This privacy policy describes what personal data we process when you use the website bullsfitness.com, shop in the online shop or contact us, and what your rights are. We process personal data in accordance with the General Data Protection Regulation (GDPR) and the laws of the Republic of Latvia.
This is a translation; in case of any discrepancy, the Latvian version prevails.
1. Controller
- Artis Buls, self-employed (sole trader), taxpayer registration No. 29059113114.
- Address: Blaumaņa iela 5, Rīga.
- E-mail for data protection questions: info@bullsfitness.com, phone: +371 249 000 67.
2. What data we process and why
- Orders: name, surname, e-mail, phone, the chosen Omniva parcel locker or delivery address, order note, ordered goods and amounts. Purpose — to accept, process and deliver the order, communicate about it and handle withdrawals or complaints. Legal basis — performance of a contract (GDPR Article 6(1)(b)) and compliance with legal obligations such as accounting (Article 6(1)(c)).
- Payments: payments are processed by Paysera. We only receive information about the payment status and amount — we do not see or store payment card or online banking details.
- Contact form and e-mail: name, e-mail, phone (if given), subject and content of the message. Purpose — to answer your question. Legal basis — your request and our legitimate interest in replying (Article 6(1)(b) and (f)). Messages sent through the form are not stored on the website — they are forwarded to our e-mail.
- Technical data: when you visit the site, the hosting provider briefly processes technical data (such as IP address and browser type) for security and operation. We do not use analytics or advertising tools.
3. Who we share data with
We do not sell data or use it for advertising. We share data only with the service providers needed to run the shop:
- Paysera LT, UAB (Lithuania) — payment processing; for payment data, Paysera is an independent controller under its own privacy policy.
- Omniva — parcel delivery (name, phone, e-mail, parcel locker or address).
- Supabase — the database where orders are stored (servers in the European Union).
- Vercel Inc. — website hosting (servers in Frankfurt, Germany; the company is registered in the USA, and transfers are made under the EU–US Data Privacy Framework or standard contractual clauses).
- Resend — sending order confirmations and contact form e-mails (sent from the EU region; the company is registered in the USA, under standard contractual clauses).
- Accountant and public authorities — only to the extent required by law (for example, tax records).
4. How long we keep data
- Order data — 5 years after the order, because the Accounting Law requires it to be kept as accounting source documents; longer only if needed to handle a complaint or dispute.
- Messages in e-mail — as long as needed for the correspondence, but no longer than 2 years after the last contact.
5. Your rights
You have the right to access your data, ask for it to be corrected or erased, restrict processing, object to processing based on legitimate interests, and receive your data in a portable format. Data that must be kept by law (such as accounting documents) cannot be erased before the retention period ends.
To exercise your rights, write to info@bullsfitness.com. We will reply within one month. If you believe your data is being processed unlawfully, you can lodge a complaint with the Data State Inspectorate (www.dvi.gov.lv).
6. Cookies and similar technologies
The website uses only strictly necessary cookies and browser storage without which it cannot work. No analytics, advertising or social media tracking cookies are used, so no cookie consent is requested.
- Shopping cart — kept in your browser storage (localStorage) on your device and not sent to us until you place an order.
- Language choice (NEXT_LOCALE) — remembers the selected site language.
- Security cookies that the hosting provider Vercel may set to protect the site against automated attacks.
- Administrator session cookies — only for shop administrators after signing in.
- On the payment page (Paysera), Paysera's cookies apply under Paysera's terms.
7. Changes
If the way we process data changes, we will update this privacy policy. The current version is always available on this page.
Last updated: 15 October 2026.