Privacy policy

Effective from 22 September 2026.

1. Controller

The controller of your personal data is SIA EVENTS SOLUTIONS, reg. No. 40103886945, registered address: Ziepniekkalna iela 64/1-15, Riga, LV-1076, Latvia; e-mail info@mindfit.lv, phone +371 20202985 (we or MINDFIT). This policy explains how we process data in the mindfit.lv online shop and when providing consultations.

2. What data we collect

Identity and contact details — first and last name, e-mail address, phone number, delivery address.
Order data — the goods or services bought, amounts, order history, chosen delivery method, order number.
Payment data — payments are processed by a licensed payment service provider (MakeCommerce / Maksekeskus AS). We receive only the confirmation of payment and its amount; we never receive or store full payment-card details.
Booking data — the type of consultation, the chosen time and any notes you add.
Customer account data — if you create an account: e-mail, password (stored encrypted), profile details and order history.
Correspondence — messages sent through the contact form or by e-mail, and our replies.
Technical data — IP address, browser and device type, pages visited and time of visit, cookie identifiers.

3. Why and on what basis we process data

Performance of a contract — accepting your order, payment, delivery, booking consultations, issuing gift cards, handling withdrawals and returns, communicating about your order.
Legal obligation — accounting and tax requirements (invoices, payment records), consumer-protection requirements.
Legitimate interests — site security and protection against fraud and bots, visit statistics, defending our rights in a dispute.
Consent — sending newsletters or marketing messages (only if you have agreed; consent can be withdrawn at any time).

4. Who receives your data

We share data only as far as necessary: with courier and postal providers (for delivery), the payment service provider (for processing payment), our hosting and IT provider (SiteLab, sitelab.lv, which processes data on our behalf within the European Union), our accounting provider, and public authorities where the law requires it. We do not sell data or pass it to third parties for marketing.

5. How long we keep data

Order and payment records — 5 years after the transaction (Latvian Accounting Law).
Customer account — while the account is active; on request we delete it, keeping only the records the law requires.
Contact-form messages — up to 2 years after the correspondence ends.
Technical data and cookies — see section 7.

6. Your rights and how to manage your data

You have the right to access your data, have it corrected or erased, restrict its processing, object to processing, receive it in a portable format and withdraw consent at any time. To exercise these rights write to info@mindfit.lv from the e-mail address you used for your purchase — we reply within 30 days. If you have a customer account you can edit your contact details under My account. If you believe your rights have been infringed you may lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

7. Cookies

The site uses strictly necessary cookies without which the shop cannot work: a session cookie that keeps your cart and language choice, the customer-account sign-in cookie and protection against automated form submissions. These cookies are deleted when you close the browser or sign out. For visit statistics we use anonymised page-view data. Should we add marketing tools or third-party analytics in the future, we will ask for your consent before enabling them. You can delete or block cookies in your browser settings.

8. Security

Data transfer on the site is encrypted (HTTPS). Payment-card details are entered only in the payment provider's secure, PCI DSS-compliant environment. Only the staff and service providers who need access to data have it.

9. Changes

We may update this policy; the current version is always available on this page together with its effective date.