This privacy policy explains how the Seller collects, uses and processes personal information when you visit or make a purchase from the online shop.

1. What personal data do we process?

We process only the data that is legally required for the execution of transactions and the provision of customer service:

  • Identification details: First name, surname.

  • Contact details: Email address, telephone number.

  • Delivery and invoice details: Delivery address, billing address (if different).

  • Payment details: Transaction details (the payment card details themselves are processed directly within the Maksekeskus AS system; the Merchant does not see them).

  • Technical specifications: IP address, browser type, cookies.

2. Legal basis and purposes

Personal data is processed in accordance with Article 6 of the GDPR:

  • Performance of a contract (Article 6(1)(b) of the GDPR): To process your order, arrange delivery and process payments.

  • Legal obligation (Article 6(1)(c) of the GDPR): To comply with accounting and tax legislation (for example, issuing and retaining invoices).

  • Consent (Article 6(1)(a) of the GDPR): If you have explicitly consented to receiving our news and marketing communications by email. You may withdraw your consent at any time.

3. Data recipients and disclosure to third parties

We only pass on your data to trusted third parties who help us to provide our services:

  1. To the payment institution: Maksekeskus AS (for the processing of invoices and cards).

  2. To our logistics partners: Omniva, Venipak, DPD or Latvijas Pasts (to deliver your parcel in person).

  3. For providers of accounting and IT services, which provides technical support for the online shop. Data is not transferred outside the European Union (EU) or the European Economic Area (EEA).

4. Data retention period

Personal data is retained for as long as is necessary to fulfil the purposes for which it was collected:

  • Accounting documents (invoices) are kept 5 years in accordance with the legislation of the Republic of Latvia.

  • Marketing data (email newsletter subscriptions) is retained until you withdraw your consent (unsubscribe from the newsletter).

5. Your rights (under the GDPR)

You have the following rights in relation to your data:

  • The right to access your data and receive a copy of it.

  • The right to request the rectification of inaccurate data.

  • The right to request the erasure of data ("the right to be forgotten") if it is no longer necessary for the performance of a contract or to comply with legal requirements.

  • The right to restrict processing or to object to it.

  • The right to data portability.

To exercise these rights, please contact us by email: info@lolashes.com. You also have the right to lodge a complaint with the State Data Inspectorate (DVI) if you believe that your rights have been infringed.

6. COOKIES POLICY

Our online shop uses cookies to improve the user experience and ensure the website functions properly.

What cookies do we use?

  • Essential (functional) cookies: These cookies enable the website’s basic functions, such as saving items in the shopping basket and secure authentication. Without these cookies, the online shop cannot function properly.

  • Analytical cookies (optional): Helps us understand how visitors interact with the website (for example, Google Analytics), so that we can improve its performance.

  • Marketing cookies (optional): These are used to show you personalised adverts on other websites.

Cookie management:

The first time you visit the website, a pop-up window will appear asking you to accept or reject optional (analytical/marketing) cookies. You can change or block your cookie settings in your web browser’s settings (Chrome, Safari, Firefox, etc.).

7. Dispute resolution procedure

All disputes shall be resolved through mutual negotiation. If no agreement is reached, the dispute shall be referred to a court of the Republic of Latvia or to the Consumer Rights Protection Centre (PTAC) for resolution. The buyer also has the right to use the European Union’s Online Dispute Resolution (ODR) platform.