Privacy Policy

I am committed to processing personal information about customers in a way that is safe, secure and non-invasive. Under the EU General Data Protection Regulation (GDPR) 2018 this document sets out what data I collect and store when you buy from me, why I collect it, who the information is shared with and the rights of the customer to have the information changed or deleted.

WHAT INFORMATION IS COLLECTED:
1. Your name
2. Full address
3. E-mail
I do store your Name in my bookkeeping reports, that I need to create for tax purposes.
I do store your Name and Full address in Postal service recipes (only valid for Registered shipments). I need to keep them for tax purposes.
I do not store your e-mail in any of my reports
I do not store your information in any other paper or digital files
I do not have any access to your Credit Card or Paypal information. This information is collected and stored by Paypal under their Privacy Policy.

WHO THE INFORMATION IS SHARED WITH:
Shopify - you provide Shopify with your Name, Full address in order to complete checkout and place an order
Paypal (during payment at checkout)
Latvian Post (when buying tracked postage and mailing orders)


WHY THE INFORMATION IS COLLECTED:
Your name and address is collected in order to provide the products you have purchased from me (under the 'contractual performance' lawful basis of GDPR).
Your email is collected so that I can contact you to let you know your order has been dispatched. It might also be used if I have any queries about your order. (Also under the 'contractual performance' lawful basis of GDPR)
The information is not used for direct marketing such as sales emails. You won't get any spam e-mails from me.

HOW THE INFORMATION IS COLLECTED:
Directly from customers via the online ordering system on the Shopify platform.

WHO MAY SEE THE INFORMATION:
Myself, Alla Lanceva, sole owner of the business.
Select third parties, i.e. Paypal, Latvian Post, Shopify.
Other third parties, i.e. law enforcement or tax authorities (only in unusual circumstances).

TRANSFERRING PERSONAL INFORMATION OUTSIDE OF THE EU:
I do not transfer your personal information to any third parties outside EU

KEEPING PERSONAL INFORMATION SECURE:
I am committed to keeping customer's personal information secure. It will not be sold, inappropriately shared or accidentally used. Customer's details are only used for direct communication about specific orders over email. All technology in use by me is kept up to date with current security software and is not made available for use by anyone else.

HOW LONG INFORMATION IS KEPT:
Under my country, Latvia, law, business records and tax information must be kept for five years.
This information will be securely disposed of as soon as practical.


ACCESS TO PERSONAL INFORMATION:
Under GDPR legislation, customers should have access to their personal information and be given the opportunity to change their details. You also have the right to ask me to change, restrict my use of or delete your personal information. In order to see what information is held about you either:
 - log in to your account using your login details
OR
- request to see what information is held by sending me a message with your request and including your name and address as used when shopping on this web site.

You can request that I delete your personal information from my shop account by contacting me via e-mail

CHANGES TO MY PRIVACY POLICY:
As privacy legislation is an ever changing landscape, I will update my privacy policies as required.

CONTACT DETAILS:
E-mail: lapalomaboutique@inbox.lv

Alla Lanceva
Vaidavas street 1a
Box 48
Riga, LV-1084
Latvia