Privacy policy
PRIVACY POLICY
Last updated: June 2026
This Privacy Policy explains how Brīvības Garša ("we", "us", "our") collects, uses, and protects your personal data when you visit and make purchases at brivibasgarsastore.store. We are committed to protecting your privacy and complying with the General Data Protection Regulation (GDPR) (EU) 2016/679.
---
1. WHO WE ARE
Business name: Brīvības Garša
Website: brivibasgarsastore.store
Contact email: briiviibasgarssa@gmail.com
Business address: Latvia
If you have any questions about how we handle your personal data, contact us at briiviibasgarssa@gmail.com.
---
2. WHAT DATA WE COLLECT
We collect the following personal data when you use our store:
Identity data: your first name, last name
Contact data: email address, phone number (if provided)
Delivery data: shipping address
Transaction data: details of purchases you make, order history, payment confirmation
Technical data: IP address, browser type, device type, pages visited, time spent on site (collected via cookies)
Communication data: emails or messages you send us
We do not collect or store full payment card details. All payment processing is handled securely by Shopify Payments or third-party payment providers who are independently GDPR compliant.
---
3. HOW WE COLLECT YOUR DATA
We collect data when you:
- Create an account or place an order on our store
- Subscribe to our newsletter or email list
- Contact us by email or through our contact form
- Browse our website (technical data collected automatically via cookies)
---
4. WHY WE USE YOUR DATA — LEGAL BASIS
We process your personal data on the following legal grounds under GDPR Article 6:
Performance of a contract: to process and fulfill your orders, send order confirmations, arrange delivery, and handle returns and refunds.
Legal obligation: to comply with applicable laws including tax, accounting, and consumer protection requirements under EU and Latvian law.
Legitimate interests: to improve our website and services, prevent fraud, and ensure the security of our store.
Consent: to send you marketing emails and newsletters. You can withdraw your consent at any time by clicking the unsubscribe link in any email or by contacting us directly.
---
5. WHO WE SHARE YOUR DATA WITH
We share your personal data only with the following third parties, each of whom processes data on our behalf under GDPR-compliant data processing agreements:
Shopify Inc. — our e-commerce platform provider. Shopify stores and processes order, customer, and payment data. Shopify is certified under the EU-US Data Privacy Framework. Privacy policy: shopify.com/legal/privacy
Printful Inc. — our print-on-demand and fulfilment partner. We share your delivery name and address with Printful to produce and ship your order. Printful processes data in the EU and US. Privacy policy: printful.com/policies/privacy
Meta Platforms (Facebook & Instagram) — if you interact with our Instagram Shopping or Facebook Page. Meta's privacy policy applies to data processed through their platforms: facebook.com/privacy/policy
Postal and courier services — your delivery name and address are shared with the courier responsible for delivering your order.
We do not sell your personal data to any third parties.
---
6. INTERNATIONAL DATA TRANSFERS
Shopify and Printful may process your data outside the European Economic Area (EEA). Where this occurs, we ensure appropriate safeguards are in place in accordance with GDPR Chapter V, including Standard Contractual Clauses (SCCs) approved by the European Commission.
---
7. HOW LONG WE KEEP YOUR DATA
Order and transaction data: 10 years, as required by Latvian and EU accounting and tax law.
Customer account data: until you request deletion of your account.
Marketing consent and email data: until you unsubscribe or request deletion.
Technical and cookie data: as defined by individual cookie lifespans — see Section 9.
---
8. YOUR RIGHTS UNDER GDPR
Under the General Data Protection Regulation you have the following rights regarding your personal data:
Right of access: you can request a copy of the personal data we hold about you.
Right to rectification: you can ask us to correct inaccurate or incomplete data.
Right to erasure: you can ask us to delete your personal data where there is no lawful reason for us to continue holding it.
Right to restrict processing: you can ask us to pause processing of your data in certain circumstances.
Right to data portability: you can request your data in a structured, commonly used, machine-readable format.
Right to object: you can object to processing of your personal data where we rely on legitimate interests as our legal basis.
Right to withdraw consent: where we process data based on your consent (e.g. marketing emails), you can withdraw that consent at any time.
Right to lodge a complaint: you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) at datavalsts.lv or with the supervisory authority in your EU country of residence.
To exercise any of these rights, contact us at briiviibasgarssa@gmail.com. We will respond within 30 days.
---
9. COOKIES
Our website uses cookies — small text files stored on your device — to make the store function and to understand how visitors use the site.
We use the following types of cookies:
Essential cookies: required for the store to function (e.g. shopping cart, session). Cannot be disabled.
Analytics cookies: used to understand how visitors use the site (e.g. pages visited, time on site). These are only placed with your consent.
Marketing cookies: used to show relevant advertising (e.g. Meta Pixel for Instagram Shopping). Only placed with your consent.
When you first visit our store you will be shown a cookie consent banner. You can accept all cookies, reject non-essential cookies, or manage your preferences. You can change your cookie preferences at any time by clearing your browser cookies and revisiting the site.
---
10. DATA SECURITY
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or disclosure. Our store is hosted on Shopify's secure platform which uses SSL encryption and meets PCI DSS standards for payment security.
---
11. CHILDREN'S PRIVACY
Our store is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected data from a child, please contact us immediately at briiviibasgarssa@gmail.com.
---
12. CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we make material changes we will update the "Last updated" date at the top of this page. We encourage you to review this policy periodically.
---
13. CONTACT US
For any questions, requests, or complaints regarding your personal data:
Email: briiviibasgarssa@gmail.com
Address: Latvia
Website: brivibasgarsastore.store
You also have the right to contact the Latvian supervisory authority:
Datu valsts inspekcija (Data State Inspectorate)
Website: datavalsts.lv
Address: Blaumaņa iela 11/13-11, Rīga, LV-1011, Latvia