Privacy Policy

Last updated: 7 October 2026

Who is responsible for your data

SIA "Online Tool Box", Reg. No. 40203563113, Apuzes iela 13-4, Rīga, LV-1046, Latvia, is the controller of your personal data. For any privacy question or request, write to info@onlinetoolbox.eu or call +371 29470958.

We have not appointed a data protection officer, because the law does not require one for our business.

What we collect and why

Purpose	Data	Legal basis (GDPR)	How long we keep it
Your customer account	name, e-mail, password (stored only in encrypted form), addresses, phone number	contract, Art. 6(1)(b)	until you delete your account; order data is kept as below
Orders, delivery and payment	products ordered, prices, delivery address, phone, e-mail, payment status	contract and legal obligation (accounting), Art. 6(1)(b) and (c)	as long as Latvian accounting and tax law requires (currently at least 5 years)
Customer service, returns and claims	your messages and the information you send us	contract and legitimate interest in handling claims, Art. 6(1)(b) and (f)	as long as needed to handle the matter and possible legal claims
Newsletter ("Get Updates")	e-mail address	consent, Art. 6(1)(a)	until you unsubscribe
Product reviews	your name and review	consent, Art. 6(1)(a)	until you or we remove the review
Website security	IP address, browser data, server logs	legitimate interest in security, Art. 6(1)(f)	for a short time, unless needed to investigate an incident

We do not see or store your full card details: payments are processed by Stripe. You need to give us the data marked as required at checkout; without it we cannot accept or deliver your order.

Who receives your data

our suppliers in Estonia and, for products shipped from Spain, in Spain, which pack and ship your order on our behalf;
delivery companies: Venipak, DPD and the couriers our Spanish partner uses;
Stripe, which processes payments. Stripe also acts as an independent controller for fraud prevention and its own legal obligations; see Stripe's privacy policy;
payment providers you choose at checkout, such as PayPal or Klarna, which act as independent controllers;
providers of hosting, e-mail and other IT services, which process data on our behalf;
our accountant, and authorities when the law requires it.

We do not sell your personal data.

Transfers outside the EU

Some service providers, such as Stripe, may process data outside the European Economic Area, for example in the United States. Such transfers are protected by the EU–US Data Privacy Framework or by the European Commission's standard contractual clauses. You can ask us for a copy of these safeguards.

Cookies

We only use cookies that the shop needs to work: to keep you signed in and to remember your cart and language. On the payment page, Stripe sets cookies to prevent fraud. We do not use analytics or advertising cookies; if we add them, we will ask for your consent first.

The Salidzini.lv and Kurpirkt.lv logos at the bottom of our pages are loaded from those websites, so they receive your IP address.

Your rights

You have the right to:

access your data and get a copy;
correct inaccurate data;
have your data deleted, unless we must keep it by law;
restrict or object to processing, and object at any time to direct marketing;
receive your data in a portable format;
withdraw your consent at any time, without affecting earlier processing.

To use these rights, write to info@onlinetoolbox.eu. We reply within one month.

You can also complain to the data protection authority in your country or to the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050: www.dvi.gov.lv

Automated decisions

We do not make decisions about you based only on automated processing. Stripe uses automated checks to detect payment fraud; if your payment is blocked, please contact us.

Security

We use encrypted connections (HTTPS) and give access to personal data only to people who need it for their work.

Changes

We may update this policy. The current version is always on this page.