Privacy Policy
Last updated: 6 September 2026
This policy explains how personal data is handled when you use the Cepumbums website. It reflects the website as it is currently built.
1. Who we are / Data controller
Cepumbums is the brand presented on this website. The legal data controller responsible for personal data processed through the website has not yet been confirmed in the project configuration. Its legal identity, registration number and legal address must be added before publication.
2. What personal data we collect
When you use the contact form, we collect the name, email address and message you provide. The form also contains a technical anti-spam field; submissions that complete it are not sent as inquiries.
3. Contact form
The contact form sends your inquiry to the website’s server-side contact endpoint. It validates the submitted information, sends the inquiry to the configured business recipient and attempts to send a confirmation email to the address you supplied.
4. Why we use personal data
We use contact-form information to receive your inquiry, respond to you and handle the communication you requested. The current website does not use contact-form information for newsletters, advertising, profiling or marketing campaigns.
5. Legal basis
The lawful basis for contact-form processing has not been confirmed in the project configuration. It requires an owner and legal review before publication. It should reflect the actual purpose and relationship for each inquiry; submitting a contact form does not by itself determine the applicable GDPR Article 6 basis.
6. Service providers / recipients
Resend is used as the email delivery service for contact-form messages and confirmation emails. The website also loads fonts from Google Fonts and, on product pages that show store locations, map tiles from OpenStreetMap through Leaflet. These services may receive the technical requests needed to provide their services. The hosting/infrastructure provider is not identified in this codebase and must be confirmed before publication.
7. Data retention
No contact-form retention period is configured in this project. A retention period and deletion process must be set by the owner or legal adviser before publication.
8. Cookies and similar technologies
The website uses browser localStorage for language preference and cookie-consent preference. See the Cookie Policy for the current storage list and how consent works.
9. Your data protection rights
Subject to applicable law, you may have rights to request access to, rectification or erasure of your personal data; restriction of processing; objection to processing; and data portability where applicable. Where processing is based on consent, you may withdraw that consent at any time.
10. How to exercise your rights
To exercise applicable rights, contact the data controller using the privacy contact details that must be completed below. We may need to verify your identity before responding.
11. Complaints / supervisory authority
If you have concerns about the handling of your personal data, you may contact the Latvian Data State Inspectorate (Datu valsts inspekcija), the relevant supervisory authority in Latvia.
12. Changes to this policy
We may update this policy when the website or its data-processing practices change. The date at the top shows when it was last updated.
13. Contact information
The website currently lists the following general Cepumbums contact email. A dedicated privacy contact and the legal controller details must be configured before publication.