IronQuad

ATV Parts and Accessories

Privacy Policy

Policy

Privacy Policy

Last updated: 27.05.2026.

Controller

This privacy policy explains how SIA "Ironquad" processes personal data when you use our website, place an order, contact us, use a customer account, or request help with ATV part fitment.

For personal data questions, you can contact us using the email, phone number, or legal address shown on this page.

Types and Sources of Personal Data

We may process identifiers and contact details such as name, email, phone number, delivery and billing address, company details, order information, payment status, correspondence, account data, IP address, device information, and cookie information.

We usually receive data from you when you fill in a form, create an account, place an order, contact us, or use the website. In some cases, we may receive data from payment, delivery, IT, or accounting service providers.

Purposes and Legal Bases

We process data to create and fulfil orders, prepare invoices, arrange delivery, manage customer accounts, answer questions, help verify part fitment, maintain website security, meet accounting obligations, and protect our legal interests.

The legal basis may be contract performance, legal obligation, our legitimate interests, such as customer support, security and dispute handling, or your consent where consent is required.

Specific Processing Purposes

For order and delivery processing, we use buyer contact details, address, cart and order contents, payment status, and delivery information.

For customer support and fitment advice, we use your contact details, ATV model, year, part name, correspondence, and other information you provide to resolve the request.

For website operation and security, we use technical information such as IP address, browser or device information, cookies, login data, and error logs.

Recipients and Processors

Data may be received by service providers that help operate the website, process payments, provide delivery, accounting, email, IT security, and customer support. We disclose data to public authorities where required by law.

If data is transferred outside the European Economic Area, we use appropriate safeguards where such transfer applies to a specific service.

Retention

We keep data for as long as needed for the relevant purpose, contract performance, dispute handling, and accounting or other legal obligations.

Where an exact period cannot be set in advance, retention is determined by the need for the relevant purpose, legal obligations, and limitation periods for possible claims.

Your Rights

You have the right to access your data, request correction, deletion, restriction, object to processing, request data portability, and withdraw consent where processing is based on consent.

To help us handle your request faster, please state which right you want to exercise, which data or period the request relates to, and how we can contact you. We respond without undue delay, usually no later than one month after receiving the request.

In some cases, we may not fulfil a request fully, for example if we cannot identify you, the request is unclear, it is excessive, or we have a legal obligation to keep certain data.

Complaints

If you have concerns about personal data processing, we encourage you to contact us first so we can review the situation and respond.

You also have the right to lodge a complaint with the Latvian Data State Inspectorate: Elijas iela 17, Riga, LV-1050, email pasts@dvi.gov.lv, website www.dvi.gov.lv.

Automated Decisions, Children, and Security

We do not carry out automated decision-making or profiling that produces legal effects concerning you or similarly significantly affects you. If such processing is introduced in the future, we will provide additional information before it starts.

Our store is not directed at children. If we become aware that personal data has been submitted without an appropriate basis or parent/guardian involvement, we may delete it or restrict processing.

We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, disclosure, or unauthorised alteration.