Privacy Policy

This Privacy Policy explains how the Creora online store collects, uses, stores and protects the personal data of website visitors and customers.

We take the protection of personal data seriously and process personal data in accordance with the European Union General Data Protection Regulation (GDPR), the laws and regulations of the Republic of Latvia, and other applicable legal requirements.

1. Data Controller

Data Controller: Regina Teļicina
Registration number: 12018612960
Address: Sēnītes iela 14, Kļavas, Inčukalna pagasts, Siguldas novads, LV-2141, Latvia
Phone: +371 23778232
Email: creora.art@gmail.com

If you have any questions regarding the processing of your personal data or the exercise of your rights, you can contact us using the email address provided above.

2. Personal Data We Process

Depending on how you use the Creora online store, we may process the following personal data:

  • first name and last name;
  • email address;
  • phone number;
  • delivery address or selected parcel locker;
  • information about your order and purchased products;
  • order value and information about payment status;
  • order history;
  • information contained in correspondence with us;
  • information required to process refunds;
  • IP address and technical information related to the use of the website;
  • information provided by you for the creation of a custom or personalised order.

When placing a personalised order, you may voluntarily provide additional information necessary for its creation, such as a name, date, text, image, photograph, logo, preferred colours, measurements or other individual requirements.

Please provide only the information that is genuinely necessary for us to fulfil your order.

3. Purposes of Processing Personal Data

Personal data may be processed for the following purposes:

  • receiving and processing orders;
  • entering into and performing a sales contract;
  • creating custom and personalised products;
  • processing and confirming payments;
  • arranging delivery of orders;
  • sending information about order status;
  • communicating with customers regarding their orders;
  • handling returns, complaints and claims concerning non-conforming products;
  • processing refunds;
  • maintaining accounting records and complying with other legal obligations;
  • ensuring the operation and security of the online store;
  • preventing fraud and misuse;
  • protecting Creora's legitimate interests and resolving potential disputes;
  • sending marketing communications where an appropriate legal basis exists.

4. Legal Basis for Processing

We process personal data only where there is an appropriate legal basis for doing so.

Performance of a contract
Processing is necessary to place and fulfil your order, receive payment, create the product, arrange delivery, communicate with you regarding the order and handle returns.

Compliance with legal obligations
Certain information must be processed and retained in order to comply with accounting, tax and other applicable legal requirements.

Legitimate interests
Certain personal data may be processed to protect our legitimate interests, for example to ensure website security, prevent fraud, handle complaints and resolve disputes.

Consent
Where processing is based on your consent, for example for certain marketing communications or the use of non-essential cookies, you may withdraw your consent at any time.

5. Payments

Creora uses the MakeCommerce payment platform for processing electronic payments. The service is provided by the licensed payment institution Maksekeskus AS.

When you make a payment, the information necessary to process the payment is transferred to the relevant payment service provider.

Creora does not receive or store your full payment card details, such as the complete card number or CVC/CVV code.

The processing of personal data by the payment institution is also subject to its own privacy policy.

6. Delivery of Orders

To arrange delivery of your order, the necessary personal data is transferred to the delivery service provider selected by you.

Depending on the selected delivery method, these service providers may include Omniva, DPD, Latvijas Pasts or Venipak.

Only the information necessary to deliver the specific order is transferred to the delivery service provider, for example:

  • recipient's first name and last name;
  • phone number;
  • email address, where required for delivery notifications;
  • delivery address or selected parcel locker;
  • other information objectively necessary to complete the delivery.

7. Other Recipients of Personal Data

Where necessary, personal data may be made available to service providers that help us operate the online store.

These may include:

  • payment service providers;
  • delivery and logistics service providers;
  • website hosting and technical maintenance providers;
  • accounting service providers;
  • email and other necessary IT service providers;
  • public authorities and other persons where disclosure is required by law.

Personal data is transferred only to the extent necessary to provide the relevant service or comply with a legal obligation.

We do not sell our customers' personal data to third parties.

