Skip to content
Delivery across Latvia Mon–Fri 9:00–18:00
+371 20 000 000

Privacy Policy

Elvaro SIA (“we”, “us”, “our”)
Last updated: 2026-04-29

1. Data We Collect

When you use our website and services, we may collect:

  • Identity data: name, surname, company name, registration number, VAT number.
  • Contact data: email address, phone number, postal address.
  • Order data: purchase and rental history, booking dates, selected products, delivery address.
  • Payment data: payment instrument type, last 4 digits of card, expiry date. Full card details are not stored — processed by payment gateway Every Pay (pay.every-pay.eu).
  • Technical data: IP address, browser type (User-Agent), action timestamps, cookies.
  • Signing data: when signing a rental or subscription agreement — IP address, User-Agent, signing timestamp, OTP code hash (SHA-256), screen resolution, browser timezone, client hints.

2. Purposes of Processing

Purpose Legal basis
Processing orders and rentals Contract performance (GDPR Art. 6(1)(b))
OTP code delivery for agreement signing Contract performance
Order confirmation and status emails Contract performance
Generating and storing signed agreements (PDF) Legal obligation / contract performance
Tax accounting and pavadziņme issuance Legal obligation (GDPR Art. 6(1)(c))
VIP Club membership management Contract performance
Site improvement and analytics Legitimate interest / consent
Marketing communications Consent (GDPR Art. 6(1)(a))

3. Retention Periods

  • Order and rental data: 7 years (Latvian tax law requirements).
  • Signed agreement data (PDFs, device fingerprints): 10 years (civil limitation period).
  • VIP membership data: during active membership + 3 years after expiry.
  • Marketing data: until consent withdrawal.
  • Cookie data: see Cookie Policy.

4. Third-Party Transfers

Your data may be shared with:

  • Every Pay OÜ (pay.every-pay.eu) — payment processing. Only data required to authorise the payment is transferred.
  • MultiParcels / Noparcels (app.noparcels.com) — Elvaro Go parcel delivery. Name, address, phone are transferred.
  • Hosting provider — technical infrastructure.
  • Public authorities — upon lawful request (tax authorities, courts).

We do not sell your data or share it for direct marketing without your explicit consent.

5. Your Rights

Under GDPR you have the right to:

  • Access — obtain a copy of personal data we hold about you.
  • Rectification — request correction of inaccurate data.
  • Erasure (“right to be forgotten”) — where retention is not required by law.
  • Restriction — limit how we use your data in certain circumstances.
  • Portability — receive your data in a machine-readable format.
  • Objection — object to processing based on legitimate interest or for direct marketing.
  • Withdrawal of consent — at any time, without affecting the lawfulness of prior processing.

To exercise your rights: privacy@elvaro.lv
Supervisory authority: Data State Inspectorate of Latvia — dvi.gov.lv

6. Security

We apply technical and organisational measures to protect your data: HTTPS encryption, access controls, regular security reviews. Signed agreement PDFs are stored in a non-public server directory.

7. Cookies

We use cookies for site functionality, analytics, and marketing. Please see our Cookie Policy for full details. Manage your preferences via the consent banner on your first visit.

8. Contact

Email: privacy@elvaro.lv
Address: Elvaro SIA, Rīga, Latvia