1. Data controller
The controller responsible for processing personal data is SIA MANUM, Reg. No. 40203414494, registered address Gaismas iela 22-26, Daugavpils, LV-5414, Latvia, tel. +371 25946564, email info@rotas69.com. This policy applies to the ROTAS69 online shop on the domains www.rotas69.lv, www.rotas69.lt, www.rotas69.ee and www.rotas69.com.
2. What data we process
- Order data: first name, surname, email address, phone number, delivery address or parcel locker, order contents and order total, payment method (we do not see or store your card number).
- Account data, if you create an account: name, email address, phone number, order history, addresses.
- Communication data: messages you send via the contact form, by email or by phone, and requests submitted on the “Order status and returns” page.
- Reviews: name, email address and review text, if you leave a review.
- Usage data: device and browser information, IP address, pages and products viewed, wishlist, cookies — see the Cookies section below.
3. Purposes and legal basis
- Order fulfilment: processing the purchase, payment, delivery, invoices and returns, and answering questions about the order. Legal basis: contract.
- Statutory obligations: accounting, taxes and consumer rights claims. Legal basis: legal obligation.
- Account and wishlist. Legal basis: contract.
- Newsletters about offers and new jewellery. Legal basis: your consent; you can withdraw it at any time using the link in the email or by writing to us.
- Reminder about an unfinished order: one email within 72 hours if an order has been left in the cart and an email address has been provided. Legal basis: legitimate interests; you can opt out of these emails.
- Collecting reviews: after a purchase, we send an invitation to leave a review. Legal basis: legitimate interests; you can opt out of these invitations.
- Statistics, advertising and ad measurement using Google and Meta tools. Legal basis: your consent given in the cookie notice.
- Security and fraud prevention, and keeping the website running. Legal basis: legitimate interests.
4. Who we share data with
The following service providers process data on our behalf, each only within the scope of its own task:
- Shopify (Shopify International Limited, Ireland; data is also processed by Shopify Inc., Canada and the USA): online shop platform, orders, accounts, email notifications, payment processing via Shopify Payments.
- Montonio Finance UAB (Lithuania): online bank payments.
- Carriers: DPD, Omniva, Unisend, Latvijas Pasts — name, phone number, email address and delivery location, to deliver the parcel.
- Google (Google Ireland Limited): Google Analytics and Google Ads for statistics and advertising — only with your consent.
- Meta (Meta Platforms Ireland Limited): Facebook and Instagram advertising and ad measurement — only with your consent.
- Stape (EU servers): sending measurement data to Google and Meta from our server.
- Judge.me (United Kingdom): collecting and displaying reviews.
- Cloudflare (USA, EU data centres): services for our website — the order status and returns page, the wishlist.
Some of these companies are located outside the EU and the EEA. Data is transferred on the basis of European Commission adequacy decisions (Canada, United Kingdom), under the EU–US Data Privacy Framework, or using standard contractual clauses. Data may also be passed on to authorities where required by law.
5. Cookies
The website uses cookies and similar technologies, grouped into three categories. On your first visit, a cookie notice appears in which you choose which categories to allow. Without your consent, only necessary cookies are active.
- Necessary: cart, signing in, language and country selection, security, saving your cookie choices. Set by Shopify.
- Analytics: visit statistics, which pages and products are viewed, how purchases are made. Set by Shopify and Google Analytics.
- Advertising: showing ads and measuring their results on Google and Meta; some of the data is sent from our server (Stape) to make measurement more accurate. Set by Google, Meta and our domain.
Cookies are stored for periods ranging from the end of the session to 13 months. You can change your choice at any time: cookie settings. You can also delete cookies in your browser settings.
6. How long we keep data
- Order and accounting data — 5 years after the transaction, as required by the Accounting Law.
- Account data — while the account is active; we delete the account at your request.
- Email address for newsletters — until consent is withdrawn.
- Withdrawal and status requests, and correspondence — 2 years after they have been dealt with.
- Reviews — while they are published or until you ask us to delete them.
- Statistical data — no longer than 14 months.
7. Children
The online shop is not intended for children under the age of 13. If we learn that such a child’s data has been received without parental consent, we will delete it.
8. Your rights
You have the right to access your data, correct or delete it, restrict its processing, receive it in a portable format, object to processing, including for advertising purposes, and withdraw your consent at any time — this does not affect the lawfulness of processing carried out before the withdrawal. Send your request to info@rotas69.com; we will reply within one month. If you believe we are processing your data improperly, you can lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).
9. Security
The connection to the website is encrypted, payment data is processed only by licensed payment service providers, and access to data is limited to those employees and service providers who need it to do their work.
10. Changes
We may update this policy; the current version can always be found on this page. In the event of significant changes, we will notify you on the website or by email. Version: 27 September 2026.