8. Personalised Orders

When you order a personalised product, we process the materials provided by you only to the extent necessary to create the product and fulfil your order.

If you provide photographs, images, names, text, logos or other materials, please avoid providing unnecessary personal information that is not required for the creation of the product.

If the materials you provide contain personal data relating to another person, you must have a lawful basis for providing such materials to us and allowing us to use them for the purpose of fulfilling your order.

9. Retention of Personal Data

Personal data is retained only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required by applicable law.

Data relating to orders, payments and accounting documents is retained for the period required by applicable laws and regulations.

Data necessary for handling complaints or resolving disputes may be retained until the applicable limitation period has expired or until the dispute has been finally resolved.

Personal data processed on the basis of consent may be retained until that consent is withdrawn, unless another lawful basis exists for its continued processing.

Once the applicable retention period has expired, personal data is deleted or anonymised unless its continued retention is required by law.

10. Personal Data Security

We take reasonable technical and organisational measures to protect personal data against unauthorised access, accidental loss, alteration, disclosure or destruction.

Access to personal data is provided only where and to the extent necessary to process an order, provide the relevant service or comply with a legal obligation.

11. Your Rights

Under the GDPR and applicable law, you have the right to:

  • obtain information about whether we process your personal data;
  • access your personal data;
  • request correction of inaccurate or incomplete personal data;
  • request deletion of your personal data where provided for by law;
  • request restriction of the processing of your personal data;
  • object to processing based on legitimate interests;
  • receive personal data you have provided in a structured, commonly used and machine-readable format where the right to data portability applies;
  • withdraw your consent at any time where processing is based on consent;
  • lodge a complaint with a personal data protection supervisory authority.

Please note that the right to deletion of personal data is not absolute. We may be required to retain certain information for a period specified by law, for example to comply with accounting or tax requirements.

12. How to Exercise Your Rights

To request information about your personal data, request its correction or deletion, restrict its processing, exercise your right to data portability, withdraw your consent or exercise any of your other rights, please contact us at:

creora.art@gmail.com

To protect your personal data, we may ask you to verify your identity before providing the requested information.

We respond to requests concerning the exercise of data subject rights without undue delay and generally within one month of receiving the request. In circumstances permitted by the GDPR, this period may be extended, in which case the person making the request will be informed.

13. Marketing Communications

If you have consented to receive Creora news, special offers or other marketing communications, the contact details provided for this purpose may be used to send such communications.

You may unsubscribe from marketing communications at any time by using the unsubscribe link included in the message, where available, or by contacting us at creora.art@gmail.com.

Unsubscribing from marketing communications does not affect communications that are necessary for the fulfilment of an order you have already placed.

14. Cookies and Technical Data

The online store may use cookies and similar technologies necessary for the proper functioning of the website, storing user preferences, ensuring security and providing other website functions.

Non-essential cookies for which user consent is required under applicable law are used only after the relevant consent has been obtained.

Detailed information about the cookies used on the website, their purposes, retention periods and how you can manage your preferences is provided in the Cookie Policy.

15. Transfers of Personal Data Outside the European Economic Area

Some of the IT service providers we use may process personal data outside the European Economic Area (EEA).

Where such transfers take place, we use appropriate safeguards provided for under the GDPR, such as an adequacy decision adopted by the European Commission or appropriate contractual safeguards.

16. Complaints and Supervisory Authority

If you have any questions or concerns regarding the processing of your personal data, we encourage you to contact us first:

creora.art@gmail.com

You also have the right to lodge a complaint with the Latvian data protection supervisory authority:

Datu valsts inspekcija
Data State Inspectorate of the Republic of Latvia.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, for example if the operation of the online store, the services we use or applicable legal requirements change.

The current version of the Privacy Policy will always be published on the Creora website.

Contact Information

Regina Teļicina
Registration number: 12018612960
Sēnītes iela 14, Kļavas, Inčukalna pagasts,
Siguldas novads, LV-2141, Latvia
Phone: +371 23778232
Email: creora.art@gmail.com