Privacy policy
1. General Provisions
This privacy policy outlines how personal data is collected, processed, and stored by SIA Pastel Design, the controller of data for the online store www.pastelbabydesign.com.
The term “data subject” refers to any individual whose personal data is processed by the controller, including customers purchasing goods or services through the website.
The controller ensures that data is processed lawfully, fairly, and securely, in accordance with applicable legislation, including the General Data Protection Regulation (GDPR).
2. Collection, Processing, and Storage of Personal Data
Personal data is collected electronically through our website and email. This may include:
- Name and surname
- Telephone number
- Email address
- Delivery address
- Bank account details or payment information
By submitting personal data, the customer grants permission for its use for purposes such as order processing, communication, delivery, and customer support.
The customer is responsible for ensuring the accuracy of submitted data and must inform us of any updates.
SIA Pastel Design is not responsible for issues caused by incorrect data provided by the customer.
3. Purpose and Legal Basis for Processing
Personal data is processed for the following purposes:
- Order fulfillment – stored for 5 years
- Customer management – stored for 5 years
- Marketing (only with consent) – stored for 2 years
- Accounting and legal compliance – stored for 7 years or as required by law
- Website analytics (e.g., Google Analytics) – stored according to Google’s policies
Legal bases for data processing include:
- Consent from the data subject
- Performance of a contract
- Compliance with legal obligations
- Legitimate business interests
4. Data Sharing and Security
Personal data is shared with trusted third parties only where necessary for fulfilling services, such as courier companies, accountants, and payment processors (e.g., Maksekeskus AS).
All payments are processed securely outside of the E-store environment. SIA Pastel Design does not have access to your bank or card details.
All data exchanges (e.g., with banks or Google Analytics) are encrypted for maximum protection. Organizational and technical safeguards are in place to protect your data from unauthorized access or loss.
5. Rights of the Data Subject
As a data subject, you have the following rights:
- Access and review your personal data
- Request corrections to inaccurate information
- Withdraw consent at any time (for marketing or optional data uses)
- Request deletion of your data (where legally applicable)
- File a complaint with the Data Protection Authority
To exercise your rights, please contact us at hello@pastelbabydesign.com.
Payment processing is provided by the payment platform makecommerce.lv, therefore our company transfers the personal data necessary for payment execution to the platform owner Maksekeskus.
6. Google Analytics and Cookies
We use Google Analytics to understand website usage and improve our services. Learn more: Google Privacy Policy.
You can opt out of tracking via: Google Analytics Opt-Out.
7. Final Provisions
This Privacy Policy is based on the General Data Protection Regulation (EU) 2016/679 and Latvian legislation. We reserve the right to amend this policy at any time. Updates will be published at www.pastelbabydesign.com.