Last updated: 2026-07-23
SIA "eu-food" operates the eu-food.com marketplace, where wholesale food suppliers and business buyers find each other and agree on orders. This policy explains what personal data we process, why, and what rights you have.
eu-food.com is a business-to-business service. Most of the information we hold describes companies rather than private individuals, but the details of the people who act for those companies — names, work email addresses and phone numbers — are personal data, and this policy covers them.
1.Who is responsible for your data
The controller is SIA "eu-food", registration number 40203451789, Brīvības iela 1, Rīga, LV-1010, Latvia. For any question about this policy or your data, write to info@eu-food.com.
2.What we collect
We only collect what the marketplace needs in order to work:
- Account data — your name, surname, email address, phone number and the account type you chose (buyer or supplier). Sign-in is handled by Auth0, which also stores your credentials; we never see your password.
- Company data — business name, registration number, VAT number, legal address and business phone, as entered in your account settings.
- Order data — the products ordered, quantities, agreed prices, delivery date, delivery address and the contact details you enter for a delivery.
- Product data — for suppliers: product titles, descriptions, categories, price tiers, payment conditions and the images you upload.
- Technical data — server logs generated when you use the site, including IP address, browser type and the pages requested.
3.Why we use it, and on what legal basis
- To run your account and the marketplace, and to pass an order to the supplier you ordered from — performance of a contract (GDPR Art. 6(1)(b)).
- To keep the service secure, prevent abuse and troubleshoot faults — our legitimate interest (Art. 6(1)(f)).
- To meet accounting, tax and other statutory duties — legal obligation (Art. 6(1)(c)).
- To send service messages about your orders — performance of a contract. We do not send marketing email.
4.Who sees your data
When you place an order, the supplier of that product receives the order details you submitted — including the delivery address and the contact details you gave — because they need them to fulfil it. In the same way, a supplier's company details are shown to the buyer they are dealing with. Prices agreed in a deal are visible only to the two companies involved, never in the public order feed.
We also use service providers that process data on our behalf under contract:
- Auth0 (Okta) — authentication and sign-in.
- MongoDB Atlas — database hosting.
- Vercel — application hosting and storage of uploaded product images.
5.Where your data is stored
We host data in the European Union wherever the provider offers it. If a provider transfers data outside the EU/EEA, that transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.
6.How long we keep it
- Account and company data — while your account exists, and up to 12 months afterwards in case of a dispute.
- Order data — for the period required by Latvian accounting law, currently 5 years from the end of the financial year.
- Server logs — up to 12 months.
7.Your rights
Under the GDPR you may ask us to:
- give you a copy of the personal data we hold about you;
- correct data that is wrong or incomplete;
- delete data we no longer have a reason to keep;
- restrict or object to a particular use of your data;
- send your data to you or another provider in a machine-readable format.
8.Complaints
Write to info@eu-food.com and we will answer within one month. If you are not satisfied, you may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, Elijas iela 17, Rīga, LV-1050, pasts@dvi.gov.lv).
9.Security
Access to the marketplace requires a signed session issued after you sign in, and every request is checked against the account it belongs to: you can only read your own orders, and only a product's owner can edit it. Traffic is encrypted in transit. No system is perfect, so please tell us immediately if you suspect your account has been misused.
10.What we do not do
- We do not sell or rent personal data.
- We do not use advertising or analytics trackers, or build profiles about you.
- We do not make automated decisions that produce legal effects for you.
- The service is not intended for children, and we do not knowingly collect their data.
11.Changes to this policy
If we change how we process data, we will update this page and the date shown above. Significant changes will also be announced in your account.
This document is published in Latvian, English and Russian. If the versions differ, the Latvian version prevails.