Privacy Policy
1. Who is responsible for your data
The controller of your personal data is SIA IdeaDesign, registration No. 44103146603, Piķurgas iela 48, Ulbroka, Stopiņu pagasts, Ropažu novads, LV-2130, Latvia. For any privacy question or request, write to [email protected].
2. What we collect, why, and for how long
| Data | Purpose | Legal basis (GDPR) | Kept for |
|---|---|---|---|
| Order data: name, e-mail, billing address, country, company name and VAT number (if given), items and licenses bought, names on the files, prices, payment status, consent given at checkout, IP address and browser at the time of the order | Process the order, deliver the files, issue the license certificate and invoice, apply the correct VAT | Contract (Art. 6(1)(b)); legal obligation under Latvian accounting and tax law (Art. 6(1)(c)) | 5 years from the end of the year of the order (Latvian Accounting Law, Article 28), longer only if needed for a legal claim |
| VAT number | Check it in the European Commission’s VIES system before applying reverse charge | Legal obligation (Art. 6(1)(c)) | With the order data |
| Download count per file | Deliver files and enforce download limits and license terms | Contract; legitimate interest (Art. 6(1)(f)) | With the order data |
| Withdrawal declarations, complaints and e-mails with you | Handle your request and keep proof of it | Legal obligation; contract; legitimate interest | 3 years after the matter is closed |
| Technical data: IP address, browser, requested page, time | Run the website securely and block attacks and abuse | Legitimate interest (Art. 6(1)(f)) | Server logs up to 30 days |
| Usage data with Google Analytics, only after you accept analytics cookies: pages viewed, names searched, cart and purchase events (order number, items, value), file downloads, device and browser type, approximate location | Understand which names and designs people look for and improve the shop | Your consent (Art. 6(1)(a)), which you can withdraw at any time | 14 months |
The names you choose for your ornaments may be names of other people, for example family members. We use them only to fulfil your order.
You need to provide the order data to buy from us; without it we cannot conclude or perform the contract. We do not use automated decision-making or profiling with legal or similarly significant effects.
3. Payments
Payments are processed by Stripe Payments Europe, Ltd. (Ireland) and, if you choose PayPal, PayPal (Europe) S.à r.l. et Cie, S.C.A. (Luxembourg). They receive your payment details directly and process them as independent controllers under their own privacy policies. We receive only the payment status and limited information such as the card brand and last four digits.
4. Who else receives data
- Contabo GmbH (Germany): hosting of the website and database on servers in the EU.
- Cloudflare, Inc. (USA): content delivery and protection of the website against attacks; processes IP addresses and technical data.
- Google Ireland Limited (Ireland): Google Analytics, only with your consent.
- European Commission (VIES): validation of VAT numbers.
- Our e-mail provider, IT and software service providers, and our accountant, who process data on our instructions and under confidentiality.
- The State Revenue Service of Latvia and other authorities, when the law requires it.
Some of these providers (Cloudflare, Google and the parent companies of Stripe and PayPal) may process data in the United States. Such transfers are based on the EU–US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.
5. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to data portability, and to object to processing based on our legitimate interests. Where processing is based on consent, you can withdraw consent at any time without affecting earlier processing. Write to [email protected]; we answer within one month.
You also have the right to lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, [email protected], www.dvi.gov.lv, or with the supervisory authority in the EU country where you live.
6. Cookies
We use cookies that are necessary for the shop to work, and analytics cookies only if you accept them in the cookie banner. You can change your choice at any time with the cookie settings link at the bottom of every page.
| Cookie | Provider | Purpose | Duration | Type |
|---|---|---|---|---|
| oriole_consent | oriole.design | Stores your cookie choice | 180 days | Necessary |
| wp_woocommerce_session_*, woocommerce_cart_hash, woocommerce_items_in_cart | oriole.design | Keep the contents of your cart | Session to 2 days | Necessary |
| __stripe_mid, __stripe_sid, m | Stripe | Fraud prevention during payment (set at checkout) | 1 year / 30 minutes / 2 years | Necessary |
| __cf_bm, cf_clearance | Cloudflare | Distinguish people from bots and protect the website | 30 minutes / up to 1 year | Necessary |
| PayPal cookies | PayPal | Payment and fraud prevention, only if you choose PayPal | Set by PayPal | Necessary |
| _ga, _ga_2E5TVT66W9 | Google Analytics | Count visits and measure how the shop is used | 2 years | Analytics (consent) |
Until you accept analytics cookies, the Google Analytics tag is not loaded at all and no data is sent to Google. If you accept, file downloads from your order links are also reported to Google Analytics from our server, linked to your analytics identifier. If you did not accept, downloads are only counted on our server for the download limit.
7. Changes
We may update this policy. The current version is always available on this page, with the date of the last update at the top.