privacy policy
Last updated 14 November 2026
This explains what personal data we collect when you use this website, why, and what you can do about it.
Who is responsible
GSPOT
Email: support@gspot.world
What we collect and why
| Data | Why | Legal basis |
|---|---|---|
| Name, email, shipping address, phone (from PayPal at checkout), items ordered, amount paid | To deliver your order, handle returns and keep accounting records | Contract; legal obligation (accounting) |
| Email you give us in a sign-up form or the scratch card | To send news, drops and your discount code | Your consent, which you can withdraw any time |
| Anonymous page events (product viewed, added to cart, checkout opened) with country | To see which products people like | Legitimate interest. No cookies, no names, no IP addresses stored |
| Emails you send us | To answer you | Legitimate interest; contract |
Cookies and local storage
We don't use advertising or tracking cookies. Your browser's local storage keeps your cart and whether you've seen the scratch card, so they're still there next time. That data stays on your device. PayPal may set its own cookies when you pay; see PayPal's privacy statement.
Who we share it with
- PayPal processes payments, including card payments. We never see or store your card details.
- Cloudflare hosts this website and stores order and sign-up records.
- Production and shipping partners (such as Printful for the Dice Cap, and the suppliers of our picked items) receive your name, shipping address and phone to make and deliver your order, together with their carriers.
- Authorities, only when the law requires it.
Some of these companies are outside the EU, such as in the US or China. Where that happens, the transfer is protected by the safeguards the GDPR requires, such as the EU's standard contractual clauses or an adequacy decision.
How long we keep it
Order records: as long as Latvian accounting law requires (generally 5 years). Marketing emails: until you unsubscribe. Anonymous page events: up to 2 years.
Your rights
You can ask to see, correct, delete or download your data, object to how we use it, or withdraw consent for marketing at any time. Email support@gspot.world. We reply within one month. You can also complain to the Latvian Data State Inspectorate (dvi.gov.lv) or the data protection authority in your country.