INFORMATION REGARDING DATA PRIVACY

Who is responsible for your personal data?

Royal Present Embroidery SIA, registration number 50203240321, Priedaines iela 13-5, Riga, LV-1029, Latvia, is the controller responsible for personal data processed in connection with royal-present.com and our customer relationships.

This policy explains the personal data processed through our website, the purposes and legal bases of processing, and your data protection rights. For privacy enquiries or requests, contact [email protected].

Customer accounts

We process the account and contact information you provide to create and manage your customer account, authenticate access and make purchased designs available. Processing necessary to provide these services or take steps at your request before a purchase is based on Article 6(1)(b) GDPR.

Technical information needed to protect accounts and investigate unauthorised access is processed on the basis of our legitimate interests in website and account security under Article 6(1)(f) GDPR. Creating an account does not, by itself, constitute consent to receive marketing emails.

Enquiries and customer support

When you contact us, we process the contact details, order information and other information you choose to provide so that we can respond and resolve your enquiry. Processing related to a purchase or a request before purchasing is based on Article 6(1)(b) GDPR. Other enquiries are handled on the basis of our legitimate interest in responding to communications under Article 6(1)(f) GDPR. Records required to meet legal obligations are processed under Article 6(1)(c) GDPR.

Marketing emails

We send newsletters and promotional emails on the basis of your separate consent under Article 6(1)(a) GDPR. Creating an account or making a purchase does not automatically subscribe you to marketing emails.

You may withdraw your consent at any time using the unsubscribe link in a marketing email or by contacting [email protected]. Withdrawal does not affect the lawfulness of processing carried out before you withdrew your consent.

Order confirmations, sign-in links, download information and other messages necessary to provide the service or meet legal obligations are separate from marketing emails.

Cookies and similar technologies

Strictly necessary cookies support functions such as account access, the shopping cart and preferences required to provide the service you request. These cookies do not require consent where the applicable legal exemption for strictly necessary technologies applies.

Non-essential analytics and advertising cookies or similar technologies are used only after you give consent. Related personal data processing based on consent relies on Article 6(1)(a) GDPR. You can refuse these technologies or withdraw your consent through the website’s cookie controls.

Refusing optional cookies does not prevent you from purchasing designs. Blocking strictly necessary cookies in your browser may prevent essential website functions from working. You can also delete stored cookies through your browser settings.

How long we keep personal data

Retention depends on the purpose and type of information. Account and order information is kept while needed to manage the customer relationship, provide access to purchased designs and handle related requests. Information in support enquiries is kept while needed to resolve the matter and address related claims.

Accounting and tax records are retained for the periods required by applicable law. Information needed to establish, exercise or defend legal claims may be retained for the relevant limitation period and while a dispute remains unresolved.

Marketing information is retained while your consent remains valid. After you unsubscribe, a limited record may be retained where necessary to respect your opt-out or demonstrate compliance. Technical data must be retained only for the period necessary for its specific operational or security purpose. Data that is no longer needed is deleted or anonymised.

Your data protection rights

Subject to the conditions in the GDPR, you may request access to your personal data, correction, deletion, restriction of processing or data portability. You may object to processing based on legitimate interests for reasons relating to your particular situation, and object to direct marketing at any time.

Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal. The GDPR also provides safeguards concerning decisions based solely on automated processing that produce legal or similarly significant effects.

Send requests to [email protected]. We may request information reasonably necessary to verify your identity. We normally respond within one month. If an extension is permitted because of the complexity or number of requests, we will explain it within that first month.

You may lodge a complaint with Latvia’s Data State Inspectorate or another competent data protection authority. Contacting us first is not a condition for lodging a complaint.