Privacy Policy

1. Personal Data Collected by Us

In this policy, "personal data" refers to any data that identifies you or can reasonably be associated with you. To provide our services and fulfill our contractual obligations, we collect and process the following categories of personal data:

1.1 Your full name, shipping and billing addresses, telephone number and email address.

1.2 Information required to process your payments, such as credit or debit card details, transaction records and other billing information.

1.3 A record of your transactions, including the products you have viewed, purchased, returned or exchanged.

1.4 Records of your correspondence with us, including customer service inquiries and feedback you provide.

1.5 Information about the device, browser and network connection you use to access our services, including your IP address and other unique identifiers.

1.6 Information about how you navigate and use our services, such as the pages you visit and the features you use.

We may obtain personal data from various sources, including directly from you, automatically via cookies and similar tracking technologies during your navigation of the website, and from third-party service providers or partners that are essential to the operation of our business.

2. How We Use Your Personal Data

We process your personal data for several key purposes, depending on how you interact with the services:

2.1 To provide, customize, and improve our services, we use your information to fulfill our contract with you. This includes processing your payments, fulfilling your orders by organizing shipping, and handling returns, for which we use your identity and contact details, financial and payment information, and trading and activity data. This processing is based on contractual necessity (Art. 6(1)(b) GDPR), and transaction-related data is retained for 10 years. We also use your data, including technical and interaction data, to personalize your experience, save your preferences, and suggest products based on your activity. This is based on our legitimate interests (Art. 6(1)(f) GDPR) in improving and personalizing the services, and this data is retained for one month after your last use of the website.

2.2 For marketing and advertising purposes, we may send you promotional offers and updates via email or SMS based on your explicit consent (Art. 6(1)(a) GDPR), using your identity and contact details as well as commercial and activity data. Furthermore, based on our legitimate interests (Art. 6(1)(f) GDPR), we may display advertising on the website that is relevant to your interests by using your purchase history and browsing activity, which includes your commercial and activity data, technical data, and interaction data. Data used for these marketing purposes will be retained for 5 years from your last interaction or until you withdraw your consent.

2.3 For risk management and to protect the website and our customers, we use your identity and contact details, financial and payment data, technical data, and interaction data to verify transactions, monitor potentially fraudulent or illegal activities, and ensure the security of your payments. This processing is based on our legitimate interests (Art. 6(1)(f) GDPR) in maintaining a secure platform. Data used for these purposes is retained for one month after your last use of the website, while data relating to specific security incidents may be retained for up to 10 years.

2.4 For customer service and relationship management, we use your identity and contact details, communication data, and commercial and activity data to provide customer support, answer your questions, and keep you informed about your orders. Our legal basis for this processing is contractual necessity (Art. 6(1)(b) GDPR) for inquiries regarding your orders, while for general inquiries, we rely on your consent when you contact us (Art. 6(1)(a) GDPR). Data used for customer service purposes will be retained for 10 years from the date of your last communication with us.

2.5 For the purpose of law enforcement and the protection of rights, we may process your information to comply with applicable laws, respond to lawful requests from authorities, enforce the Terms and Conditions, or protect our legal rights. This may include all information relevant to the matter, encompassing all categories of data we collect. Our legal basis is a legal obligation (Art. 6(1)(c) GDPR) for compliance with the law and our legitimate interests (Art. 6(1)(f) GDPR) for safeguarding our rights. Data will be retained for the legally required period (e.g., 10 years for financial records) or for the duration of any legal proceedings and a subsequent period that takes into account applicable limitation periods.

3. How We Share Your Personal Data

In order to operate our business and provide our services, we may share your personal data with the following categories of trusted partners:

3.1 We share necessary transaction information with secure payment service providers to authorize and securely process your payments.

3.2 We work with service providers who perform services on our behalf, such as IT management, data analysis, marketing, customer support, and shipping and fulfillment. We only provide them with the information they need to perform their specific function.

3.3 We may share information within our group of companies (e.g., with a parent company or subsidiaries). If we are involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.4 We may disclose information to comply with the law, enforce the Terms and Conditions, or protect the rights, property, or safety of the company, our users, or others.

Any disclosure of personal data is carried out in accordance with the principle of data minimization. We maintain legally binding data processing agreements with our third-party service providers to ensure the confidentiality, integrity, and security of your data in accordance with the General Data Protection Regulation (GDPR).

