosipēdi". For any question about your data, write to [email protected] or call +371 26333045.

What data we process

Order data

When you order an item, you fill in the order form. We store:

• your first and last name;
• your e-mail address and phone number;
• your personal code (personas kods), which we need to issue the invoice;
• the delivery method you chose and, for courier delivery, your address and postal code;
• your note, if you add one;
• the name and price of the item ordered;
• the IP address the order was sent from, the site language used, and the times the order was created and updated.

Visiting the site

If you agree, we use Google Analytics to learn how many people visit the site and which pages they view. Without your consent no Google Analytics cookies are stored, and only anonymous cookieless signals are sent (Google Consent Mode). The site has no advertising trackers. To deliver pages to you and protect the site from attacks, our server and Cloudflare process your IP address and the information your browser sends.

Favourites

Items you add to your favourites are stored only in your own browser (localStorage). They are not sent to our server, and we cannot see them. You can delete the list by clearing this site's data in your browser.

Purposes and legal basis

• Processing your order: confirming availability, issuing the invoice, contacting you about the order, and handing over or shipping the item. Legal basis: entering into and performing a contract (Article 6(1)(b) GDPR).
• Keeping invoices and other accounting records. Legal basis: a legal obligation under the Latvian Accounting Law (Grāmatvedības likums) (Article 6(1)(c) GDPR).
• Protection against spam and abusive orders. We accept no more than three orders per IP address per hour. Legal basis: our legitimate interests (Article 6(1)(f) GDPR).
• Handling warranty claims, complaints and withdrawals. Legal basis: performance of the contract and legal obligations.
• Visitor statistics with Google Analytics. Legal basis: your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

We do not use your data for marketing messages, profiling or automated decision-making.

E-mails

When you submit an order, we receive an e-mail with the order details and you receive a confirmation at the address you gave. In the confirmation, your personal code is partly masked.

Who receives the data

We do not sell your data or share it with anyone for advertising. Data may be received by:

• our hosting provider in Latvia, on whose servers the data is stored;
• Cloudflare, Inc., which provides the site's DNS and content delivery network;
• Google Ireland Limited, if you consent to Google Analytics: data about your visit, including a shortened IP address and device information;
• VAS "Latvijas Pasts", if you choose courier delivery: the name, phone number, address and postal code needed to deliver the parcel;
• public authorities, where the law requires it.

Cloudflare and Google may also process data outside the European Economic Area. Any such transfer complies with Chapter V of the GDPR, for example on the basis of a European Commission adequacy decision or standard contractual clauses.

How long we keep data

We keep order data for as long as it is needed to fulfil the order, during the warranty period and to handle possible claims. Invoices and other supporting accounting documents are kept for the period set by the Latvian Accounting Law. When there is no longer a reason to keep the data, we delete it.

Cookies

The site uses these cookies, which it cannot work without:

• sessionid: a session cookie that stores technical information during your visit;
• csrftoken: a security cookie that protects forms, including the order form, against forged requests.

These cookies do not require consent because they are strictly necessary for the site to work (Section 7.¹ of the Latvian Law on Information Society Services).

Only with your consent does the site also store the Google Analytics cookies _ga and _ga_PY4H7NMSJT, which tell visitors and visits apart. They are kept for up to 2 years. You can give or withdraw consent at any time under "Cookie settings" in the site footer. Your choice is saved in your browser (localStorage).

The "Contacts" page embeds a Google Maps map, and the "About us" page embeds a YouTube video loaded from youtube-nocookie.com. When these load, Google may process your IP address and set its own cookies under the Google Privacy Policy. We do not receive this data and do not control how it is processed.

You can delete or block cookies in your browser settings. If you block the session or security cookie, the order form may not work.

Your rights

You have the right to:

• access your data and get a copy of it;
• have inaccurate data corrected;
• have your data erased when there is no longer a reason to keep it;
• restrict processing;
• object to processing based on our legitimate interests;
• receive the data you gave us in a structured, machine-readable format (data portability).

Send your request to [email protected]. We will reply within one month. To make sure we give the data to the right person, we may ask you to confirm your identity.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija, www.dvi.gov.lv). We would ask you to contact us first so we can try to resolve the matter directly.

Changes to this policy

We may update this policy. The current version is always published on this page. Last updated: October 2026.