Privacy & Cookie Policy

Last updated: 22.09.2026

SIA “Lotos Pharma” respects your privacy and is committed to protecting your personal data.

This Privacy & Cookie Policy explains how we collect, use and protect your personal data when you visit our website, make a purchase, create an account, subscribe to our newsletter or otherwise interact with FITODROGA.

1. Data Controller

The controller of your personal data is:

SIA “Lotos Pharma”

Registration No. 40103638962

Plieņciema iela 16, Mārupe, Mārupes novads, LV-2167, Latvia

Email: info@fitodroga.com

We have not appointed a Data Protection Officer. For any privacy question, please write to the email address above.

2. What Personal Data We Collect

Depending on how you use our website, we may collect and process information such as:

your name and surname;
email address;
telephone number;
billing and delivery address;
order and purchase information;
account information if you create a customer account;
information you provide when contacting us;
newsletter subscription information;
technical information about your device and use of the website (for example IP address, browser type, pages visited and the website or campaign that brought you to us), where applicable.

We only collect personal data that is necessary for the relevant purpose.

3. How We Use Your Personal Data and on What Legal Basis

Purpose	Legal basis (GDPR)
Process and fulfil your orders, arrange delivery, process payments and communicate with you about your order	Performance of a contract (Art. 6(1)(b))
Create and manage your customer account	Performance of a contract (Art. 6(1)(b))
Respond to your questions and requests	Our legitimate interest in answering enquiries, or steps prior to a contract (Art. 6(1)(f) / 6(1)(b))
Comply with accounting, tax and other legal obligations	Legal obligation (Art. 6(1)(c))
Keep the website secure and prevent fraud and abuse	Legitimate interest (Art. 6(1)(f))
Send newsletters, offers and other marketing communications, including abandoned cart emails	Your consent (Art. 6(1)(a)) [or, for existing customers and similar products, the rules on soft opt-in – confirm with your lawyer]
Analytics and measuring the performance of our marketing (non-essential cookies and pixels)	Your consent (Art. 6(1)(a))

Where processing is based on your consent, you can withdraw it at any time (see section 12).

4. Payments

Payments in the FITODROGA online store are processed using Montonio. Available payment methods may include bank payments, payment cards, Apple Pay and Google Pay, depending on the options available at checkout.

Information necessary to process your payment is shared with the relevant payment service providers. FITODROGA does not receive or store your complete payment card details when payments are processed by an external payment service provider.

5. Delivery

To fulfil and deliver your order, the personal data necessary for delivery (for example your name, phone number, email address and delivery address or chosen parcel machine) is shared with the relevant delivery service provider. Depending on the delivery destination and selected delivery method, this may include Omniva, DPD, Smartposti or a courier service provider. Only the information necessary to arrange and complete the delivery is shared.

6. Customer Accounts

You may choose to create a customer account on our website. We process the information provided through your account to manage your account, make the shopping process easier and provide access to relevant order information and account features. You are responsible for keeping your account login information confidential.

7. Email Marketing

If you subscribe to FITODROGA communications, we use your email address to send you newsletters, information about new products, offers and other FITODROGA news. We use MailerLite for email marketing and related email communications; MailerLite scripts may also be loaded on our website to display the signup form.

Where you have agreed to receive them, MailerLite may also be used for shopping-related communications such as abandoned cart emails. We send marketing emails only to people who have given their consent. You can unsubscribe at any time using the unsubscribe link in every email or by writing to info@fitodroga.com. We keep a record of your consent (date and source of signup).

8. Cookies

Our website uses cookies and similar technologies to ensure that the website functions correctly, remember certain preferences, understand how visitors use the website and, where you consent, support analytics and marketing activities.

Cookie categories

Essential cookies – necessary for the operation of the website, shopping cart, checkout, customer account and language selection. They do not require consent and cannot be switched off in our settings.
Analytics cookies – help us understand how visitors interact with our website and how it can be improved. Used only if you consent.
Marketing cookies – used to measure advertising performance and provide more relevant marketing. Used only if you consent.

