Privacy policy
Last updated: August 4, 2026
This Privacy Policy explains how SIA “Kinuvel” collects, uses, stores, shares and otherwise processes personal data when you visit kinuvel.com, use our online store and related services, place an order, create an account, subscribe to marketing communications, contact us or otherwise interact with us.
1. Who we are
SIA “Kinuvel” operates the online store and website kinuvel.com, including the products, content, features, tools and services made available through it (the “Services”).
Our online store is hosted on the Shopify platform, which provides the technical infrastructure that enables us to operate the store, process orders, support payments, arrange fulfilment and provide other e-commerce functionality.
2. Personal data we collect
“Personal data” means any information relating to an identified or identifiable natural person. It does not include information that has been irreversibly anonymized so that an individual can no longer be identified.
Depending on how you interact with us and our Services, we may process the following categories of personal data:
Contact and identification information: first name, last name, email address, telephone number, billing address and shipping address.
Order and transaction information: products ordered or purchased, order number, order value, payment status, delivery method, shipment information, returns, withdrawals, refunds and complaints.
Payment-related information: selected payment method, payment status, transaction references and other information necessary to process or verify a payment. Full payment card details are generally processed directly by the relevant payment service provider and are not stored by us in full.
Customer account information: information necessary to create, maintain and administer a customer account, if you choose to create one.
Communications: information that you provide when you contact us by email, contact form, social media or another communication channel, including the content of your message and information relating to your request.
Device and technical information: IP address, browser type, device type, operating system, language settings, cookie identifiers, network information and other technical identifiers.
Website usage information: information about how you interact with our website and Services, such as pages visited, products viewed, searches, items added to your cart, checkout activity and other interactions with the website.
Marketing and consent information: your newsletter subscription status, marketing preferences, cookie consent choices and records of consent or withdrawal of consent
Advertising and analytics information: online identifiers and information relating to interactions with our website or advertising campaigns that may be processed through analytics and advertising technologies where permitted by applicable law and your consent choices.
3. How we collect personal data
We may collect personal data:
directly from you when you place an order, create an account, subscribe to marketing communications, complete a form, exercise your rights or contact us;
automatically when you use our website, including through cookies and similar technologies;
from Shopify and other providers that support the operation of our online store;
from payment service providers in connection with payment confirmation and transaction status;
from delivery and logistics providers in connection with shipment and delivery;
from analytics, advertising and marketing service providers where such processing is permitted by applicable law.
4. How and why we use your personal data
We process personal data only where we have an appropriate legal basis.
Providing the Services and fulfilling orders
We process personal data to:
receive and process orders;
process and confirm payments;
arrange delivery;
send order, payment and delivery communications;
administer customer accounts;
process returns, withdrawals, refunds and exchanges;
respond to customer service requests.
The legal basis for this processing is the performance of a contract with you or taking steps at your request before entering into a contract.
Compliance with legal obligations
We may process and retain personal data where necessary to comply with obligations relating to accounting, taxation, consumer protection, product safety, regulatory requirements and other obligations imposed by applicable law.
The legal basis for this processing is compliance with a legal obligation
Customer service, security and protection of our rights
We may process personal data to:
respond to enquiries and provide customer support;
maintain the security and proper functioning of our website;
identify and prevent fraud, abuse and unauthorized activity;
establish, exercise or defend legal claims;
maintain appropriate records relating to disputes, complaints and transactions.
Where this processing is not necessary for performance of a contract or compliance with a legal obligation, we rely on our legitimate interests in operating a secure online store, providing effective customer support, preventing fraud and protecting our legal rights.
We assess these interests against the interests, rights and freedoms of the individuals concerned.
Marketing communications
If you have provided the required consent, we may use your contact details to send you newsletters, product information, offers, promotions and other marketing communications.
We may use Omnisend to manage newsletters, marketing subscriptions, automated marketing emails and related customer communications.
The legal basis for marketing communications that require consent is your consent.
You may withdraw your consent or unsubscribe from marketing communications at any time by using the unsubscribe link included in our emails or by contacting us at info@kinuvel.com.
Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.
