Menu
AND Customs

Privacy policy

This privacy policy explains how AND Customs processes personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation, GDPR) and Latvian law.

1. Controller

The data controller is AND Customs. For questions about personal data processing, contact: [email protected]

2. What data we process

  • First and last name

  • Email address and phone number

  • Delivery address or chosen parcel locker

  • Order and payment information

  • Images/designs submitted for production

  • Messages you send via the contact form

3. Purposes and legal basis

  • Order fulfilment and contract — performance of a contract (GDPR Art. 6(1)(b)).

  • Accounting and invoicing — legal obligation (Art. 6(1)(c)).

  • Newsletter — your consent (Art. 6(1)(a)), which you may withdraw at any time.

  • Communication and support — our legitimate interests (Art. 6(1)(f)).

4. Recipients

We may share data with service providers necessary to fulfil your order:

  • Delivery providers (e.g. Omniva)

  • Payment service provider Maksekeskus AS (MakeCommerce)

  • Accounting and IT/website maintenance providers

  • Google Ireland Limited (Google Analytics) — aggregated statistics only, and only if you consented to analytics cookies

Payment processing is provided by the payment platform https://makecommerce.lv/, therefore our company transfers the personal data required to complete payments to the platform's owner, Maksekeskus AS.

Data is not transferred outside the European Economic Area without an appropriate legal basis.

5. Retention period

We keep order and accounting data for as long as required by law (accounting documents — up to 5 years). Submitted images are kept only as long as needed to fulfil the order. Newsletter data is kept until consent is withdrawn.

6. Your rights

You have the right to:

  • access your data and receive a copy;

  • rectify inaccurate data;

  • erase data ("right to be forgotten"), where the law allows;

  • restrict or object to processing;

  • data portability;

  • withdraw consent (e.g. for the newsletter).

To exercise your rights, write to [email protected]

7. Complaints

If you believe your data is processed unlawfully, you may lodge a complaint with the Data State Inspectorate (https://www.dvi.gov.lv).

8. Cookies and security

The website uses cookies — see "Cookie policy". We apply appropriate technical and organisational measures to protect your data.