Privacy Policy

Last updated: 3 October 2026

This policy explains what personal data SIA "Lucky Catch" collects through this website, why we collect it, how long we keep it and what rights you have. We handle your data in line with the EU General Data Protection Regulation (GDPR) and Latvian law.

1. Who is responsible for your data

The data controller is SIA "Lucky Catch", registration number 40203635939, VAT number LV40203635939, legal address Eksporta iela 16-52, Riga, LV-1045, Latvia. You can reach us about anything in this policy at sales@crab-on.com.

2. What data we collect, why, and on what basis

Brochure download. When you ask for our brochure we collect your name, email address, and, if you give them, your company and phone number. We use them to let you download the brochure and to follow up with information about our products. Legal basis: your consent (Article 6(1)(a) GDPR), which you give by ticking the box in the form. You can withdraw it at any time.

Become A Distributor application. When you apply we collect the details you enter: company name, type of business, website, country, city, your name, job title, email address, phone number, the products you are interested in, your interest in white-label products, expected order size and your message. We use them to assess your application, to answer you and to prepare a possible business relationship. Legal basis: taking steps at your request before a contract (Article 6(1)(b)), our legitimate interest in developing our business with companies (Article 6(1)(f)), and your consent to be contacted, given by ticking the box in the form.

Messages and calls. If you write or call us by email, phone, WhatsApp or Telegram, we keep your message and contact details to answer you and to keep a record of the conversation. Legal basis: our legitimate interest in handling enquiries, or steps before a contract. WhatsApp and Telegram are run by their own providers, which handle your data under their own privacy policies.

Technical data. Our hosting provider automatically records technical data when you visit, such as your IP address, browser type, the pages requested and the time. We use it to run the site, keep it secure and fix errors. Legal basis: our legitimate interest in a secure and working website.

What we do not do. We do not use advertising trackers or analytics on this website, we do not sell your data, and we do not make decisions about you by automated means.

You are not obliged to give us your data, but without the fields marked as required we cannot process a brochure request or an application.

3. Who receives your data

We share data only with service providers that help us run the website, and only as much as they need:

• Vercel Inc. (United States), which hosts the website and receives the technical data described above.
• Supabase, which hosts the database where brochure requests and applications are stored. The database is hosted in the EU.
• Our email and phone providers, which carry the messages you send us. When you submit a form, an automatic alert with your details is emailed to our team through Resend, our email delivery service.

We may also disclose data where the law requires it, for example to public authorities. When we later open our online shop, we will add the payment and delivery providers involved to this policy before we start using them.

4. Transfers outside the EU/EEA

Some of our providers, such as Vercel, are based in or may process data in the United States. Where data leaves the EU/EEA we rely on an adequacy decision (for example the EU-US Data Privacy Framework) or on the European Commission's Standard Contractual Clauses, so that your data stays protected.

5. How long we keep your data

• Brochure requests: up to 24 months after our last contact with you, then deleted, unless you become a customer.
• Distributor applications: up to 24 months after we last contacted you. If we start working together, we keep the data for the duration of the business relationship and then as long as accounting and tax law require.
• Messages: as long as needed to deal with your enquiry and any follow-up, normally no longer than 24 months.
• Technical hosting logs: for the short period set by our hosting provider.

If you withdraw your consent or ask us to delete your data earlier, we do so unless the law requires us to keep it.

6. Your rights

Under the GDPR you have the right to:

• ask for access to the data we hold about you and for a copy of it;
• ask us to correct data that is wrong or incomplete;
• ask us to delete your data;
• ask us to restrict how we use your data;
• receive the data you gave us in a common, machine-readable format;
• object to processing that is based on our legitimate interest;
• withdraw your consent at any time, without affecting what we did before you withdrew it.

To use any of these rights, write to sales@crab-on.com. We will answer within one month. You also have the right to complain to the supervisory authority in Latvia: the Data State Inspectorate (Datu valsts inspekcija), Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv. If you live in another EU country you can complain to the authority there.

7. Security

We keep submitted data in a database that is not publicly accessible, we transmit it over encrypted connections, and we limit access to the people who need it. No system is perfectly secure, so if something goes wrong that affects your data we will tell you and the authority as the law requires.

8. Children

This website is meant for businesses and adults. We do not knowingly collect data from children.

9. Changes to this policy

We may update this policy, for example when we open the online shop or add new services. The date at the top shows when it last changed.