Privacy policy

Last updated: October 12, 2026

1. Controller

The controller of your personal data is Artūrs Mollers, trading as PetrolDrive, Inči, Jaunalūksnes pagasts, Alūksnes novads, LV-4350, Latvia, registration no. 25069112678, email info@petroldrive.com.

We are a one-person business and have not appointed a data protection officer (not required). For any privacy question, email info@petroldrive.com.

2. What data we collect

- Order data: name, shipping/billing address, email, phone, items ordered, order history.

- Personalisation data: text, names, numbers or other details you ask us to put on a personalised item (e.g. a licence plate frame).

- Payment data: handled by the payment provider; we only see limited details (e.g. payment status, card type, last 4 digits).

- Custom design data: photos and descriptions of your car you send us, and our correspondence.

- Communications: emails and messages with us.

- Abandoned checkout data: email and cart contents if you start but don't finish a checkout.

- Newsletter: email address and consent record.

- Reviews: name, review text, photos and rating you submit (via Judge.me).

- Technical & usage data: IP address, device/browser info, pages viewed, cookies (see section 8).

3. Why we use it and our legal basis

PurposeLegal basis (GDPR art. 6(1))
Processing and delivering orders, custom designs and personalised items, customer service, returns and warranty claims(b) performance of a contract
Accounting, tax records, consumer-law obligations(c) legal obligation
Fraud prevention, website security, defending legal claims(f) legitimate interests
A reminder email about an unfinished checkout(f) legitimate interests — you can opt out via the link in the email
Newsletter and marketing emails(a) consent — withdraw anytime via the unsubscribe link
Review requests and publishing reviews(f) legitimate interests (request; you can opt out in each email) / (a) consent (publishing your review)
Analytics and advertising cookies, Meta Pixel(a) consent via cookie banner
Strictly necessary cookies (cart, checkout, security)(f) legitimate interests / exempt from consent under ePrivacy rules

Providing order data is necessary to conclude the contract; without it we cannot fulfil your order. We do not make decisions based solely on automated processing that significantly affect you.

4. Who we share it with

- Shopify (store platform, hosting, checkout; Shopify International Ltd., Ireland, and its affiliates).

- Payment providers (Shopify Payments / Stripe, PayPal or others shown at checkout).

- Carriers (e.g. FedEx, postal and express services) — name, address, phone, email for delivery and customs.

- Email/newsletter service (Shopify Email).

- Judge.me (review collection and display).

- Meta Platforms (Meta Pixel, ads measurement — only with consent; Meta and we are joint controllers for the collection and transmission of the data; see Meta's privacy policy at facebook.com/privacy/policy).

- Accountant, tax authorities, courts or authorities where legally required.

We never sell your personal data.

5. International transfers

Some providers (e.g. Shopify, Meta, FedEx, Judge.me) may process data outside the EEA, including in the USA or Canada. Such transfers rely on adequacy decisions (e.g. EU–US Data Privacy Framework, Canada) or Standard Contractual Clauses. For deliveries outside the EU, delivery data necessarily goes to the destination country.

6. How long we keep data

- Invoices and accounting source documents: at least 5 years (Latvian Accounting Law, art. 28).

- Order and customer-service records: for the 2-year guarantee period plus the limitation period for claims, then deleted or anonymised.

- Custom design photos and personalisation details: until the order is completed and the withdrawal/guarantee period ends, unless you allow us to keep them.

- Abandoned checkout data: deleted or anonymised after 30 days.

- Newsletter: until you unsubscribe (plus consent record as proof).

- Reviews: while displayed or until you ask us to remove them.

- Cookies: per the duration shown in the cookie banner, up to 13 months for consent-based cookies.

7. Your rights

You have the right to access, rectify, erase, restrict, port your data, to object to processing based on legitimate interests (and at any time to direct marketing), and to withdraw consent at any time without affecting earlier processing. Email us; we reply within one month. You may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv, or with the authority in your own country.

8. Cookies

We use strictly necessary cookies to make the shop work (cart, checkout, login, security). Analytics, preference and marketing cookies (Shopify analytics, Meta Pixel) are set only after you agree in the cookie banner. You can accept or reject them equally easily, and change your choice at any time via the cookie banner or your browser settings. See Shopify's cookie list: shopify.com/legal/cookies.

9. Changes

We may update this policy; the date at the top shows the latest version.