Privacy policy

This policy explains what personal data mercurius-baltic.eu collects, why, and what you can do about it. It applies to the web shop and to orders placed by e-mail or phone. Last updated 25 September 2026.

Who is responsible

The data controller is SIA MERCURIUS BALTIC, registration number 40103585631, legal address Talsu iela 34A-1, Rīga, LV-1002, Latvia. Questions about your data: info@mercurius-baltic.eu or +371 29137091.

What we collect and why

Orders. When you order, we ask for your first and last name, phone number, e-mail address, delivery country, city and postcode, the parcel locker you choose, and any comment you add. Business customers also give the company name, registration number, VAT number and legal address, and may name a separate payer. We use this data to confirm and deliver the order, issue the invoice, and answer questions about it. The legal basis is the contract with you and our legal duties in accounting and tax law.

Customer account. If you register, we store your e-mail address, your name, a protected form of your password, the company you belong to, and your order history, so that you can see your orders and your price level. The legal basis is the contract with you. You can close the account by writing to us.

Contact form and e-mail. When you write to us, we keep your name, e-mail address and message for as long as it takes to answer and, if it leads to an order, together with that order. The legal basis is our legitimate interest in answering you.

Payments. We are paid by bank transfer against an invoice, or by card at our warehouse. The website never sees your card or bank details. Your bank passes us the payer's name and the payment reference.

How long we keep it

Orders, invoices and the customer data on them are kept for as long as Latvian accounting law requires, currently five years after the end of the financial year. Account data is kept while the account exists. Messages that do not lead to an order are deleted within a year.

Who receives your data

We share only what each recipient needs. Delivery: DPD Latvija and Omniva receive the recipient's name, phone number, e-mail address and the delivery address or parcel locker, so they can deliver and send tracking notices. E-mail: order confirmations and invoices are sent through Resend, a transactional e-mail service; the transfer outside the European Economic Area is covered by the safeguards the GDPR requires. Hosting and IT: the website and our order system run on servers of Hostinger in Vilnius, Lithuania, and are maintained by our IT provider Knowhaa (knowhaa.com), which acts on our instructions and does not use the data for its own purposes. Accounting: our accountant and, where the law requires it, the State Revenue Service. We do not sell personal data and do not pass it to advertisers.

Cookies and browser storage

The website sets one cookie, and only if you log in: mb_session keeps you signed in for up to 30 days and is deleted when you log out. Your shopping cart, language choice and price display are kept in your browser's own storage on your device; they are not sent to us until you place an order and are not used to track you.

Visitor statistics come from Umami, an analytics tool we run on our own server. It uses no cookies, does not store your IP address, and cannot identify you. It counts page views and the country and device type of visits so that we know which pages are used.

We do not use advertising cookies, social media pixels or any third-party tracking.

Your rights

You can ask us at any time what data we hold about you, have it corrected or deleted, restrict or object to its use, or receive it in a portable form, within the limits that accounting law sets for invoices. Where processing is based on consent, you can withdraw it at any time. Write to info@mercurius-baltic.eu; we answer within a month. If you believe we handle your data unlawfully, you can complain to the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).

Children

The shop is meant for adults, schools and kindergartens. We do not knowingly collect data from children; a parent or teacher places the order.

Changes

If we change this policy, the new version is published here with a new date. Substantial changes affecting account holders are also announced by e-mail.

The website is developed and maintained by Knowhaa (knowhaa.com).