Cookies used on this website

Cookie	Category	Purpose	Set by	Duration
woocommerce_cart_hash, woocommerce_items_in_cart	Essential	Keep your shopping cart contents	FITODROGA (WooCommerce)	Session
wp-wpml_current_language	Essential	Remembers the selected website language	FITODROGA (WPML)	[1 day – verify]
montonio_tz	Essential	Checkout and delivery-method functionality	Montonio	[verify]
_dd_s	Essential	[Session monitoring of the payment/checkout component – verify which service sets it]	[Montonio / verify]	[verify]
sbjs_* (sbjs_first, sbjs_current, sbjs_udata, sbjs_session, sbjs_migrations, etc.)	[Analytics – see note]	WooCommerce order attribution: records the source (for example campaign or referrer) of a visit and the pages viewed, so we can see which channels lead to orders	FITODROGA (WooCommerce)	[Session to 6 months – verify]
_ga, _ga_*	Analytics	Google Analytics – distinguishes visitors and measures website traffic	Google	[up to 2 years]
_fbp	Marketing	Meta Pixel – measures advertising performance on Meta platforms	Meta	[3 months]
_ttp	Marketing	TikTok Pixel – measures advertising performance on TikTok	TikTok	[13 months]

Managing your cookie choices

When you first visit our website you can accept or decline non-essential cookies. You can change your choice or withdraw your consent at any time using the “Cookie settings” link in the website footer. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. You can also delete or block cookies in your browser settings; note that blocking essential cookies may stop the shopping cart or checkout from working.

9. Analytics and Marketing Tools

Where you have given your consent, our website may use:

Google Analytics – to understand website traffic and how visitors use our website.
Meta Pixel – to measure and improve advertising activities on Meta platforms.
TikTok Pixel – to measure and improve advertising activities on TikTok.

These services may process information about your device, website activity and interactions with our website in accordance with their respective privacy policies. Some of this processing can involve profiling for marketing purposes; it takes place only with your consent.

Our website also loads fonts from Google Fonts. When your browser fetches these fonts, your IP address is transmitted to Google.

10. Sharing Your Personal Data

We may share personal data with trusted service providers where necessary to operate our online store and provide our services, including:

payment service providers (Montonio);
delivery and courier companies (Omniva, DPD, Smartposti and others);
website hosting and IT service providers ([HOSTING PROVIDER]);
email marketing service providers (MailerLite);
analytics and advertising service providers (Google, Meta, TikTok – only with your consent);
accounting or other professional service providers where necessary.

These providers act as processors on our instructions or as independent controllers under their own privacy policies, depending on the service. We may also disclose information where required by applicable law or a competent authority. We do not sell your personal data.

Transfers outside the EU/EEA

Some providers, in particular Google, Meta and TikTok, may process data outside the European Union/European Economic Area. Where this happens, we rely on an adequacy decision of the European Commission (for example the EU–US Data Privacy Framework) or on Standard Contractual Clauses, and on your consent where it is required.

11. How Long We Keep Your Data

We keep personal data only for as long as necessary for the purpose for which it was collected and for any period required by applicable legal, accounting or regulatory obligations. In particular:

Data	Retention period
Orders, invoices and related accounting records	[X years] as required by accounting and tax law – confirm with your accountant
Customer account data	Until you delete your account or ask us to delete it, unless we must keep certain data by law
Newsletter subscription and consent record	Until you unsubscribe; we keep a minimal record of your consent and unsubscription [X years] to prove compliance
Enquiries sent to info@fitodroga.com	[X months/years] after the matter is closed
Cookies and analytics data	For the cookie durations listed in section 8; analytics data [26 months – verify tool settings]

12. Your Rights

Under applicable data protection law, including the General Data Protection Regulation (GDPR), you may have the right to:

request access to your personal data;
request correction of inaccurate or incomplete data;
request deletion of your personal data where applicable;
request restriction of processing;
object to certain processing, including processing based on our legitimate interests and direct marketing;
request data portability where applicable;
withdraw your consent at any time where processing is based on consent.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn. These rights are subject to the conditions and limitations established by applicable law.

To exercise your rights or ask a question about the processing of your personal data, please contact us at info@fitodroga.com. We will respond within one month.

You also have the right to lodge a complaint with a supervisory authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, email: pasts@dvi.gov.lv, phone: +371 67223131, www.dvi.gov.lv. You may also contact the supervisory authority in the EU country where you live or work.

We do not take decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you.

13. Children

Our website and online store are not intended for children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

14. Changes to This Policy

We may update this Privacy & Cookie Policy when necessary to reflect changes to our website, services, technologies or legal requirements. The latest version will always be available on this page, with the date of the last update shown at the top. If we make significant changes, we will let you know, for example by a notice on the website.