Analytics, advertising and retargeting
Subject to your consent where required, we may use analytics, advertising and similar technologies, including Meta Pixel and TikTok Pixel, to:
understand how visitors interact with our website;
measure advertising and campaign performance;
attribute visits, interactions or purchases to advertising campaigns;
create or measure advertising audiences;
carry out retargeting;
improve and optimize our advertising.
Where consent is legally required for these technologies, the legal basis for the processing is your consent.
You may change or withdraw your cookie and tracking choices at any time through the cookie settings available on our website.
5. Cookies and similar technologies
Our website uses cookies and similar technologies.
Some cookies are strictly necessary for the website and Services to function, for example for shopping cart, checkout, security, authentication and privacy preference functions. Where these technologies are strictly necessary to provide a service requested by you, they may be used without consent where permitted by applicable law.
Analytics, advertising and other non-essential cookies or similar technologies are used only where permitted by applicable law and, where required, after you have provided consent.
These technologies may be provided by Shopify and by third parties such as Meta, TikTok, Omnisend and other analytics, advertising or customer communication providers used by us.
You can manage your choices through the cookie settings available on our website. You may also be able to control certain cookies through your browser settings, although disabling necessary cookies may affect the operation of parts of the website.
More detailed information about particular cookies, providers and their duration may be made available through our cookie settings or cookie notice.
6. When we share personal data
We may disclose personal data to service providers and other recipients where necessary for the purposes described in this Privacy Policy.
These recipients may include:
Shopify and other e-commerce technology providers;
payment service providers;
delivery, postal and courier service providers;
IT, hosting, security and website maintenance providers;
accounting, legal and administrative service providers;
customer communication and email marketing providers, including Omnisend;
analytics, marketing and advertising providers, including Meta and TikTok, where permitted by applicable law and your consent choices;
public authorities, regulators, courts and law enforcement authorities where disclosure is required or permitted by law;
professional advisers or other persons where disclosure is necessary to establish, exercise or defend legal claims;
another entity in connection with a merger, acquisition, restructuring, sale of assets or similar corporate transaction, where permitted by applicable law.
We disclose only the personal data reasonably necessary for the relevant purpose.
Our service providers may process personal data on our behalf under contractual obligations, while certain providers may process personal data as independent controllers for their own legally permitted purposes. Where another organization acts as an independent controller, its own privacy notice applies to its processing activities.
7. Shopify
Our online store is hosted on Shopify.
Shopify processes personal data necessary to provide the e-commerce infrastructure and related functionality used by our store. In many situations Shopify processes personal data on behalf of merchants such as SIA “Kinuvel”.
Shopify may also process certain personal data as an independent controller when you use services or features provided directly by Shopify, such as certain Shopify consumer services, where applicable. Such processing is governed by Shopify’s own privacy notices.
Because Shopify operates internationally, personal data processed through Shopify may be transferred to and processed in countries outside the country in which you live. Shopify applies the data transfer safeguards described in its applicable privacy documentation.
More information about Shopify’s processing of personal data is available in Shopify’s Privacy Policy and Consumer Privacy Policy.
8. Payment services
Payments are processed through third-party payment service providers available at checkout.
To process a transaction, relevant information may be transmitted to the selected payment provider, including information necessary to identify the transaction, confirm payment and prevent fraud.
We do not store your full payment card details.
The relevant payment provider may process personal data in accordance with its own privacy terms where it acts as an independent controller.
9. Delivery services
To fulfil and deliver an order, we may provide the selected delivery, postal or courier service provider with the information necessary for delivery.
Depending on the delivery method, this may include your:
first name and last name;
telephone number;
email address;
delivery address;
selected parcel locker or collection point;
information necessary to identify and deliver the shipment.
Delivery service providers may also provide us with information regarding shipment status, delivery attempts, successful delivery or return of the shipment.
10. International transfers of personal data
Some of our service providers or their subprocessors may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we take steps to ensure that the transfer is carried out in accordance with applicable data protection law.
Depending on the destination and service provider, appropriate safeguards may include:
a European Commission adequacy decision;
European Commission Standard Contractual Clauses;
approved Binding Corporate Rules;
another transfer mechanism recognized under applicable data protection law.
