Privacy Policy
Last updated: 15 September 2026
1. Data controller
The controller responsible for personal-data processing through SubieTime.Shop is:
Legal name: SIA Replycan
Registration number: 40103853732
Legal address: Valdeķu iela 62 – 165, Rīga, LV-1058, Latvia
Email: info@subietime.com
Telephone: +371 29 888 820
Hereinafter referred to as “SubieTime”, “we”, “us” or “our”.
2. Scope
This Privacy Policy explains how SubieTime processes personal data when a person:
- visits or uses SubieTime.Shop;
- creates an account;
- places or receives an order;
- contacts customer support;
- submits a return, complaint or warranty claim;
- subscribes to marketing communications;
- participates in a promotion; or
- otherwise interacts with SubieTime.
3. Categories of personal data
Depending on the interaction, we may process:
- identification data, such as name and surname;
- contact data, such as email address, telephone number and delivery address;
- billing and transaction information;
- order history and account information;
- vehicle information, including VIN, registration data, model, production year, engine, mileage and modifications;
- communications, support requests, reviews and claim evidence;
- technical data, such as IP address, device, browser, identifiers, log data and cookie information;
- marketing preferences and consent records;
- fraud-prevention and security information; and
- information received from payment, delivery, authentication or analytics providers.
We do not ordinarily receive or store complete payment-card details when payments are processed by an independent payment provider.
4. Purposes and legal bases
We process personal data for the following purposes:
Contract performance
To:
- create and administer Customer accounts;
- accept, process and deliver orders;
- verify product and vehicle compatibility;
- collect and administer payments;
- provide order and delivery information;
- process returns, complaints and warranty requests; and
- provide customer support.
The legal basis is taking steps at the Customer’s request and performing the sales contract.
Legal obligations
To:
- issue and retain accounting documents;
- comply with tax, consumer-protection, product-safety, sanctions and other legal requirements;
- respond to lawful requests from public authorities; and
- demonstrate compliance with applicable law.
The legal basis is compliance with a legal obligation.
Legitimate interests
To:
- protect the website, Customers and SubieTime against fraud and misuse;
- establish, exercise or defend legal claims;
- improve stock management, service quality and website performance;
- maintain business records and security logs; and
- communicate with existing Customers about closely related products where permitted by law.
The legal basis is SubieTime’s legitimate interests, balanced against the individual’s rights and reasonable expectations.
Consent
Where required, we rely on consent for:
- email or electronic marketing;
- non-essential analytics or advertising cookies; and
- other optional processing specifically described when consent is requested.
Consent may be withdrawn at any time without affecting processing performed before withdrawal.
5. Vehicle identification numbers
A VIN may be requested to identify the correct vehicle specification and product compatibility.
A VIN can become personal data where it relates to an identifiable individual. We use it only for compatibility checking, order fulfilment, support, claims and related recordkeeping.
The Customer should provide vehicle-owner information only where authorised to do so.
6. Recipients and service providers
We may disclose relevant personal data to:
- ecommerce and website-hosting providers: Hostinger;
- payment providers: our card and bank payment processors;
- banks and accounting-service providers;
- delivery and logistics providers: Omniva and other carriers shown at checkout;
- email, customer-support and communication providers;
- analytics and advertising providers, subject to applicable consent;
- IT, cybersecurity and professional advisers;
- manufacturers and suppliers where necessary to check compatibility or administer a claim; and
- public authorities where disclosure is legally required.
Service providers receive only the information reasonably necessary for their function and must process it under applicable data-protection requirements.
SubieTime does not sell personal data.
7. International transfers
Some service providers may process personal data outside Latvia or the European Economic Area.
Where personal data is transferred outside the EEA, we use a lawful transfer mechanism where required, such as:
- an adequacy decision adopted by the European Commission;
- the European Commission’s standard contractual clauses; or
- another mechanism permitted by applicable data-protection law.
Information about relevant safeguards may be requested at info@subietime.com.
8. Retention
We retain personal data only for as long as necessary for the relevant purpose and legal obligations.
Unless a different period is required or justified:
- order, invoice and accounting information is retained for the period required by Latvian accounting and tax law;
- contract, return and complaint records may be retained for the applicable limitation period and while a dispute remains possible or active;
- account information is retained while the account is active and for a reasonable period afterward;
- compatibility enquiries and VIN information are retained with the related order or support record where necessary;
- marketing data is retained until consent is withdrawn, an objection is received or the data is no longer needed;
- security and technical logs are retained for 12 months; and
- rejected or incomplete checkout information is retained for 30 days, unless needed for fraud prevention or a legal claim.
Data may be retained longer where required by law, a public authority or an active legal dispute.
9. Cookies and similar technologies
SubieTime.Shop may use:
- strictly necessary cookies required for checkout, security and core website functions;
- preference cookies;
- analytics cookies; and
- advertising or social-media cookies.
Non-essential cookies are activated only after consent where applicable.
The cookie banner and Cookie Policy should identify each non-essential service, its provider, purpose, duration and whether data is transferred outside the EEA.
The user may change or withdraw cookie consent at any time through the cookie settings link in the website footer. Browser settings may also be used to restrict cookies, although blocking necessary cookies may prevent parts of the store from working.
10. Direct marketing
We send electronic marketing where the recipient has consented or where another lawful basis for marketing to an existing Customer is available.
Every marketing email includes an unsubscribe option. A person may also opt out by contacting info@subietime.com.
Service communications concerning an order, payment, delivery, safety issue or support request are not marketing and may still be sent where necessary.
11. Automated decision-making
SubieTime does not make decisions producing legal or similarly significant effects based solely on automated processing. Where fraud-prevention or payment providers use automated decision-making of their own, relevant information about that processing is provided by the applicable provider and, where required, at the point of collection.
12. Data-security measures
We apply reasonable technical and organisational measures designed to protect personal data against unauthorised access, loss, alteration or disclosure.
No internet transmission or storage system is completely secure. Customers are responsible for maintaining the confidentiality of their account credentials and notifying SubieTime of suspected unauthorised access.
13. Individual rights
Subject to the conditions and exceptions in applicable law, an individual may request:
- access to personal data;
- correction of inaccurate data;
- deletion of data;
- restriction of processing;
- data portability;
- objection to processing based on legitimate interests;
- withdrawal of consent; and
- information about applicable international-transfer safeguards.
Requests may be submitted to info@subietime.com. We may request information reasonably necessary to verify identity.
14. Complaints
Questions or complaints about personal-data processing should first be sent to info@subietime.com.
A person also has the right to lodge a complaint with the Latvian Data State Inspectorate:
Datu valsts inspekcija
Website: https://www.dvi.gov.lv
Email and current contact details are available on its website.
15. Children
SubieTime.Shop is not intended for children to make purchases independently. We do not knowingly collect children’s personal data for marketing without an appropriate legal basis or required parental authorisation.
16. Third-party websites and social media
The website may link to manufacturers, payment providers, carriers and social-media platforms. Those third parties process personal data under their own privacy policies. SubieTime is not responsible for independent third-party websites.
17. Changes to this Policy
We may update this Privacy Policy when our processing, service providers or legal obligations change.
Material changes will be communicated through the website or another appropriate method. The date at the beginning of the Policy identifies the current version.