Privacy Policy

Last updated: 19 October 2026

This Privacy Policy explains how PouchSupply (“we”, “us”, “our”) collects, uses and protects personal data when you visit pouchsupply.eu, contact us, book a meeting or do business with us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and applicable Latvian law.

1. Who is responsible for your data

The data controller is PouchSupply, a manufacturer of white label nicotine pouches, caffeine pouches, nootropic pouches and vape liquids based in Riga, Latvia. For any question about this policy or your personal data, write to info@pouchsupply.eu.

2. What data we collect

  • Enquiry data: the details you enter in our contact form or send us by email, such as your name, email address, company, phone number and the content of your message.
  • Meeting data: the details you provide when you book a meeting with us through our scheduling provider.
  • Business relationship data: contact details of client and supplier representatives, order details, contracts, invoices and correspondence.
  • Technical and usage data: IP address, browser and device type, pages visited, the website or advert that referred you, and whether you submitted an enquiry form. This is collected through cookies and similar technologies, as described in our Cookie Policy.

Our products and website are intended for businesses. We do not knowingly collect personal data from anyone under 18.

3. Why we use your data and on what legal basis

  • To answer enquiries and prepare quotes, because you asked us to (steps prior to entering into a contract) and our legitimate interest in responding to business enquiries.
  • To manufacture and deliver orders and manage our business relationship, to perform our contract with you or the company you represent.
  • To check that email addresses entered in our contact form are deliverable, based on our legitimate interest in receiving correct contact details and preventing spam.
  • To measure the performance of our advertising, including whether an advert led to an enquiry, based on your consent.
  • To meet legal obligations, such as accounting, tax and regulatory record-keeping.
  • To protect our rights and the security of our website, based on our legitimate interests.

4. Who we share your data with

We do not sell your personal data. We share it only with service providers who help us run our website and business, and only as far as needed:

  • Webflow: website hosting and contact form submissions.
  • Google: advertising and conversion measurement (Google Ads).
  • Cloudflare and Hunter.io: checking whether an email address entered in our contact form can receive mail.
  • Calendly: meeting scheduling, if you choose to book a meeting.
  • Professional advisers, logistics partners and authorities, where needed to fulfil orders, comply with the law or defend legal claims.

5. Transfers outside the EU

Some of our service providers are based in, or process data in, the United States or other countries outside the European Economic Area. Where this happens, we rely on appropriate safeguards such as the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. How long we keep your data

  • Enquiries that do not lead to an order: up to 3 years after our last contact.
  • Contract, order and invoice records: for the period required by Latvian accounting and tax law.
  • Cookie and advertising data: for the periods set out in our Cookie Policy.

7. Your rights

Under the GDPR you have the right to access your personal data, to have it corrected or deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw your consent at any time without affecting processing carried out before the withdrawal. To exercise any of these rights, email info@pouchsupply.eu. We will reply within one month.

You also have the right to lodge a complaint with a supervisory authority. In Latvia this is the Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv.

8. How we protect your data

We use appropriate technical and organisational measures to protect personal data against loss, misuse and unauthorised access, including encrypted connections (HTTPS) and access limited to the people who need it.

9. Changes to this policy

We may update this Privacy Policy from time to time. The latest version is always available on this page, with the date of the last update shown at the top.