Privacy Policy

The data controller is:

• SIA "BRO Finance"
• Reg. No.: 40203110767
• Address: Parka iela 1, Piņķi, Babītes pag., Mārupes nov., LV-2107, Latvija
• Email: info@golfi.lv
• Phone: +371 28 898 888

Depending on the features you use, we may process the following personal data:

• Contact details: first and last name, email, phone number, delivery address
• Account data: email, password hash, language preferences
• Order data: purchase history, invoices, payment status (no full card numbers)
• Technical data: IP address, browser type, cookies, usage statistics
• Correspondence with customer support

We process personal data only for the stated purposes and only for as long as necessary:

• Contract performance (GDPR 6.1.b) — order placement, delivery, payment, invoices, customer support
• Legal obligation (GDPR 6.1.c) — accounting, tax requirements, handling of complaints
• Legitimate interest (GDPR 6.1.f) — fraud prevention, security, service improvement, internal analytics
• Consent (GDPR 6.1.a) — marketing emails, analytics cookies, personalised offers — you can withdraw consent at any time

We share personal data only with trusted processors required to deliver the service:

• AS EveryPay (EE) — card payment processing (Estonia, within the EU)
• Omniva, DPD — delivery of orders across Latvia and the EU
• Resend Inc. (US) — delivery of transactional emails
• Supabase / Lovable (EU) — site hosting and database within the EU
• Google LLC — analytics (Google Analytics), ad measurement — only with your consent

Data is never sold to third parties. Any transfer outside the EU is made only to safe jurisdictions using EU Standard Contractual Clauses.

We keep data only as long as necessary for the purpose it was collected for:

• Orders and accounting documents — 5 years (Latvian Law “On Accounting”)
• Account data — until the account is deleted, no longer than 3 years after last activity
• Marketing list — until unsubscribed

As a data subject you have the following rights:

• access your data and receive a copy
• rectify inaccurate or outdated data
• erase your data (“right to be forgotten”)
• restrict or object to processing
• receive your data in a structured, machine-readable format (portability)
• withdraw a previously given consent

To exercise these rights, contact us at: info@golfi.lv.

If you believe our processing violates the law, you have the right to lodge a complaint with the Data State Inspectorate: www.dvi.gov.lv

The site uses cookies in three categories. You can manage consent at any time via the “Cookies” link in the site footer.

• Necessary — required for the site to work (authentication, cart, language). No consent required.
• Analytics — anonymous usage statistics (Google Analytics). Only with consent.
• Marketing — retargeting (Meta Pixel, Google Ads). Only with consent.

Data is transmitted over encrypted HTTPS (TLS 1.2+). Passwords are stored as one-way hashes. Database access is restricted and logged. We perform regular security audits and vulnerability scans.

For any questions about the processing of personal data, please write to info@golfi.lv.