Privacy & cookie policy
1. Data controller
Your data controller is E-COMMERCE BROKER SIA, 40203308336, Skanstes iela 25, Rīga, LV-1013. Data requests: onpost.offlv@gmail.com.
2. Data and purposes
We process sender and recipient names, phone numbers, emails, addresses, order details, courier notes, company details and status history. These support request assessment, contract performance, delivery, communication and complaint handling. Do not include unnecessary sensitive information in notes.
3. Basis and recipients
Processing is based on entering into and performing a contract, applicable legal duties and legitimate interests in securing the service. Authorised staff and couriers access only the data they need. The order database is stored on a server managed by ONPOST. Appropriate transfer safeguards apply if providers process data outside the EEA.
4. Retention
Test requests are kept for up to 7 days; service requests for up to 180 days after their last status change. Expired records are removed at the system’s next data-processing operation. Accounting documents, if issued, are retained separately under applicable law. Relevant evidence may be retained until a legal dispute is resolved.
5. Cookies and this device
The necessary onpost_session cookie grants access to your requests for 30 days after your last visit; it is HttpOnly and secured over HTTPS. Sidebar_state keeps the navigation preference for 7 days. Language and voluntarily saved profile details remain in local storage until removed. No advertising or analytics cookies are used. Opening the map connects your browser to OpenStreetMap and sends technical connection data.
6. Your rights
You may request access, correction, erasure, restriction and portability, and object where applicable. Contact onpost.offlv@gmail.com; identity verification may be required. You may complain to Latvia’s Data State Inspectorate (dvi.gov.lv).
7. Security
Orders are stored in the server database; customer access is restricted by a random session identifier. Public tracking returns only the number, status and timestamps, never addresses or contacts. Clearing cookies may remove access to earlier orders on your device; contact the controller for data requests.