Privacy policy

Privacy Policy (B2B)

Last updated: 7 September 2026

SIA Bearden Capital (hereinafter the "Controller", "we", "our") operates this B2B portal/website and related services (hereinafter the "Services"). This website is built on the Shopify platform, which provides the technical infrastructure for the Services.

This Privacy Policy explains how we collect, use, store and disclose the personal data of representatives, employees and contact persons of legal entities and sole traders (hereinafter the "Client", "you") when registering, using the B2B portal or placing orders.

This Policy is developed in strict compliance with Regulation (EU) 2016/679 (General Data Protection Regulation / GDPR) and the Personal Data Processing Law of the Republic of Latvia (Fizisko personu datu apstrādes likums).

1. Data Controller

– Name: SIA Bearden Capital

– Registration number: 40203772595

– Registered address: 1 Palasta str., Riga, Latvia, LV-1050

– Email: info@bearden-capital.com

2. Categories of Personal Data Collected

We collect personal data of B2B client representatives only to the extent necessary for business interaction:

– Contact and registration data: Name, surname, job title, business email, business phone number, name and details of the represented legal entity, registered and actual address.

– B2B account data: Username, password, company profile, authorisation history.

– Financial and transactional data: Company bank details, commercial invoice numbers (Proforma Invoice / Invoice), order history, reconciliation acts, payment details, authorisation information for document signing.

– Business communications: Content of requests, commercial correspondence, service requests and agreements.

– Technical and usage data: IP address, browser type, unique device identifiers, cookies and interaction data with the B2B portal.

3. Purposes and Legal Bases of Processing (GDPR)

We process your data on the following legal bases (in accordance with Art. 6 GDPR):

1. Performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR):

– Registration and management of the company's B2B account;

– Processing, verification, delivery and servicing of B2B orders and supply contracts;

– Invoicing and payment processing.

2. Compliance with legal obligations (Art. 6(1)(c) GDPR):

– Accounting and tax record-keeping in accordance with Latvian law;

– Customer due diligence (KYC / AML) and prevention of money laundering and terrorist financing;

– Compliance with international and national sanctions (EU/Latvia).

3. Legitimate interests (Art. 6(1)(f) GDPR):

– Maintaining and developing B2B relationships;

– Protecting the website from fraud, DDoS attacks and unauthorised access;

– Improving the B2B portal and services.

4. Consent (Art. 6(1)(a) GDPR):

– Sending direct B2B marketing communications (you may withdraw consent at any time).

4. Sources of Data

– Directly from you: When completing the B2B registration form, requesting a quote, placing an order or in business correspondence.

– From your employer/principal: If your company designates you as a contact person, signatory or account administrator.

– Automatically: Through cookies and analytics tools when using the website.

– From public registers: From the Latvian Register of Enterprises (Uzņēmumu reģistrs), Lursoft/Firmas.lv or state registers to verify the legal capacity of the company and the authority of its representatives.

5. Disclosure and Transfer of Data

In the course of B2B activities, we may share data with the following categories of recipients:

– Shopify Inc.: Our website is hosted on the Shopify platform, which processes data on our behalf as a Data Processor to ensure the operation of the website.

– Service providers: Logistics and transport companies (CMR/SMGS), IT and cloud storage providers, payment systems and banks (e.g. AS BluOr Bank).

– Professional advisers: Auditors, lawyers, accountants and insurance companies.

– Public authorities: The State Revenue Service of Latvia (VID), law enforcement and regulators upon lawful request.

6. International Data Transfers

Where your personal data is transferred outside the European Economic Area (EEA) (e.g. to Shopify services in Canada or the United States):

– The transfer is made to countries providing an adequate level of protection pursuant to a European Commission adequacy decision; or

– On the basis of EU Standard Contractual Clauses (SCCs), which guarantee the security of data processing.

7. Data Retention Periods

We retain personal data only for as long as necessary for the purposes described in this Policy:

– B2B account data: For the duration of the commercial relationship with your company.

– Accounting and contractual documents: Retained for 5-10 years in accordance with the Latvian Law on Accounting (Likums "Par grāmatvedību").

– AML/KYC data: Up to 5 years after the end of the business relationship (in accordance with statutory requirements).

– Marketing data: Until you withdraw your consent or unsubscribe.

8. Your Rights under GDPR

As a data subject in the EU/Latvia, you have the following rights:

– Right of access (Art. 15 GDPR): Request a copy of your personal data.

– Right to rectification (Art. 16 GDPR): Correct inaccurate or outdated data.

– Right to erasure / "Right to be forgotten" (Art. 17 GDPR): Request deletion of data (unless we are legally required to retain it under Latvian law).

– Right to restriction of processing (Art. 18 GDPR): Restrict processing in certain circumstances.

– Right to data portability (Art. 20 GDPR): Receive your data in a structured, machine-readable format.

– Right to object (Art. 21 GDPR): Object to processing based on "legitimate interests" or to direct B2B marketing.

– Right to withdraw consent: Opt out of marketing communications at any time.

To exercise any of these rights, please contact us at: info@bearden-capital.com

9. Lodging a Complaint (Supervisory Authority in Latvia)

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with the supervisory authority in the Republic of Latvia:

– Data State Inspectorate of Latvia (Datu valsts inspekcija, DVI)

– Address: Elijas iela 17, Rīga, LV-1050, Latvia

– Email: pasts@dvi.gov.lv

– Website: www.dvi.gov.lv

10. Data Security

We implement technical and organisational security measures to protect your data against accidental loss, unauthorised access, alteration or disclosure. You are responsible for keeping your B2B account credentials (username and password) confidential.

11. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy as Latvian or EU legislation or our B2B practices change. The current version is always published on this page with an updated date at the top of the document.

12. Contact