Privacy Policy

Privacy Policy

Effective date: 2025-11-02

This Privacy Policy explains how SIA WRAP (Reg. No. 44103126170, Varavīksnes gatve 11, Rīga, LV-1082) (hereinafter — “we” or the “Company”) processes personal data obtained through the website Sobeauty.lv (hereinafter — the “Website”).

For questions regarding data processing, please contact us at: Simona.ozola.info@gmail.com, phone: +371 28 488 884.

1. Applicability

This policy applies to all Website visitors, customers, and persons who submit their data for communication, purchase, or marketing purposes. Data processing is conducted in accordance with the GDPR and the laws and regulations of the Republic of Latvia.

2. Types of Personal Data Processed

  • Purchase and delivery: Name, surname, email, phone number, delivery/postal address, order information, payment status (payment data is processed via Stripe).

  • Customer support / communication: Name, email, phone number, content of the message.

  • Accounts (if available on the site): Email, password (hash), order history.

  • Marketing (with consent): Email and marketing activities within Klaviyo (opens, clicks, preferences).

  • Website usage: IP address, device/browser information, cookie identifiers, page views, clicks; for analytics and security purposes.

3. Purposes and Legal Basis

  • Order fulfillment and delivery — performance of a contract (GDPR Art. 6(1)(b)).

  • Accounting and tax record-keeping — legal obligation (GDPR Art. 6(1)(c)).

  • Customer support and dispute resolution — legitimate interest (GDPR Art. 6(1)(f)).

  • Marketing communication — consent (GDPR Art. 6(1)(a)); can be withdrawn at any time.

  • Analytics, security, and Website improvement — legitimate interest (GDPR Art. 6(1)(f)).

  • Ad personalization — cookie consent (GDPR Art. 6(1)(a)).

4. Cookies and Similar Technologies

We use necessary, analytical, and marketing cookies. More details can be found in our Cookie Policy. You may optionally agree to or opt-out of analytical/marketing cookies in the cookie settings.

5. Data Recipients (Processors and Third Parties)

  • Stripe Payments — payment processing.

  • Klaviyo — email marketing and automation.

  • Meta (Facebook/Instagram) — advertising and audience building (Meta Pixel).

  • Google Analytics — visitor analytics.

  • Microsoft Clarity — user behavior analysis (heatmaps, session replay).

  • Delivery partners (e.g., DPD, Omniva, etc.) — for order delivery.

  • IT and hosting services — Website maintenance and security.

Data is shared only to the extent necessary to provide the service. If data is transferred outside the EU/EEA, mechanisms permitted by the GDPR (e.g., Standard Contractual Clauses) are applied.

6. Data Retention Periods

  • Order and invoice data: 5 years (accounting requirements).

  • Marketing data: Until consent is withdrawn or 2 years after the last activity (whichever occurs first).

  • Customer support correspondence: Up to 2 years from the last correspondence.

  • Cookies: According to the expiration period of the specific cookie (see Cookie Policy).

7. Your Rights

  • The right to access your data and receive a copy thereof;

  • The right to rectify inaccurate data;

  • The right to erasure (where applicable);

  • The right to restrict or object to processing;

  • The right to data portability;

  • The right to withdraw consent for marketing/cookies at any time (withdrawal does not affect processing that occurred prior to withdrawal);

  • The right to lodge a complaint with the Data State Inspectorate.

To exercise your rights, please write to Simona.ozola.info@gmail.com.

8. Security

We implement technical and organizational measures (SSL/TLS, access control, data minimization, regular updates) to protect personal data from unauthorized access, disclosure, or destruction.

9. Minors

Our services are not intended for children under the age of 16. If you believe that a child's data has come into our possession without parental/guardian consent, please contact us — we will take appropriate action.

10. Changes to the Policy

We may update this policy. If changes are significant, we will post a notice on the Website and update the effective date.

Contacts: SIA WRAP, Reg. No. 44103126170, Varavīksnes gatve 11, Rīga, LV-1082. Email: Simona.ozola.info@gmail.com, phone: +371 28 488 884.