Datenschutzerklärung

Last updated: August 26, 2026

Lauris Mīlbrets operates the milbrets.com online art store and website, including all related information, content, features, tools, products and services (the "Services").

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit or use milbrets.com, purchase products from us, or otherwise communicate with us.

The Services are powered by Shopify, which provides the e-commerce platform that enables us to offer our products and services to you.

Please read this Privacy Policy carefully. By using or accessing the Services, you acknowledge that you have read and understood this Privacy Policy.


1. Personal Information We Collect or Process

When we use the term "personal information", we mean information that identifies you or can reasonably be linked to you.

Depending on how you interact with milbrets.com, we may collect or process the following categories of personal information:

  • Contact information, including your name, email address, telephone number, billing address and shipping address.
  • Payment and transaction information, including payment method, transaction details, payment confirmation and information necessary to process your purchase. Payment card details are generally processed by Shopify and/or the relevant payment provider rather than stored directly by us.
  • Order information, including the products you purchase, order history, returns, refunds and related transaction information.
  • Communications, including information you provide when you contact us by email or through other available customer-service channels.
  • Account information, if you create a customer account, including account credentials, preferences and settings.
  • Device and technical information, including your IP address, browser type, device information, operating system, network information and other technical identifiers.
  • Usage information, including information about how you browse and interact with milbrets.com, including pages viewed, products viewed and shopping-cart activity.

We only seek to collect and process personal information that is relevant and necessary for the purposes described in this Privacy Policy.


2. Sources of Personal Information

We may collect personal information from the following sources:

  • Directly from you, when you place an order, create an account, contact us, subscribe to communications, or otherwise provide information to us.
  • Automatically through the Services, including through cookies and similar technologies when you visit or use milbrets.com.
  • From Shopify and other service providers, where they process information on our behalf in connection with operating the store.
  • From payment providers, fulfillment providers and shipping providers, where necessary to process and deliver your order.
  • From third-party services or platforms that you choose to use in connection with our Services.

3. How We Use Your Personal Information

Depending on how you interact with us, we may use your personal information for the following purposes:

Providing and Fulfilling Orders

We use your personal information to:

  • process and confirm your orders;
  • process payments;
  • provide customer support;
  • arrange production and fulfillment;
  • arrange shipping and delivery;
  • communicate with you regarding your order;
  • process returns, refunds and replacements; and
  • provide the products and services you have requested.

Operating and Improving Our Store

We may use personal information to:

  • operate and maintain milbrets.com;
  • improve our website and shopping experience;
  • understand how customers use our Services;
  • troubleshoot technical issues;
  • improve our products and services; and
  • maintain the security and functionality of our website.

Marketing and Advertising

Where permitted by applicable law and, where required, with your consent, we may use personal information for marketing and advertising purposes.

This may include sending promotional communications or showing advertisements for our products on our website or on third-party platforms.

You may unsubscribe from promotional email communications at any time by using the unsubscribe option provided in the relevant communication.

Security and Fraud Prevention

We may process personal information to:

  • protect our website and Services;
  • detect and prevent fraudulent or unauthorized activity;
  • protect our customers and business;
  • investigate security incidents; and
  • comply with applicable security requirements.

Legal and Regulatory Compliance

We may process personal information where necessary to:

  • comply with applicable laws and regulations;
  • maintain accounting and tax records;
  • respond to lawful requests from public authorities;
  • establish, exercise or defend legal claims; and
  • enforce our terms, policies and agreements.

4. Legal Bases for Processing Personal Information

Where the General Data Protection Regulation (GDPR) applies, we process personal information on one or more of the following legal bases:

  • Performance of a contract: where processing is necessary to process and fulfill your order or provide services you have requested.
  • Legal obligation: where processing is necessary for us to comply with applicable legal, accounting, tax or regulatory obligations.
  • Legitimate interests: where processing is necessary for purposes such as operating, securing and improving our business and Services, provided that our interests do not override your fundamental rights and freedoms.
  • Consent: where we rely on your consent, such as for certain marketing communications or cookies where consent is legally required.

Where processing is based on consent, you may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

GDPR requires organisations to have an appropriate legal basis for processing personal information.


5. Order Fulfillment and Third-Party Service Providers

To operate milbrets.com and fulfill your orders, we may share necessary personal information with trusted third-party service providers.

These may include:

  • Shopify;
  • payment processors;
  • print production and fulfillment providers;
  • shipping and delivery providers;
  • website and technology providers;
  • customer-support providers;
  • analytics providers; and
  • marketing and advertising service providers, where applicable.

When you purchase a canvas print, information necessary to produce and deliver your order may be shared with our print fulfillment provider, including your name, shipping address, contact details and relevant order information.

Our canvas prints are produced on demand and may be manufactured and shipped from a fulfillment facility located in or near the customer's destination country.

