Privacy Policy

This website is operated by SIA JIKO Ent, registered in the Republic of Latvia.

Registered address: Latvia
Registration number: 50203328921
Contact email: hello@jikoent.com

We collect the following categories of personal data:

• Identity data: Name, email address (provided during registration or B2B enquiry)
• Transaction data: Order details, product quantities, purchase amounts, VAT numbers
• Payment data: Processed exclusively by Stripe. We do not store card numbers or payment instrument details.
• Technical data: IP address, browser type, referring URL, session identifiers, cookies
• Marketing data: UTM parameters, referral codes (for affiliate attribution)
• Communication data: Messages sent via the B2B wholesale enquiry form

We process your personal data on the following legal bases under GDPR Article 6:

• Contract performance (Art. 6(1)(b)): Processing necessary to fulfill your order and deliver purchased products
• Legal obligation (Art. 6(1)(c)): Issuing VAT invoices and complying with EU tax law (including EU OSS VAT obligations)
• Legitimate interests (Art. 6(1)(f)): Fraud prevention, website security, and business analytics
• Consent (Art. 6(1)(a)): Where you have explicitly given consent (e.g., marketing cookies)

• Processing and fulfilling retail and wholesale orders
• Generating legally required VAT invoices
• Responding to wholesale quote requests
• Sending transactional emails (order confirmations, invoices)
• Preventing fraud and maintaining platform security
• Complying with Latvian and EU accounting and tax law
• Tracking affiliate referrals and calculating commissions (where applicable)

• Order and invoice records: Retained for 10 years as required by Latvian accounting law
• Account data: Retained for the duration of the account plus 2 years after last activity
• B2B enquiry messages: Retained for 3 years
• Session and cookie data: Retained for up to 30 days

We use the following types of cookies:

• Essential cookies: Required for checkout session management and authentication. Cannot be disabled.
• Functional cookies: Remember referral attribution codes and cart state across sessions.
• Analytics cookies: Used with your consent to understand how visitors interact with the site.

You can withdraw cookie consent at any time by clearing your browser cookies or using our consent banner.

We share data with the following trusted third parties as data processors:

• Stripe, Inc. — Payment processing. Stripe Privacy Policy
• VPS / Hosting provider — Server infrastructure within the EU

We do not sell your personal data to any third party.

Under GDPR, you have the following rights:

• Right of access (Art. 15): Request a copy of the personal data we hold about you
• Right to rectification (Art. 16): Correct inaccurate personal data
• Right to erasure (Art. 17): Request deletion of your data where no legal obligation to retain it exists
• Right to restrict processing (Art. 18): Request limitation of how we use your data
• Right to data portability (Art. 20): Receive your data in a machine-readable format
• Right to object (Art. 21): Object to processing based on legitimate interests
• Right to withdraw consent (Art. 7(3)): Withdraw consent at any time without affecting prior lawful processing

To exercise any of these rights, please contact us at hello@jikoent.com. We will respond within 30 days. You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu Valsts Inspekcija).

We implement appropriate technical and organisational measures to protect your personal data, including:

• TLS/HTTPS encryption for all data in transit
• AES-256-GCM encryption for sensitive fields at rest (e.g., payment destination data)
• Role-based access control limiting data access to authorised personnel only
• Regular security reviews and dependency audits

We may update this Privacy Policy from time to time. Any material changes will be notified via email or a prominent notice on our website. Continued use of the platform after changes constitutes acceptance of the updated policy.