SIA Gramata2000 ("we", "us", or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, process, and safeguard your personal information when you visit our website gramata2000.com and purchase our products.
We act as the Data Controller in accordance with the EU General Data Protection Regulation (GDPR) (Regulation (EU) 2016/679).

2. Data We Collect

To process your orders and provide our services, we may collect the following data:
* Identity Data: First name, last name.
* Contact Data: Delivery address, billing address, email address, telephone number.
* Transaction Data: Details about payments to and from you, and details of products you have purchased from us (we do not store your credit card details; these are processed securely by our payment gateway providers).
* Technical Data: IP address, browser type, and operating system used to access the Website.

3. Purpose of Data Processing

We process your personal data based on the following legal grounds:
* To execute the contract (processing and delivering your order).
* To comply with a legal obligation (accounting, tax reporting in Latvia, and anti-money laundering regulations).
* Based on our legitimate interests (improving website performance, customer support).

4. Data Retention

We will only retain your personal data for as long as necessary to fulfill the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements under Latvian law (typically up to 5-7 years for financial records)

5. Data Disclosures and International Transfers

Your personal data is shared only with trusted third parties necessary for fulfilling your order:
* Delivery and postal services (to ship your books within the EU).
* Payment service providers and licensed financial institutions (to process your secure payments).
* Public authorities (such as the State Revenue Service of Latvia - VID) when strictly required by law.
We process and store your personal data exclusively within the European Economic Area (EEA).

6. Your Rights Under GDPR

Under the GDPR, you have the following rights regarding your data:
* The right to access your personal data.
* The right to rectification (correction) of inaccurate data.
* The right to erasure ("the right to be forgotten").
* The right to restrict or object to the processing of your data.
* The right to data portability.
To exercise any of these rights, please contact us at book@gramata2000.com.

7. Changes to This Policy

We reserve the right to update this Privacy Policy at any time. Any changes will be posted on this page with an updated revision date.

TERMS AND CONDITIONS