Privacy Policy

1. Scope

This Privacy Policy applies to:

• the StockLynx Consignment app;
• the StockLynx Warehouse app;
• the StockLynx server environment and related services;
• the StockLynx website.

2. Information we process

Account information. StockLynx may process account information such as username, the user’s name, the organization the user represents and authentication/session information.

Device information. When a user signs in to a StockLynx app, the app may transmit device-related information required for session and device management, including a device identifier and device name.

Operational information. StockLynx processes the consignment, warehouse and logistics information necessary for its functionality. This may include products, product identifiers, GTIN and UDI information, batch or lot numbers, expiry dates, catalog and contract price information, consignment orders and their status, stock balances, stocktaking results, incoming and outgoing waybills, shipments, delivery information, addresses and related operational records. Operational records may be linked to the user who created or submitted them.

Business contact information. Orders and shipments may include business contact information such as company name, registration number, delivery address, contact person, telephone number and email address.

Photographs and scan results. Where an app offers photo functionality, it processes the photographs captured by the user and the identifiers related to them. Barcode and UDI scan results are processed to identify products, orders, shipments and other records.

Website. When you visit the StockLynx website, the information described in section 4 is processed.

3. How information is used

Information processed in StockLynx is used only to provide and support the StockLynx service for the organizations that use it.

This includes authenticating users, synchronizing data between the apps and the server, processing consignment orders and notifying suppliers, showing catalogs, stock balances and order history, carrying out stocktaking, processing incoming and outgoing shipments, recording product photographs, printing supported labels, maintaining operational records, keeping the service secure and providing user support.

We do not use information processed in StockLynx for behavioral advertising.

We do not sell personal data.

4. The StockLynx website and cookies

The website uses Google Analytics only if you agree to it. Until you make a choice, and if you reject it, no analytics cookies are set and Google Analytics is not loaded. The website does not use advertising cookies.

When you first visit the website, you can accept or reject analytics cookies or make your choice in the cookie settings. You can change or withdraw your choice at any time using “Cookie settings” at the bottom of every page. Withdrawing consent does not affect processing carried out before the withdrawal.

Google Analytics. If you accept analytics cookies, we use Google Analytics 4, provided by Google Ireland Limited, to understand how visitors use the website, for example which pages are visited, how visitors arrive at the website and what type of device and browser they use. Google Analytics 4 does not store IP addresses; it uses them only to determine an approximate location. Advertising features and Google signals are switched off. The data is kept for the retention period set in our Google Analytics account, no longer than 14 months. Google may process the data in the United States; such transfers are covered by the EU–U.S. Data Privacy Framework and Google’s standard contractual clauses.

Cookies and similar technologies used on the website:

• stocklynx-consent (local storage) – remembers your cookie choice; necessary; kept for 12 months.
• _ga – Google Analytics, distinguishes visitors; only with your consent; kept for 2 years.
• _ga_<ID> – Google Analytics, keeps the session state; only with your consent; kept for 2 years.

When you open the website, the server that hosts it processes the technical information needed to deliver the page, such as your IP address, browser information and the time of the request. This information may be kept in server logs for security and troubleshooting purposes, and only for as long as needed for those purposes.

The website contains phone and email links and links to other websites, such as codeit.lv. Phone and email links open the corresponding app on your device, and other websites have their own privacy policies.

5. Legal basis for processing

We process personal data on the basis of our legitimate interest, and that of the organizations that use StockLynx, in running consignment, warehouse and logistics processes and keeping the service secure (Article 6(1)(f) of the General Data Protection Regulation), and where processing is necessary to comply with legal obligations (Article 6(1)(c)).

Google Analytics on the website is used only on the basis of your consent (Article 6(1)(a)), which you can withdraw at any time.

Where we process data on behalf of an organization that uses StockLynx, we do so according to that organization’s instructions and our agreement with it.

6. Data transmission and storage

Data is exchanged between the StockLynx apps and the StockLynx server environment using authenticated HTTPS connections.

Information submitted through StockLynx may be stored on StockLynx servers and associated systems as required to provide the service and maintain business records.

Some data required for offline or efficient operation may also be stored locally on the device, including synchronized records and authentication/session information.

7. Sharing of information

Several organizations may take part in one StockLynx workflow. Information is shared between them only as part of those workflows, for example when a consignment order submitted by a hospital is sent to the supplier.

Information may be processed by infrastructure or service providers acting on our behalf where this is necessary to operate the StockLynx service.

If you accept analytics cookies, information about your use of the website is processed by Google as described in section 4.

Information may also be disclosed where required by applicable law, regulation, court order or another legally binding request.

We do not share personal or operational data with third parties for advertising or marketing purposes.

8. Data security

We use reasonable technical and organizational measures to protect information processed in StockLynx, including authenticated access to the StockLynx service and encrypted HTTPS communication.

Users are responsible for protecting their login credentials and for using StockLynx only on authorized devices.

No method of electronic transmission or storage can provide absolute security, but we take appropriate measures to reduce the risk of unauthorized access, disclosure, alteration or loss.

9. Data retention

Business and operational records are retained for as long as required to provide the StockLynx service, support the organization’s business processes, meet contractual requirements and comply with applicable legal or regulatory obligations.

Retention periods for records stored on StockLynx servers may depend on the organization using the service and the applicable legal requirements.

Information stored on a device is kept only while it is needed for the app to function, and temporary files are removed when they are no longer needed.

10. Your rights

Under the General Data Protection Regulation, you have the right to request access to your personal data, its correction or deletion and the restriction of its processing, and to object to processing. Where applicable, you also have the right to data portability. Where processing is based on your consent, you can withdraw it at any time.

StockLynx user accounts are normally created and managed by the organization using StockLynx. To exercise your rights, contact your organization’s StockLynx administrator or contact us using the details below.

Deletion requests may be subject to legal, regulatory or legitimate business record-retention requirements.

If you believe that your personal data is processed unlawfully, you have the right to lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

11. Children

StockLynx is a business platform and is not directed to children.

12. International processing

Depending on the infrastructure used, information may be processed or stored in jurisdictions other than the user’s current location. Website analytics data may be processed by Google in the United States, as described in section 4. Where required, appropriate safeguards are applied in accordance with applicable data protection law.

13. Changes to this Privacy Policy

We may update this Privacy Policy when StockLynx, its functionality or applicable legal requirements change. The latest version is always available on this page, and the effective date at the top shows when it was last updated.

14. Contact

For questions about this Privacy Policy or the processing of personal data in StockLynx, please contact: