Privacy policy

Effective from: 1 October 2026

1. Controller

The controller of your personal data is AS “SISTĒMU INOVĀCIJAS” (business unit "síbiotech"), Reg. No. 40003946311, registered address: Mazcenu aleja 6A, Jaunmārupe, Mārupes nov., LV-2166, Latvia, email: support@sibiotech.com, phone: +371 20 221 199 (hereinafter "we", "síbiotech").

This policy applies to the online store sibiotech.eu and to purchases, communication and newsletter subscriptions made through it.

2. What data we process

Order data: first and last name, email, phone number, delivery address, products ordered, order history.
Payment data: payments are processed by our payment service provider (Shopify Payments); we do not receive or store card details.
Communication data: messages you send via the contact form or email, and our replies.
Newsletter: your email address, if you have subscribed to our newsletter.
Technical data: IP address, browser and device information, pages visited, cookie identifiers (see the Cookie Policy).

3. Purposes and legal basis

Purpose	Legal basis
Fulfilling orders, delivery, invoices, handling conformity claims and the right of withdrawal	Performance of a contract (GDPR Art. 6(1)(b))
Meeting accounting and tax requirements	Legal obligation (Art. 6(1)(c))
Answering your questions	Our legitimate interests (Art. 6(1)(f))
Sending news and offers	Your consent (Art. 6(1)(a)); you can withdraw it at any time
Analysing and improving the store, preventing fraud	Legitimate interests; for analytics cookies, your consent

4. Who we share data with

We share data only to the extent necessary to provide the service:

Shopify International Ltd.: online store platform and data hosting;
payment service providers: payment processing;
delivery service providers (courier and parcel locker operators): delivering orders;
email marketing and analytics providers: only with your consent to the newsletter or the relevant cookies;
our accounting service provider and public authorities, where required by law.

Some service providers may process data outside the EU/EEA; in such cases the transfer is based on the European Commission's standard contractual clauses or an adequacy decision.

5. How long we keep data

Order and invoice data: 5 years after the transaction (accounting requirements).
Communication data: up to 2 years after the last contact.
Newsletter subscription: until you withdraw your consent.
Technical data and cookies: as stated in the Cookie Policy.

6. Your rights

You have the right to access your data, have it corrected or erased, restrict or object to its processing, receive it in a portable format and withdraw your consent at any time. Send requests to support@sibiotech.com. We will reply within one month.

If you believe your data is being processed incorrectly, you have the right to lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

7. Data security

The store runs over an encrypted (HTTPS) connection; only the employees and service providers who need access to data have it. Payment card data is processed in a PCI DSS certified environment at the payment service provider.