Privacy Policy CraftIN.lv

Last update: May 12, 2026

This Privacy Policy explains how CraftIN (hereinafter – we, us or CraftIN) collects, uses, stores and protects your personal data when you use our online store https://craftin.lv (hereinafter – the Website), place an order, contact us or use our services.

We comply with the European Union General Data Protection Regulation (GDPR), the Personal Data Processing Law and other laws and regulations of the Republic of Latvia in the field of personal data protection.

1. Who is CraftIN and who is responsible for personal data?

Data controller:
Ingars Neija, an economic operator operating under the CraftIN brand.

Website / structural unit registered with the SRS:
https://craftin.lv
Unit registration No.: 91443719867

Contact information:
Address: Saules, Skriveru parish, LV-5125, Skriveri, Latvia
Phone: +371 28323008
Email: info@craftin.lv

CraftIN is a self-employed home workshop and online store engaged in the production of personalized products, including laser engraving, laser cutting, 3D printing, wooden products and other individual orders.

We determine the purposes and means of the processing of personal data and take care that your data is processed lawfully, fairly, transparently and securely.

2. What personal data do we process?

We process only those personal data that are necessary for the acceptance of orders, production, payment accounting, delivery, customer service and ensuring the operation of the Site.

• Order data: name, surname, e-mail address, phone number, delivery information, selected parcel machine or delivery address, ordered goods and their personalization information.
• Invoice and payment data: invoice information, order amount, payment status, payer information displayed on the bank transfer, and the purpose of the payment.
• Customer Account Data: If you create an account on the Site, we process the information necessary to create and manage the account.
• Loyalty program data: information about purchases made, points awarded, points used and discount codes created if you use the CraftIN loyalty program.
• Contact data: messages you send to us by email, contact form, order comment or other communication channel.
• Technical data: IP address, device and browser information, pages visited, cookie preferences and other technical information necessary for the operation, security and improvement of the Site.
• Reviews: If you leave a review about a product or service, we may process the name you provide, the text of the review and the information related to the review.

We do not knowingly collect special categories of personal data, such as health data, religious beliefs, political opinions, or other sensitive data. We also do not unknowingly process children’s personal data.

3. For what purposes and on what legal basis is the data processed?

4. Payment processing

CraftIN currently accepts payments by bank transfer. After placing the order, invoice information and payment details are sent to the customer. The production of the order is started after receipt or confirmation of payment.

CraftIN Website does not process and store payment card data. In the case of a bank transfer, we only see the information necessary to identify the payment and keep track of accounting, such as the payer’s name, the amount of payment, the date of payment, and the purpose of the payment.

5. Who do we share personal data with?

We do not disclose personal data to third parties more than is necessary for the execution of the order, the operation of the Site, the fulfillment of accounting requirements or compliance with regulatory enactments.

• Delivery service providers: for example, Omniva or another delivery provider, if it is necessary for the delivery of the order.
• Financial institutions: banks and payment institutions involved in the execution of a bank transfer.
• Hosting and maintenance providers: service providers that ensure the operation, security and maintenance of the Site.
• Analytics services: For example, Google Analytics, if you have given consent to analytics cookies.
• Accounting and legal services: if it is necessary for the fulfillment of accounting, tax or legal obligations.
• State and local government institutions: for example, the State Revenue Service, the Data State Inspectorate, courts or other institutions, if it is required by laws and regulations.

We do not sell or rent personal data to third parties.

6. Data retention periods

• Order, invoice and accounting data are stored for as long as necessary for the fulfillment of accounting and tax regulatory enactments, but not for a shorter period of 5 years.
• Customer account data is stored for as long as the account is active or until you request deletion of the account, unless the data needs to be stored longer for regulatory enforcement.
• Loyalty program data is stored for as long as the customer’s account, loyalty program exists or as long as the data is needed to record points and discounts.
• Communication data is stored for as long as necessary to resolve the issue in question and protect our legitimate interests.
• Marketing data is stored until you withdraw your consent.
• Cookies and technical data are stored according to the type of cookies and your preferences in the cookie consent tool.

After expiry of the relevant time period, data shall be deleted, anonymised or stored only to the extent necessary for the implementation of regulatory enactments or resolution of possible disputes.

7. Cookies

The Site uses cookies to ensure the operation of the Site, the functionality of the shopping cart, the order process, security, the preservation of user preferences and, if you have given your consent, also analytics.

• Necessary cookies: necessary for the basic operation of the Site, such as the session, shopping cart, ordering process and security. These cookies cannot be completely disabled, because without them the Site would not work properly.
• Functional cookies: Helps to store user preferences, such as language or other site usage settings, if any.
• Analytics cookies: Helps us understand how visitors use the Site so that we can improve the content, structure and ease of use. These cookies are used only with your consent.

You can accept all cookies, reject optional cookies or adjust your preferences in our cookie consent tool. You can change your choice at any time using the link or button "Change cookie settings" if it is available at the bottom of the Site.

More information is available in our Cookie Policy.

8. Your rights

As a data subject, you have the right to:

• request access to your personal data;
• request correction of inaccurate data;
• request the erasure of data if there is a legal basis for this;
• request restriction of data processing;
• object to data processing if it is based on our legitimate interests;
• receive their data in a structured, commonly used and machine-readable format, if applicable;
• withdraw your consent at any time if the data processing is based on consent.

To exercise your rights, write to us on info@craftin.lv. We will respond to the request no later than within one month. In difficult cases, this period may be extended in accordance with regulatory enactments.

If you believe that your personal data is being processed in non-compliance with regulatory enactments, you have the right to apply to the Data State Inspectorate.

The Data State Inspectorate shall:
Address: Elijas street 17, Riga, LV-1050
Phone: +371 67223131
Email: pasts@dvi.gov.lv
Website: www.dvi.gov.lv

9. Data security

We take reasonable technical and organizational measures to protect personal data against unauthorized access, loss, misuse, disclosure or alteration.

• The site uses SSL encryption for secure data transmission.
• Access to order and customer data is limited.
• Personal data are processed only to the extent necessary for the specific purpose.
• Technical maintenance of the site is carried out in compliance with the principles of security and data protection.

Although we care about data security, it must be borne in mind that no data transmission over the Internet or an electronic storage system is absolutely invulnerable.

10. Children’s data

The CraftIN Site and services are not intended for children who independently place orders without the involvement of parents or a legal representative. If we become aware that we have accidentally received a child’s personal data without an appropriate legal basis, we delete it.

11. International data transfers

Basically, personal data is processed in Latvia and the European Union or the European Economic Area. Where external service providers are used, whose activities may include data transfers outside the EU/EEA, such as analytics services, such processing is carried out only if there is an appropriate legal basis and appropriate safeguards.

12. Changes to the Privacy Policy

We may update this Privacy Policy from time to time to reflect the actual operation of the Site, services and regulatory requirements. Changes take effect when we publish them on the Site.

If the changes will be material and directly affect your rights or data processing procedures, we will inform you separately as far as possible, for example on the Site or by e-mail.

Contacts

For questions about this Privacy Policy or your personal data, please contact us:

E-mail: info@craftin.lv
Phone: +371 28323008
Website: https://craftin.lv