Privacy policy

Last updated: 9 November 2026.

This privacy policy explains how the online store bigOne (domains bigOne* and bigOnestore*, list in the Contact section) processes personal data in accordance with the General Data Protection Regulation (GDPR) and the laws of the Republic of Latvia.

1. Data controller

SIA „B I&G"
Registration number: 50203347301
VAT number: LV50203347301
Registered address: Miera iela 90-4, Rīga, LV-1013, Latvia
Phone: +371 25170027
E-mail: info@bigone.lv

No data protection officer has been appointed; for questions about data processing, write to info@bigone.lv.

2. What data we process

• First name and surname
• Delivery address and contact details (phone, e-mail)
• Order and payment information (payment card details are processed by the payment platform; they are not passed on to us and are not stored by us)
• Purchase, guarantee and correspondence history
• For legal persons — company name, registration number and VAT number
• Technical data and cookie data about the use of the website

3. Purposes, legal basis and retention periods

• Order fulfilment and delivery. Legal basis — performance of a contract (GDPR Article 6(1)(b)). Retention — 5 years after the order is fulfilled.
• Accounting and invoices. Legal basis — legal obligation (Article 6(1)(c), Accounting Law). Retention — 5 years.
• Handling guarantee claims and complaints. Legal basis — legal obligation and performance of a contract. Retention — the guarantee period and at least 2 years after it ends.
• Customer service and correspondence. Legal basis — legitimate interests (Article 6(1)(f)) in providing support and proving the content of communications. Retention — 2 years after the last contact.
• Newsletters and marketing. Legal basis — consent (Article 6(1)(a)). Retention — until consent is withdrawn.
• Website security and fraud prevention. Legal basis — legitimate interests. Retention — up to 12 months.
• Analytics and advertising. Legal basis — consent given in the cookie banner. Retention — according to the lifetime of the respective cookie.

4. Who we share data with

Data is received only by partners who need it to provide the service, and only to the extent necessary:

• Shopify Inc. — the online store platform and payment initiation; acts as a processor. The store's data storage region is set to the European Union.
• Maksekeskus AS — the payment platform MakeCommerce, to which we pass the data needed to execute the payment.
• Swedbank AS and other credit institutions — for settlements.
• Delivery companies — Omniva, DPD, Venipak, Unisend, Latvijas Pasts and others — for delivering the shipment.
• Swotzy — for preparing shipping labels and handing shipments over to carriers.
• Hostinger — for the e-mail service.
• Google and Meta — for analytics and advertising, only with your consent given in the cookie banner.
• Accounting and IT maintenance service providers — for providing their services.

Contracts have been concluded with all processors that provide for data protection in line with GDPR requirements. We may also disclose data to public authorities where required by law.

5. Transfers outside the European Economic Area

The store platform is provided by Shopify Inc., registered in Canada. The store's data storage region is the European Union, but in certain cases — for example, when providing technical support — data may be accessed from countries outside the EEA. Such transfers are based on the European Commission's standard contractual clauses or an adequacy decision.

6. Cookies

We use cookies to keep the website working, save your shopping cart, analyse website visits and personalise content and ads.

Necessary cookies are always used. Others — personalisation, marketing and analytics cookies — are used only with your consent, which you give in the website's cookie banner. You can change or withdraw your consent at any time by opening the cookie settings on the website. You can also delete cookies in your browser settings.

7. Your rights

• To access your data and receive a copy of it
• To request correction or erasure of your data
• To request restriction of processing
• To object to processing based on legitimate interests
• To receive your data in a structured format and transfer it to another controller (data portability)
• To withdraw your consent at any time; withdrawal does not affect the lawfulness of processing carried out before it

Send your request to info@bigone.lv. We will reply within one month.

If you believe your data is being processed improperly, you have the right to lodge a complaint with the Data State Inspectorate (Datu valsts inspekcija) — Elijas iela 17, Rīga, LV-1050, e-mail pasts@dvi.gov.lv, website www.dvi.gov.lv. If you live in another EU country, you may also lodge a complaint with the data protection authority of your country (see the Country annex of the Terms of Use).

8. Newsletters

If you subscribe to our newsletter, we use your e-mail address to send you information about news, promotions and offers. The subscription is confirmed by a separate confirmation e-mail. You can unsubscribe at any time using the link at the bottom of the e-mail or by writing to info@bigone.lv.

9. Automated decision-making

We do not carry out automated decision-making or profiling that would have legal effects for you.

10. Data security

Data is stored on secure servers, and we implement technical and organisational measures to protect information from unauthorised access, disclosure or loss. bigOne does not store or process payment card details.

11. Changes to this policy

We may update this policy. The current version is always available on this page, and its date is shown at the top. We will inform you of significant changes on the website or by e-mail.

12. Contact us

SIA „B I&G" — bigOne customer support
Miera iela 90-4, Rīga, LV-1013
info@bigone.lv · +371 25170027