4. Your rights and choices

In accordance with applicable data protection laws, you as a data subject have the right to exercise the following rights with regard to your personal data:

4.1 You have the right to receive a copy of the personal data we hold about you. This will allow you to check what data we have and ensure that we are processing it lawfully. You can request this information to understand exactly what we have collected, such as your name, email address, purchase history, or other data you have provided.

4.2 If you notice that personal data we have stored about you is incorrect or incomplete, you have the right to ask us to correct it. For example, if your address is misspelled or your telephone number has changed, you can request an update to our records.

4.3 You have the right to request that we delete your personal data. This right applies in certain situations, for example, if the data is no longer necessary for the purpose for which it was collected, or if you withdraw your consent and there is no other legal basis for us to process it.

4.4 You have the right to restrict how we use your data without necessarily deleting it. This right can be exercised if the accuracy of the data is contested or if the processing is unlawful, but you do not wish the data to be deleted. We may continue to store your data, but we may not use it for other purposes.

4.5 You can request to receive your personal data in a structured, commonly used and machine-readable format, which will allow for the easy transfer of your data from one service to another.

4.6 You have the right to object to our processing of your personal data, in particular if we process it based on our legitimate interests. If you object, we must cease processing your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or for the establishment, exercise or defense of legal claims. This right also allows you to object to the use of your data for direct marketing purposes.

To submit a request to exercise any of your rights, please contact us using the methods outlined in Section 11 of this policy. We reserve the right to verify your identity before processing any such request to ensure the security of your personal data.

You can manage your marketing communication preferences at any time. All promotional emails we send include an unsubscribe link, allowing you to opt out of future correspondence.

5. Complaints

If you have a complaint about how we process your personal data, we recommend that you first contact us directly using the contact details provided in Section 11 to allow for a timely resolution. You always have the right to lodge a complaint with your local data protection authority. Depending on your jurisdiction, you may also have the right to appeal our decision on your complaint by contacting us.

6. Use of cookies and other tracking technologies

This website uses cookies and similar tracking technologies to improve and personalize your experience, analyze website performance, and for marketing purposes. A cookie is a small data file that is placed on your device and allows our servers to identify your browser and device on subsequent visits.

Types of cookies we use:

Strictly necessary cookies – these cookies are essential for the operation of the website and the provision of services. They enable core functionalities such as your authentication, session management, and secure transactions. According to applicable law, these cookies do not require your prior consent.

Performance and analytics cookies – These cookies collect aggregated data about your interaction with the website, such as page visits and traffic sources, solely for the purpose of improving website functionality. The legal basis for the use of these cookies is your explicit consent.

Targeting and advertising cookies – These cookies are designed to track your browsing activity on websites in order to create a profile of your interests and deliver targeted advertising. Their use is subject to your prior explicit consent.

You can manage cookie settings through your browser settings. For further instructions, please refer to the help pages of browsers such as Chrome, Firefox, or Safari.

7. Security and storage of your data

We have implemented and maintain appropriate technical and organizational security measures designed to protect your personal data against accidental or unlawful destruction, loss, alteration, or unauthorized access. However, no method of transmission over the Internet or method of electronic storage is completely secure.

We will only retain your personal data for as long as necessary to fulfill the purposes for which it was originally collected, including fulfilling any legal, accounting or reporting obligations or resolving disputes.

8. Our Privacy Policy for Children

This website is restricted to users aged 18 and over. We are not responsible for the data collection of minors who do not comply with this restriction. We do not knowingly collect personal data from individuals under the age of 18.

9. Third-party websites

This website may provide links to external websites for your convenience. We do not endorse the content, security, or privacy practices of such third-party websites and accept no liability for them. Accessing a third-party website is at your own risk, and we recommend that you review its respective policies.

10. Changes to the policy

We reserve the right to amend this Privacy Policy at any time to reflect changes in our practices or for other operational, legal, or regulatory reasons. The revised policy will be posted on this page along with the updated effective date. Your continued use of the website after the posting of changes constitutes your acceptance of such revised Privacy Policy.

11. Contact information

If you have any questions, concerns, or claims regarding this privacy policy or your data, please contact the company:

By email: info@glpira.com

Via our contact form: https://support.glpira.com/hc/requests/new

By post: SIA SHORTFUL AI, Rupniecibas 42-13, Valmiera, LV-4201, Latvia