Where required, additional safeguards may also be applied following an assessment of the relevant transfer.
11. How long we retain personal data
We retain personal data only for as long as it is necessary for the purpose for which it was collected and for any additional period required or permitted by applicable law.
The retention period depends on the category of information and the reason for processing it.
In particular:
Order, transaction, payment and accounting information is retained for the period necessary to fulfil the order and afterwards for the applicable statutory accounting, taxation, consumer protection and legal record-keeping periods.
Customer account information is generally retained while the account remains active and may be retained afterwards where necessary to comply with legal obligations, resolve disputes or protect legal rights.
Customer service and complaint communications are retained for as long as necessary to deal with the request or complaint and, where appropriate, for a further period necessary to establish, exercise or defend legal claims.
Marketing subscription information is retained while you remain subscribed or until consent is withdrawn, subject to retaining limited information where necessary to record that you have unsubscribed or withdrawn consent.
Cookie and tracking information is retained according to the duration of the relevant cookie or technology, as described in the applicable cookie settings or notice.
Where personal data is no longer required, it is deleted, anonymized or otherwise handled in accordance with applicable law.
12. Data security
We use appropriate technical and organizational measures designed to protect personal data against unauthorized or unlawful processing and against accidental loss, destruction, alteration or disclosure.
No method of transmission over the internet or electronic storage can guarantee absolute security. We therefore cannot guarantee that unauthorized third parties will never be able to overcome security measures, but we take reasonable steps appropriate to the nature of the personal data and the risks involved.
13. Your data protection rights
Subject to the conditions and limitations provided by applicable data protection law, you may have the right to:
obtain confirmation as to whether we process your personal data and obtain access to that data;
request correction of inaccurate personal data and completion of incomplete personal data;
request deletion of your personal data;
request restriction of processing;
object to processing based on legitimate interests;
object at any time to processing for direct marketing purposes;
receive personal data that you provided to us in a structured, commonly used and machine-readable format and, where applicable, have it transmitted to another controller;
withdraw consent at any time where processing is based on consent;
lodge a complaint with a competent data protection supervisory authority.
These rights are not absolute and may be subject to conditions or exceptions under applicable law.
To exercise your rights, contact us at info@kinuvel.com.
We may request information reasonably necessary to verify your identity before responding to a request. We will not request more information than is necessary for that purpose.
14. Complaints
If you have concerns about how we process your personal data, you may contact us at info@kinuvel.com.
You also have the right to lodge a complaint with a competent data protection supervisory authority. In the European Economic Area, you may in particular lodge a complaint with the supervisory authority in the Member State of your habitual residence, place of work or the place of the alleged infringement.
As SIA “Kinuvel” is established in Latvia, you may also contact the Latvian data protection supervisory authority: Data State Inspectorate of Latvia.
Your right to lodge a complaint with a supervisory authority is not conditional on contacting us first.
15. Children
Our Services are not specifically directed at children.
We do not knowingly seek to collect personal data from children in circumstances where such processing would require authorization from a parent or legal guardian under applicable law.
If you are a parent or legal guardian and believe that a child has provided personal data to us inappropriately, please contact us at info@kinuvel.com so that we can review the situation and take appropriate action.
16. Third-party websites and services
Our website may contain links to websites, applications or services operated by third parties.
We are not responsible for the privacy practices, security, content or operation of third-party services that we do not control.
We encourage you to review the privacy information provided by the relevant third party before providing personal data to it.
17. Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including when our Services, technologies, service providers, data processing activities or legal requirements change.
The latest version will be published on kinuvel.com with an updated “Last updated” date.
Where required by applicable law, we will provide additional notice of material changes or obtain new consent before carrying out processing that requires such consent.
18. Contact us
If you have questions about this Privacy Policy, how we process personal data or how to exercise your data protection rights, please contact us: SIA “Kinuvel”, Registration No. 40203679948, VAT No. LV40203679948, Kapteiņu iela 23 – 3, Ventspils, LV-3601, Latvia, email: info@kinuvel.com.