Privacy Policy
Last updated: 4 September 2026
This Privacy Policy explains how Rolands Stonka, a self-employed individual registered for economic activity in Latvia and trading under the brand Rolands Leather Works (“we”, “us”, “our”), collects, uses and protects personal data when you visit RLWorks.art, place an order, contact us or otherwise use our services.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
1. Data Controller
The data controller is:
Rolands Stonka
Trading as Rolands Leather Works
Address: Āpšu iela 3, Riga, LV-1004, Latvia
Email: info@rlworks.art
Website: RLWorks.art
For any questions regarding your personal data or this Privacy Policy, please contact us at info@rlworks.art.
2. Personal Data We May Collect
Depending on how you interact with our website, we may collect and process the following information:
name and surname;
email address;
telephone number;
billing address;
delivery address;
country and postal information;
order details;
products purchased;
information relating to customisation or special requests;
purchase and transaction information;
payment status;
correspondence with us;
customer service requests;
delivery and tracking information;
IP address;
browser and device information;
website usage information;
cookie identifiers and consent preferences;
analytics information.
We do not intentionally collect more personal information than is reasonably necessary for operating our business and providing our services.
3. Information Required to Place an Order
Certain information is necessary for us to enter into and fulfil a contract with you.
For example, we normally need your name, contact details, delivery address and sufficient order information to manufacture, process and deliver your order.
If you do not provide information required for the performance of the contract, we may be unable to accept or fulfil your order.
Optional information will be identified as such where appropriate.
4. How We Use Personal Data Processing and fulfilling orders
We process your personal data to:
accept and manage orders;
manufacture or prepare your product;
process payments;
communicate with you about your order;
organise shipping;
provide tracking information;
handle returns, complaints, repairs or warranty matters.
The legal basis for this processing is the performance of a contract or taking steps at your request before entering into a contract.
Customer service
If you contact us, we may process your contact details and the contents of your correspondence in order to answer questions, resolve problems or provide support.
Depending on the circumstances, this processing is based on the performance of our contract with you or our legitimate interest in providing customer service and managing our business.
Legal, tax and accounting obligations
We may retain and process transaction, order, payment and other information where this is required to comply with Latvian or European Union law, including accounting, tax and consumer protection requirements.
The legal basis is compliance with a legal obligation.
Fraud prevention and website security
We may process technical, transaction and device information where reasonably necessary to:
protect our website;
prevent fraudulent transactions;
detect misuse;
investigate security incidents;
protect our legal rights.
This processing is based on our legitimate interests in operating a secure online store and preventing fraud.
5. Payment Processing
Online payments are processed through Stripe.
When you make a payment, certain personal and transaction information is transmitted directly to Stripe so that the payment can be authorised and processed.
Depending on the payment method, this may include:
your name;
billing information;
payment amount;
payment method information;
device and transaction information.
We do not intentionally receive or store your complete payment-card number or card security code on our own systems.
Stripe may process some personal data as our service provider and may also process certain data independently for purposes such as fraud prevention, regulatory compliance and payment-network requirements. Stripe describes these different roles in its current Data Processing Agreement.
6. Website Hosting and Online Store
RLWorks.art uses Hostinger services for website hosting and online-store infrastructure.
Information submitted through the website may therefore be processed using Hostinger's systems where necessary to operate the website and online store.
This may include information relating to:
orders;
customer details;
website forms;
technical logs;
website operation and security.
7. Google Analytics
We use, or intend to use, Google Analytics to understand how visitors use RLWorks.art and to improve the website.
Depending on your consent settings, Google Analytics may process information such as:
pages visited;
approximate location;
browser and device information;
interactions with the website;
referring website or traffic source;
visit duration and similar usage information.
Where consent is required, analytics storage and similar non-essential tracking technologies will only be used in accordance with your cookie choices.
Google's current Consent Mode allows website owners to communicate whether users have granted or denied consent for analytics and advertising-related storage.
Visitors from the European Economic Area must also have their relevant consent choices passed to Google for applicable measurement and advertising functionality.
8. Cookies and Similar Technologies
RLWorks.art may use cookies and similar technologies.
Necessary cookies
Some cookies may be necessary for the website to function correctly, for example for:
shopping-cart functionality;
checkout;
security;
fraud prevention;
remembering essential website settings.
These technologies may be used where permitted without optional consent because they are required to provide the service requested by the visitor.
Analytics cookies
Analytics cookies are used to understand how visitors interact with the website.
Where legally required, these will only be activated after you provide consent.
Marketing cookies
We do not need to activate advertising or behavioural marketing technologies merely because they are mentioned in this Privacy Policy.
If we introduce services such as advertising pixels or remarketing technologies in the future, they will be configured in accordance with applicable consent requirements and this Privacy Policy will be updated where necessary.
You may withdraw or change your cookie consent through the cookie preferences available on RLWorks.art.
9. Shipping Providers
To deliver an order, we may provide necessary personal information to the shipping or postal company responsible for your delivery.
This may include:
your name;
delivery address;
email address;
telephone number;
parcel and tracking information.
We only provide information reasonably necessary to arrange and complete delivery.
