Privacy policy

Last updated: October 12, 2026

This Privacy Policy explains how SIA ZOLNAR ("ZOLNAR", "we", "us") collects, uses and shares your personal data when you visit zolnar.com, buy from us on our website or on Etsy, or otherwise contact us. It applies to all customers, wherever they live.

1. Who we are

The data controller is SIA ZOLNAR, registration number 50203043561, Latgales iela 322B, 3rd floor, Rīga, LV-1063, Latvia. Email: info@zolnar.com.

2. What data we collect

  • Contact and delivery details: name, shipping and billing address, email address, phone number.
  • Order details: items ordered, sizes and custom measurements you provide, prices, order history, returns, exchanges and cancellations.
  • Payment details: payment method, transaction and payment confirmation details. We do not see or store your full card number; card payments are processed by our payment providers.
  • Account details (if you create an account on our website): login details, preferences and settings.
  • Communications: messages you send us by email, Etsy messages, chat, social media or our contact form.
  • Device and usage data: IP address, browser and device information, pages visited and how you use the website, collected through cookies and similar technologies (see section 6).

3. Where we get your data

  • Directly from you, when you place an order, create an account, subscribe to our newsletter or contact us.
  • Automatically, when you use our website.
  • From Etsy, when you buy from our Etsy shop (see section 8).
  • From our service providers, for example payment providers (payment status) and delivery companies (delivery status).

4. Why we use your data and on what legal basis

  • To process and deliver your order, handle payments, returns, exchanges and cancellations, and send you order and delivery notifications — performance of a contract (Art. 6(1)(b) GDPR).
  • To keep accounting and tax records and meet other legal obligations — legal obligation (Art. 6(1)(c) GDPR).
  • To answer your questions and provide customer support — performance of a contract or our legitimate interest in responding to you (Art. 6(1)(b) and (f) GDPR).
  • To keep our website and payments secure, prevent fraud and enforce our rights, including in disputes — legitimate interest (Art. 6(1)(f) GDPR).
  • To understand how our website is used and improve it — your consent where cookies are required, otherwise our legitimate interest (Art. 6(1)(a) and (f) GDPR).
  • To send you marketing emails and show you personalised advertising — your consent (Art. 6(1)(a) GDPR), except as described in section 5.

5. Marketing

We send newsletters and other marketing messages only if you have agreed to receive them. If you have bought from us, we may email you about similar products of our own unless you object; you can object when giving us your email address and in every message we send. You can unsubscribe at any time using the link in our emails or by contacting us. We will still send you messages about your orders.

6. Cookies

Our website uses cookies that are necessary for it to work (for example, the shopping cart and checkout). Analytics and advertising cookies are used only if you accept them in the cookie banner. You can change your choice at any time through the cookie settings on our website or in your browser.

7. Who we share your data with

We share your data only as needed for the purposes above, with:

  • Shopify, which hosts our online store and processes data on our behalf;
  • payment providers, such as Shopify Payments, PayPal, Stripe and Klarna;
  • shipping services and delivery companies, such as Swotzy, Latvijas Pasts and courier services (for example FedEx), which receive your name, address, phone number and email to deliver your parcel; for shipments outside the EU, customs authorities also receive the information on the customs declaration;
  • Etsy, for orders placed in our Etsy shop;
  • our accountants and professional advisers;
  • analytics and advertising providers, such as Google, Meta (Facebook, Instagram) and Pinterest, only if you have given consent;
  • public authorities, where required by law.

We do not sell your personal data.

8. Shopify and Etsy

Our website runs on Shopify. Shopify processes personal data on our behalf to provide the store. For some features (for example, fraud prevention and Shop Pay), Shopify acts as an independent controller. You can learn more in the Shopify Consumer Privacy Policy and exercise your rights through the Shopify Privacy Portal.

When you buy from our Etsy shop, Etsy is an independent controller of the data you give to Etsy (including your Etsy account and payment details), as described in the Etsy Privacy Policy. Etsy shares with us your name, shipping address, email address, order details and the messages you send us. We use this data to make and deliver your order, provide support and keep accounting records, as described in this Privacy Policy.

9. International transfers

Some of our service providers (for example Shopify, Etsy, PayPal, Stripe, Google, Meta and Pinterest) may process your data outside the European Economic Area. In such cases, the transfer is based on an adequacy decision of the European Commission (such as the EU–US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses.

10. How long we keep your data

  • Order, invoice and payment data are kept for at least as long as required by accounting and tax law (generally 5 to 10 years) and may remain in our accounting records for longer.
  • Data stored on the platforms we use, such as Shopify and Etsy, is retained in accordance with those platforms' policies.
  • Account data is kept while your account exists.
  • Marketing data is kept until you unsubscribe or withdraw your consent.
  • Correspondence is kept as long as needed to deal with your request and any related claims.

11. Security

We take reasonable technical and organisational measures to protect your data. However, no method of transmission or storage is completely secure, so please do not send sensitive information to us through unsecured channels.

12. Your rights

Under the GDPR you have the right to:

  • access your personal data;
  • have inaccurate data corrected;
  • have your data deleted, unless we must keep it by law;
  • restrict processing;
  • receive your data in a portable format;
  • object to processing based on our legitimate interests, and to object at any time to direct marketing;
  • withdraw your consent at any time, without affecting the lawfulness of processing before the withdrawal.

To exercise your rights, contact us at info@zolnar.com. We will reply within one month. We may need to verify your identity before acting on your request. Exercising your rights is free of charge.

13. Complaints

If you believe we have handled your data unlawfully, please contact us first. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv) or with the data protection authority in the country where you live or work.

14. Children

Our services are not intended for children under 16, and we do not knowingly collect their personal data. If you believe a child has given us personal data, please contact us and we will delete it.

15. Links to other websites

Our website may link to other websites and social media platforms. We are not responsible for their privacy practices. Please read their privacy policies.

16. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version is always available on this page, with the date of the last update at the top.

17. Contact

For any questions about this Privacy Policy or your personal data, contact us at info@zolnar.com or write to SIA ZOLNAR, Latgales iela 322B, 3rd floor, Rīga, LV-1063, Latvia.