Privacy policy

This is a translation of the Latvian text. In case of any discrepancy, the Latvian version prevails.

Last amended: 9 October 2026

1. General provisions

This Privacy Policy describes how "Sensora" SIA obtains, processes and stores the data of persons who visit the online shop kupidonsplus.lv, create an account or place orders (hereinafter "you").

The personal data controller is "Sensora" SIA, reg. No. 40203240423, VAT No. LV40203240423, legal address: Augusta Deglava iela 11, Rīga, LV-1009, Latvija.
For communication regarding personal data: e-mail info@kupidonsplus.lv, phone and WhatsApp +371 28 319 913, Telegram sensora_lv.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, hereinafter GDPR) and the laws and regulations of the Republic of Latvia.

2. What data we process and how we obtain them

We obtain data from you: when you place an order or create an account on the website, when you write to us by e-mail, WhatsApp or Telegram, or when you call. We also receive some data from other sources: from our bank (the payer's name, account, amount and payment purpose, if you pay by bank transfer, also if another person pays), from Maksekeskus AS (payment status, amount and payment method, if you pay via internet banking or by card), from ESTO LV AS (purchase status, amount and payment method, if you pay with ESTO) and from public registers (to verify the details of legal persons).

• Order data: name and surname, e-mail, phone, the selected Omniva parcel locker, billing address (street, city, postcode, country), order notes, ordered goods, amounts, invoices and payment status.
• Personal identity number: only if you provide it yourself for the invoice. It is not mandatory.
• For legal persons: company name, registration number, VAT number, legal address and contact person details.
• Account data: name, surname, e-mail, phone, address, password (we store it only in irreversibly encrypted form) and purchase history, also from the previous sexx.lv shop, if the account has been transferred.
• Communication data: the content of your messages and our replies.
• Payment data: when you pay by bank transfer, we see the information stated in the payment (the payer's name, account, amount and purpose). When you pay via internet banking, by card or with ESTO, we see the payment or purchase status, amount and payment method. We do not see or store payment card data.
• Technical data: session cookie, language choice, and the IP address, browser information and request time stored in server logs.

To place an order, it is mandatory to provide name and surname, e-mail, phone, Omniva parcel locker, address and city, and for a legal person also the name, registration number and legal address. These data are needed for the conclusion and performance of the contract; without them we cannot accept the order. Personal identity number, VAT number, postcode, country and notes are not mandatory.

To search for the nearest Omniva parcel locker, the browser may ask for permission to determine your location. The coordinates are used only on your device to sort the parcel lockers, and we do not receive or store them.

3. For what purposes and on what legal basis

• Order fulfilment: placing the order, issuing the invoice, receiving payment, delivery, communication about the order, handling of the right of withdrawal and complaints. Basis: conclusion and performance of the contract (GDPR Article 6(1)(b)).
• Answers to questions: communication by e-mail, phone, WhatsApp or Telegram about goods, orders and complaints. Basis: steps taken at your request prior to entering into the contract or performance of the contract (GDPR Article 6(1)(b)), and in other cases our legitimate interests in answering the questions received (GDPR Article 6(1)(f)).
• Accounting and taxes: storage of invoices and transaction documents. Basis: legal obligation (GDPR Article 6(1)(c), Accounting Law).
• Account maintenance: login, automatic filling in of data, purchase history. Basis: performance of the contract (GDPR Article 6(1)(b)).
• Website security and protection of our legal interests: server logs, fraud prevention, bringing or defending legal claims, verification of legal persons' data in public registers. Basis: our legitimate interests (GDPR Article 6(1)(f)).
• Marketing messages: we currently do not send marketing messages. If we do so in the future, it will be only with your separate consent (GDPR Article 6(1)(a)), which is not linked to placing an order.

4. Consent and its withdrawal

By ticking the checkbox at checkout, you confirm that you have read the Terms of Use and this Privacy Policy. We process order data for the conclusion and performance of the contract (Section 3), not on the basis of consent.

If any data are processed on the basis of your consent, you can withdraw your consent at any time: write to info@kupidonsplus.lv with the subject "Withdrawal of consent" or use the unsubscribe link in the relevant e-mail. We will stop the processing within 5 working days at the latest. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal and does not affect processing carried out on another legal basis, for example, the storage of invoices.