The specific shipping provider may vary depending on the destination, service selected and availability.
10. Other Service Providers
We may use trusted third parties where reasonably necessary to operate our business.
These may include providers of:
website hosting;
email services;
payment processing;
analytics;
shipping;
accounting;
IT and security services;
professional or legal advice.
Such providers only receive information relevant to the service they perform.
Where a service provider processes personal data on our behalf, appropriate contractual and data-protection requirements are applied where required by law.
11. International Data Transfers
Some technology providers may process information in, or make information accessible from, countries outside Latvia or the European Economic Area.
Where GDPR requires additional safeguards for such a transfer, we rely on an appropriate lawful mechanism, which may include:
an adequacy decision;
Standard Contractual Clauses approved by the European Commission;
another transfer mechanism permitted under applicable data protection law.
For example, Stripe's current data-processing arrangements include mechanisms for applicable international transfers, including Standard Contractual Clauses.
12. Marketing Emails
We will not add you to a marketing mailing list merely because you purchased a product.
If we introduce a newsletter or promotional email service in the future, marketing communications will be sent where we have an appropriate legal basis, including consent where required.
You will be able to unsubscribe from marketing communications at any time.
Unsubscribing from marketing emails will not prevent us from sending necessary transactional communications relating to an order you have placed.
13. Future Advertising and Marketing Services
We may introduce additional services in the future, such as advertising platforms, conversion measurement or social-media marketing tools.
This could include technologies provided by platforms such as Meta, Google or other advertising providers.
Their inclusion in this clause does not mean that these technologies are currently active on RLWorks.art.
Before activating additional technology that materially changes how personal data is processed, we will update our privacy and cookie information where necessary and obtain any consent required by applicable law.
14. How Long We Keep Personal Data
We do not keep personal data indefinitely without a reason.
The retention period depends on the purpose of processing.
Order, payment, invoice and accounting information is retained for the period required under applicable Latvian accounting, tax and other legal requirements.
Information concerning orders, complaints, repairs, returns or disputes may also be retained for an appropriate period where necessary to establish, exercise or defend legal claims.
Customer correspondence is normally retained only for as long as reasonably necessary to resolve the matter and protect legitimate business or legal interests.
Analytics information is retained according to the settings configured for the relevant analytics service.
Where information is no longer necessary and there is no legal reason to retain it, it will be deleted, anonymised or otherwise securely disposed of where reasonably practicable.
15. Data Security
We take reasonable technical and organisational measures designed to protect personal data against:
unauthorised access;
accidental loss;
alteration;
disclosure;
destruction;
misuse.
We use professional service providers for functions such as hosting and payment processing rather than intentionally storing sensitive payment-card information ourselves.
However, no internet transmission or electronic storage system can guarantee absolute security.
16. Your GDPR Rights
Depending on the circumstances and applicable law, you may have the right to:
request confirmation whether we process your personal data;
access your personal data;
obtain a copy of your personal data;
correct inaccurate or incomplete personal data;
request deletion of personal data;
request restriction of processing;
object to certain processing;
receive eligible data in a portable format;
withdraw consent where processing is based on consent;
lodge a complaint with a supervisory authority.
Latvia's Data State Inspectorate describes these rights, including access, rectification, erasure, restriction and other GDPR rights.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
To exercise your rights, contact:
We may need to verify your identity before responding to a request in order to avoid disclosing personal information to an unauthorised person.
17. Right to Complain
If you have concerns about the way we process your personal data, please contact us first at:
You also have the right to lodge a complaint with the Latvian supervisory authority:
Datu valsts inspekcija / Data State Inspectorate
Elijas iela 17
Rīga, LV-1050
Latvia
Email: pasts@dvi.gov.lv
Telephone: +371 67223131
These are the authority's currently published contact details.
18. Automated Decision-Making
Rolands Leather Works does not itself use your personal data to make solely automated decisions that produce legal effects or similarly significant effects concerning you.
Payment and fraud-prevention service providers may use automated systems in accordance with their own legal obligations, privacy policies and service terms.
19. Children's Privacy
RLWorks.art is an online store intended for persons capable of entering into lawful purchase transactions.
We do not knowingly seek to collect children's personal data for marketing purposes.
If we become aware that personal data has been collected from a child in circumstances where parental or guardian authorisation is legally required, we will take appropriate steps in accordance with applicable law.
20. Links to Third-Party Websites
RLWorks.art may contain links to websites or services operated by third parties.
We are not responsible for the privacy practices of independent third-party websites. You should review the privacy policy of the relevant provider when using an external service.
21. Changes to This Privacy Policy
We may update this Privacy Policy if:
our website changes;
we add new services;
our technology providers change;
our data-processing activities change;
applicable legal requirements change.
The current version will be published on RLWorks.art.
The date shown at the top of this Privacy Policy indicates when it was last updated.
22. Contact
For privacy questions, requests or complaints, contact:
Rolands Leather Works
Rolands Stonka
Āpšu iela 3
Riga, LV-1004, Latvia
info@rlworks.art
Rolands Leather Works
Handmade leather backpacks. Built for decades, not seasons.
Contact
info@rlworks.art
© Rolands Leather Works. All rights reserved.