Privacy policy
Privacy Policy
This Privacy Policy explains how personal data is collected, used, disclosed and protected when you visit or make a purchase through www.pastelbabydesign.com.
The data controller is:
SIA SewLab
Registration No. 40203300667
Dāliju iela 12
Ozolnieki, Jelgavas nov., LV-3001
Latvia
Email: hello@pastelbabydesign.com
Phone: +371 26067036
1. General Provisions
SIA SewLab (“we”, “us”, “our” or the “Controller”) processes personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), applicable Latvian legislation and other applicable data protection laws.
“Personal data” means any information relating to an identified or identifiable natural person.
We process personal data lawfully, fairly and transparently and only for specified, legitimate purposes.
2. Personal Data We Collect
Depending on how you use our website and services, we may collect and process the following categories of personal data:
- Name and surname
- Email address
- Telephone number
- Billing and delivery address
- Order and purchase information
- Product selections and personalization details
- Customer service communications
- Payment-related information
- IP address, browser, device and website usage information
- Cookie and analytics information
- Marketing preferences
Payment card and banking information may be processed directly by our payment service providers. We generally do not receive or store complete payment card details.
We may receive personal data directly from you, automatically through your use of the website, or from service providers involved in processing your order.
3. Purposes and Legal Bases for Processing
We process personal data for the following purposes and on the following legal bases:
Processing and fulfilling orders
We process your contact, order, delivery and personalization information in order to:
- accept and process your order;
- manufacture or personalize products;
- arrange payment and delivery;
- communicate with you about your order;
- process returns, cancellations and refunds.
The legal basis is the performance of a contract or taking steps at your request before entering into a contract.
Accounting, taxation and legal obligations
We retain and process certain transaction, invoice and payment information where required by accounting, taxation, consumer protection or other applicable laws.
The legal basis is compliance with a legal obligation.
Customer service and business administration
We may process communications and order-related information to respond to inquiries, resolve complaints, prevent misuse and manage our business.
Depending on the circumstances, the legal basis may be performance of a contract, compliance with a legal obligation, or our legitimate interests in operating and protecting our business and providing customer service.
Marketing
Where required by law, we send marketing communications only with your consent.
You may withdraw your consent or unsubscribe from marketing communications at any time.
Website analytics, functionality and cookies
We may use cookies and similar technologies to operate the website, remember preferences, understand website usage and improve our services.
Where consent is legally required for non-essential cookies or analytics technologies, these technologies will be used only after you provide the appropriate consent.
Further information may be provided in our cookie settings or cookie banner.
4. How We Share Personal Data
We may share personal data with service providers where necessary to operate our store and provide our services.
These may include:
- Shopify, which provides our e-commerce platform and related services;
- payment processors and payment service providers;
- banks and financial service providers where necessary;
- postal, courier and delivery companies;
- accounting and professional service providers;
- IT, hosting and security service providers;
- analytics and advertising providers, subject to applicable consent requirements;
- government authorities or other parties where disclosure is required by law.
We disclose only the personal data reasonably necessary for the relevant purpose.
Our service providers may act as processors or, in some circumstances, as independent controllers of personal data under applicable law.
5. International Data Transfers
Some of our service providers may process personal data outside Latvia, the European Economic Area (“EEA”) or the country in which you live.
Where personal data is transferred outside the EEA, we take appropriate measures to ensure that the transfer complies with applicable data protection law.
Depending on the recipient and destination, such safeguards may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses approved by the European Commission, or another legally recognised transfer mechanism.
6. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and as required by applicable law.
The retention period depends on factors including:
- the nature of the data;
- the purpose for which it is processed;
- accounting, tax and legal retention requirements;
- the need to establish, exercise or defend legal claims;
- whether you have an active customer relationship with us.
When personal data is no longer required, we will delete or anonymise it where appropriate.
7. Data Security
We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
8. Your Rights
Subject to the conditions and limitations provided by applicable law, you may have the right to:
- receive information about how your personal data is processed;
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- receive certain personal data in a structured, commonly used and machine-readable format and request data portability;
- object to processing based on legitimate interests;
- object at any time to processing for direct marketing;
- withdraw consent at any time where processing is based on consent;
- lodge a complaint with a competent data protection supervisory authority.
Withdrawing consent does not affect the lawfulness of processing carried out before the withdrawal.
To exercise your rights, please contact us at:
We may need to verify your identity before responding to certain requests.
9. Complaints
If you believe that your personal data has been processed unlawfully, please contact us first so that we can try to resolve the matter.
You also have the right to lodge a complaint with the Latvian supervisory authority:
Datu valsts inspekcija (Data State Inspectorate of Latvia)
You may also have the right to contact the supervisory authority in the EU/EEA country where you live, work or where the alleged infringement occurred.
10. Cookies and Analytics
Our website may use cookies and similar technologies for essential website functionality, preferences, analytics and, where applicable, advertising.
Non-essential cookies are used in accordance with applicable consent requirements.
Where Google Analytics or other analytics services are enabled, information about website use may be processed by those service providers in accordance with their own privacy terms and our configured consent settings.
You can manage applicable cookie preferences through the cookie controls available on our website.
11. Children’s Privacy
Our online store is not intended for children to make purchases independently.
We do not knowingly collect personal data from children in circumstances where parental or guardian consent is required by applicable law.
If you believe that a child has provided us with personal data improperly, please contact us.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, services or legal obligations.
The current version will be published on www.pastelbabydesign.com.
13. Contact Information
For questions about this Privacy Policy or the processing of your personal data, please contact:
SIA SewLab
Registration No. 40203300667
Dāliju iela 12
Ozolnieki, Jelgavas nov., LV-3001
Latvia
Email: hello@pastelbabydesign.com
Phone: +371 26067036