Privacy Policy for Whirlwind Lures
Effective Date: March 27, 2025
1. Who We Are
- Data Controller: Oskars Krutainis, Whirlwind Lures, Lejina 10, Riga, Latvia, LV-1029
- Contact: info@whirlwind-lures.com
2. What Data We Collect
- Name, email, phone, address, payment details, order details.
3. Why We Use Your Data
- Orders, support, legal compliance, service improvement, marketing (with consent).
4. Legal Reasons
- Contract, consent, legal duty, legitimate interests.
5. Who We Share Your Data With
- Shipping providers (e.g., Swotzy), payment processors (e.g., Paysera), platform providers (e.g., WooCommerce), cloud services (e.g., Google Cloud).
- Legal authorities or business successors, if required.
6. How Long We Keep Your Data
- Order data: 2 years after purchase.
- Tax records: 6 years per Latvian law.
- Longer if needed for disputes or legal obligations.
7. Sending Data Outside the EU
- Transfers to the US (e.g., Google Cloud) follow the EU-US Data Privacy Framework.
8. Your Rights
- Access, rectify, erase, restrict, port, object, withdraw consent. Contact info@whirlwind-lures.com.
9. Cookies and Tracking
- See our Cookie Policy for details.
10. Data Breaches
- If a breach risks your rights, we’ll notify you and the Latvian Data State Inspectorate within 72 hours.
11. Keeping Your Data Safe
- Encryption and secure protocols used. No system is 100% secure.
12. Marketing Emails
- Double opt-in required. Unsubscribe anytime via email link or info@whirlwind-lures.com.
13. Contact Us
- Email: info@whirlwind-lures.com
14. Changes to This Policy
- Updates posted here with new effective date.
15. Kids’ Data
- Not for under-16s. We delete any such data found.
16. Data Protection Team
- Managed by our team; no formal DPO required under GDPR Art. 37.