5. To whom data are transferred

• Payments via internet banking and by card. Payment processing is provided by the payment platform makecommerce.lv, therefore our company transfers the personal data necessary for the execution of payments to the owner of the platform, Maksekeskus AS.
• ESTO. If you choose to pay with ESTO (bank card, ESTO 3, "Pay later"), we transfer your first name, surname, e-mail, phone number, the order number and the amount to ESTO LV AS (reg. No. 40103050993, Skanstes iela 50, Riga). We do not transfer the names of the products. ESTO is an independent controller: it identifies you, assesses your creditworthiness and concludes the agreement under its own privacy terms (esto.eu). Card payments are processed by Stripe.
• Bank transfers. When you pay by bank transfer on the basis of an invoice, the payment is processed by your bank and our bank AS "Swedbank".
• Delivery: Omniva, only to the extent necessary for delivery (name, phone, e-mail, parcel locker).
• IT service providers that process data on our behalf: server hosting (OVH, EU), website security and delivery network (Cloudflare), e-mail sending (Amazon Web Services) and e-mail service.
• Accounting service provider that processes invoices on our behalf.
• Communication platforms. If you write to us on WhatsApp (Meta) or Telegram, these platforms process your communication data in accordance with their own privacy terms as independent controllers, including outside the EU/EEA. If you do not want this, write to us at info@kupidonsplus.lv.
• State authorities, only in the cases and to the extent provided for by laws and regulations.

We do not sell data and do not use them for profiling or automated decision-making.

6. Transfer of data outside the EU/EEA

Our server is located in the European Union. Some service providers (Cloudflare, Amazon Web Services, Google, e-mail service) may also access data outside the EU/EEA. In that case, data are transferred only with the safeguards provided for in Chapter V of the GDPR, for example, the European Commission's standard contractual clauses or the EU-U.S. Data Privacy Framework. You can obtain information about the specific safeguards and a copy of them by writing to info@kupidonsplus.lv.

7. Retention periods

• Invoices and accounting documents, including annulled invoices: the period laid down in the Accounting Law (5 years).
• Order data: as long as they are needed for fulfilling the order and for handling the right of withdrawal and complaints, and as long as claims may be brought regarding the order.
• Unpaid order requests for which no invoice was issued: up to 3 years.
• Account data: until the account is deleted. You can delete the account by contacting us.
• Communication data: as long as they are needed for handling the question, order or complaint, and as long as claims may be brought in connection with the relevant order or complaint. Correspondence not related to an order: up to 3 years after the last message.
• Server logs: up to 15 days.

When the basis for storage ends, the data are deleted or anonymised.

8. Your rights

You have the right to:

• access your data and receive a copy of them;
• correct incorrect or incomplete data;
• request the erasure of data, except where the law requires the data to be stored;
• restrict processing;
• receive your data in a portable format;
• withdraw consent at any time (see Section 4);
• lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).

Right to object. You may at any time object to the processing of data based on our legitimate interests (GDPR Article 21). We will then stop the processing, unless we demonstrate compelling legitimate grounds or that the data are necessary for bringing or defending legal claims.

You can send a request to info@kupidonsplus.lv or by post to the legal address. We will reply within one month. To avoid disclosing data to another person, we may ask you to confirm your identity.

9. Cookies and external resources

We use only the session cookie necessary for the website to function (login, cart, language choice). We do not use analytics or advertising cookies.

To count page views, every page loads an invisible visit counter from the server of an external statistics service. It uses no cookies, but it sees your IP address and browser information. Basis: our legitimate interest in knowing how many people visit the website (GDPR Article 6(1)(f)).

The website's design libraries and fonts are loaded from the jsDelivr, cdnjs and Google Fonts networks, some product images from the servers of product suppliers, the logos of the price comparison websites salidzini.lv and kurpirkt.lv from the servers of these websites, the parcel locker map, if you open it, from OpenStreetMap, and on the payment page the bank logos from the server of Maksekeskus AS (makecommerce.lv). These services see your IP address and browser information in order to be able to send files to your browser, and may store their own technical cookies.

10. Security

Passwords are stored only in irreversibly encrypted form, the connection to the website is protected by HTTPS, and only authorised persons have access to data. Account activation and recovery of a forgotten password take place only via a link that we send to your e-mail. After logging in, you can change your password in your account by entering your current password.

11. Age restriction

The shop is intended only for persons aged 18 and over. We do not knowingly collect data of minors.

12. Changes

We may supplement or amend the Privacy Policy. The new version enters into force when it is published on the website https://kupidonsplus.lv, and its date is stated at the beginning of this page.