Third-party service providers receive only the information reasonably necessary to provide the relevant service.


6. Shopify

The Services are hosted by Shopify, which provides the e-commerce infrastructure used to operate milbrets.com.

Shopify may collect and process personal information about your use of the Services, including information necessary to operate, secure and improve its platform.

Information you submit through milbrets.com may therefore be transmitted to Shopify and processed by Shopify and other service providers involved in providing the Services.

Shopify may also process information in accordance with its own privacy policies and legal obligations.

You can learn more about Shopify's privacy practices through the Shopify Consumer Privacy Policy.


7. Cookies and Similar Technologies

milbrets.com and Shopify may use cookies and similar technologies to operate the website, remember preferences, maintain shopping-cart functionality, understand website usage, improve the customer experience and, where applicable, support marketing and advertising.

Depending on your location and applicable law, certain cookies or similar technologies may require your consent.

You may be able to manage cookies through your browser settings and through the privacy or cookie controls made available on the website.

Disabling certain cookies may affect the functionality of the website or shopping experience.


8. International Transfers

Some of our service providers may be located outside the country in which you reside, including outside the European Economic Area (EEA).

As a result, your personal information may be transferred to, stored or processed in countries outside the EEA.

Where personal information is transferred outside the EEA, we will rely on an applicable lawful transfer mechanism where required, such as an adequacy decision or appropriate contractual safeguards.


9. How We Disclose Personal Information

We may disclose personal information where necessary for the purposes described in this Privacy Policy.

This may include disclosure:

  • to Shopify and other technology providers;
  • to payment processors;
  • to print production and fulfillment providers;
  • to shipping and delivery providers;
  • to analytics and website service providers;
  • to marketing and advertising providers where applicable;
  • where you request or authorize us to disclose information;
  • where required by law or lawful government request;
  • to establish, exercise or defend legal claims; or
  • in connection with a business transfer, restructuring or similar transaction.

We do not sell your personal information as a business activity.


10. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected, including to:

  • provide our Services;
  • fulfill and document orders;
  • maintain business and accounting records;
  • comply with legal and tax obligations;
  • resolve disputes;
  • enforce agreements; and
  • protect our legitimate business interests.

Different types of information may therefore be retained for different periods.

Where personal information is no longer necessary and there is no legal reason to retain it, we will delete or anonymize it where reasonably practicable.

The GDPR's storage-limitation principle requires personal data to be retained only for an appropriate period related to the purpose for which it was collected.


11. Security

We take reasonable technical and organizational measures to protect personal information against unauthorized access, loss, misuse, alteration or disclosure.

However, no method of electronic transmission or storage is completely secure, and we cannot guarantee absolute security.


12. Your Privacy Rights

Depending on where you live and subject to applicable law, you may have certain rights regarding your personal information, including:

  • Right of access — to request access to personal information we hold about you.
  • Right to correction — to request correction of inaccurate or incomplete information.
  • Right to deletion — to request deletion of your personal information in certain circumstances.
  • Right to restriction — to request restriction of certain processing.
  • Right to object — to object to certain types of processing, including certain direct marketing.
  • Right to data portability — to receive certain personal information in a structured, commonly used and machine-readable format where applicable.
  • Right to withdraw consent — where processing is based on consent.

These rights are not absolute and may be subject to legal exceptions.

The GDPR requires privacy information to explain relevant rights and how individuals can exercise them.


13. Marketing Communications

If you receive promotional emails from us, you may unsubscribe at any time by using the unsubscribe link included in the relevant email.

Even if you opt out of marketing communications, we may continue to send essential non-promotional communications relating to your orders, transactions, account or customer-service requests.


14. Children's Data

milbrets.com is not intended for children.

We do not knowingly collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal information, please contact us using the information below.


15. Third-Party Websites and Links

milbrets.com may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of third-party websites.

If you follow a link to a third-party website, we recommend reviewing that website's privacy policy before providing personal information.


16. Complaints

If you have concerns about how we process your personal information, please contact us first so that we can try to resolve your concern.

You may also have the right to lodge a complaint with the data protection supervisory authority in your country.

For customers in Latvia, the relevant supervisory authority is the Data State Inspectorate (Datu valsts inspekcija).


17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, business practices, technology, legal requirements or regulatory obligations.

When we make changes, we will update the "Last updated" date at the beginning of this Privacy Policy.


18. Contact

If you have questions about this Privacy Policy or would like to exercise any applicable privacy rights, please contact:

Lauris Mīlbrets
Email: milbrets.art@gmail.com
Address: Tallinas iela 38-17, Riga, LV-1001, Latvia
Country: Latvia

For the purposes of applicable data protection laws, Lauris Mīlbrets is the data controller responsible for your personal information, except where a third-party service provider acts as an independent controller for its own processing activities.