legal

Privacy Policy

1. General Terms

This Privacy Policy describes how SIA "NOLA PROFESSIONAL" ("we", "us", or "our") collects, uses, and protects your personal data when you use our website and services.

The data controller responsible for your personal data is:

  • Company: SIA "NOLA PROFESSIONAL"
  • Registration No.: 40203639574
  • Address: Ozolciema iela 34 - 58, Rīga, LV-1058, Latvia
  • Email: info@nolaprofessional.com
  • Phone: +371 27805054

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Latvian data protection laws.

2. Data Collection & Storage

We collect personal data through the following methods:

  • Information you provide directly when creating an account, placing orders, or contacting us
  • Information collected automatically when you browse our website (cookies, IP address, device information)
  • Information from third-party services when you use social login or payment services

You are responsible for ensuring that the personal data you provide is accurate and up-to-date. Please inform us of any changes to your personal information.

If you submit a product review, the review content, your rating, and the name displayed on your account are published publicly on the corresponding product page. You can request anonymization of past reviews by deleting your account.

3. Customer Data Processing

Types of Data We Process

  • Identity data: first name, last name
  • Contact data: email address, phone number, shipping and billing addresses
  • Transaction data: order history, payment information, delivery preferences
  • Technical data: IP address, browser type, device information, cookies
  • Communication data: your correspondence with us, preferences, feedback

Legal Basis for Processing (GDPR Article 6)

We process your personal data based on the following legal grounds:

  • Contract performance: to fulfill orders and provide our services to you
  • Legal obligation: to comply with tax, accounting, and other legal requirements
  • Legitimate interests: to improve our services, prevent fraud, and communicate with you
  • Consent: for marketing communications and non-essential cookies (where applicable)

Data Retention

We retain your personal data for as long as necessary to fulfill the purposes for which it was collected, typically for the duration of our business relationship plus any legally required retention periods. Order and transaction data is retained for at least 5 years to comply with Latvian tax and accounting law.

Third-Party Data Sharing

We may share your personal data with the following categories of third parties:

  • Delivery partners (Omniva, DPD) to fulfill your orders
  • Payment processors to process your payments securely
  • IT service providers who help us operate our website and systems
  • Authentication providers (Google) if you choose to sign in using your Google account

Payment processing is provided by makecommerce.lv platform, so our company transfers necessary personal data to the platform owner Maksekeskus AS.

Transfers Outside the EEA

Most of our service providers store your data within the European Economic Area. If you sign in using your Google account, basic profile data (name, email) is transferred to and from Google LLC in the United States, relying on the EU-US Data Privacy Framework and Standard Contractual Clauses.

4. Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access: You can request a copy of your personal data
  • Right to rectification: You can request correction of inaccurate data
  • Right to erasure: You can request deletion of your data ("right to be forgotten")
  • Right to restriction: You can request that we limit processing of your data
  • Right to data portability: You can request your data in a structured, machine-readable format
  • Right to object: You can object to processing based on legitimate interests or for direct marketing
  • Right to withdraw consent: Where we rely on consent (such as marketing newsletters), you can withdraw at any time by clicking the unsubscribe link in our emails or contacting us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Account holders can delete their account directly from Account Settings, which removes saved profile data, addresses, and wishlist items, and anonymizes any reviews you have submitted. To exercise any of the other rights listed above, please contact us at info@nolaprofessional.com. We will respond within 30 days.

You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) if you believe your data protection rights have been violated.

5. Final Provisions

We reserve the right to update this Privacy Policy at any time. We will notify you of significant changes by posting a notice on our website or sending you an email.