Privacy policy

Privacy Policy

This privacy policy explains how the online store Say Divine processes your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the laws of the Republic of Latvia.

1. Controller

The controller of your personal data is SIA “Labi Meistari”, registration number 53603074761, registered office: Vasaras iela 15, Jelgava, LV-3007, Latvia, email: saydivinemail@gmail.com. Please send any questions about data processing or the exercise of your rights to this email address.

2. What data we process

Contact and delivery data: first name, last name, email, phone number, delivery address or parcel locker, billing address.
Order data: purchased products, amounts, order history, withdrawals and complaints.
Payment data: payment method and status. Full payment card details are processed by the payment service provider, not by the seller.
Account data (if you create an account): login details and settings.
Communication data: the content of messages you send by email or through the website forms.
Technical and usage data: IP address, device and browser information, cookies, information about your visit to the website.

3. Purposes and legal basis

Order fulfilment (accepting orders, payment, delivery, withdrawals, refunds, claims about non-conforming goods) – performance of a contract (Article 6(1)(b) GDPR).
Accounting and tax obligations – compliance with a legal obligation (Article 6(1)(c) GDPR).
Customer service and communication – performance of a contract or our legitimate interest in answering your questions (point (b) or (f)).
Website operation and security, fraud prevention – legitimate interests (point (f)); cookies necessary for the website to work.
Sending news and offers – your consent (point (a)). We may also write to existing customers about similar products in accordance with the Latvian Law on Information Society Services; you can unsubscribe at any time using the link in every email.
Analytics and advertising (statistics and marketing cookies, advertising platforms) – only with your consent, given in the cookie banner (point (a)).

4. Recipients of data

We share data only with those who need it for the purposes above:

Shopify – the e-commerce platform the store runs on (processor);
payment service providers;
Omniva – for parcel delivery (name, phone, email, parcel locker or address);
our accounting service provider and public authorities (e.g. the State Revenue Service) where required by law;
email, analytics and advertising service providers – only if we use them and you have given consent where required.

Shopify provides certain features as an independent controller. More information: Shopify Consumer Privacy Policy; to exercise your rights: Shopify Privacy Portal.

5. Transfers outside the EEA

Some service providers (e.g. Shopify) may process data outside the European Economic Area. In such cases, the safeguards provided by the GDPR are used, such as a European Commission adequacy decision or standard contractual clauses.

6. Retention periods

Order and accounting documents are kept for as long as required by accounting and tax laws;
data needed to handle possible claims (e.g. about a non-conforming product) – until the limitation period for such claims expires;
newsletter data – until consent is withdrawn;
cookies – for the period stated in the cookie banner.

7. Your rights

You have the right to access your data, request its correction or erasure, restrict processing, object to processing based on legitimate interests, receive your data in a portable format, and withdraw your consent at any time (this does not affect the lawfulness of processing carried out before withdrawal). Send requests to saydivinemail@gmail.com; we will respond within one month at the latest.

If you believe your data is being processed unlawfully, you can lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

8. Cookies

We use necessary cookies, without which the website and checkout do not work. We use statistics and marketing cookies only with your consent, which you can give or withdraw in the cookie banner or in your browser settings.

9. Children's data

The store is not intended for children, and we do not knowingly collect children's personal data. If you believe we have received a child's data, please contact us and we will delete it.