Privacy Policy

Data controller

The controller of your personal data is Mazās Lapsas, SIA, registration number 40203614710, registered address Dārzaugļu iela 1-307, Riga, LV-1012, Latvia. For questions about the processing of personal data, please write to info@santamieriiga.com.

Data we process

Messages and the contact form

If you contact us through the contact form, by email, Instagram, Facebook or WhatsApp, we process your name, contact details and the content of your message.

Brooch orders

When you order a brooch, we process your name, email address, your pet's name, your message, any discount code and the pet photographs you upload. If the brooch is shipped, we also process the recipient's name, address and telephone number.

Embroidery class

When you book a class, we process your name, email address, telephone number (if provided), the selected dates, the number of seats and whether the class has been paid for. We also keep a list of participants for each class.

Payments

Online payments are processed by a licensed payment service provider. We receive only information on whether the payment was successful and which payment method was used. We do not see or store your card details.

Cookies

The website uses only essential cookies. One stores your chosen language, and two others are used for signing in to the website's administration area. No analytics or advertising cookies are used. Should they be introduced in the future, we will ask for your consent first.

Purposes and legal basis

• Fulfilling your order or booking and communicating with you about it. Legal basis: performance of a contract.
• Responding to your messages and enquiries. Legal basis: our legitimate interests.
• Keeping accounts and meeting tax requirements. Legal basis: compliance with a legal obligation.
• Publishing a photograph of your pet. Legal basis: your consent.

Photographs

Santa always asks for your permission before publishing a photograph of your pet. The finished brooch is Santa's work and may be shown in the portfolio and on social media. If the brooch is intended as a gift for a specific date, please let us know, and nothing will be published before that date so as not to spoil the surprise. At your specific request, Santa may decide not to publish any photographs at all.

Recipients of data

We do not sell your personal data. It is shared only with service providers that help us provide our services, and only to the extent they need:

• Cloudflare: website hosting, database and photo storage;
• Resend: sending emails, such as confirmations;
• Google: the info@santamieriiga.com mailbox;
• our accountant: invoices and payment records;
• delivery service providers: name, address and telephone number for shipping a brooch.

Cloudflare, Resend and Google may process data outside the European Economic Area. In such cases, safeguards recognised in the European Union are applied, such as the standard contractual clauses approved by the European Commission.

Retention periods

Orders, including uploaded photographs, bookings and payment records are kept for five years, as required by Latvian accounting legislation, and are then deleted. Messages received through the contact form are kept for 24 months after the last contact.

Security

We use recognised industry security measures to protect your personal data against unauthorised access, disclosure or misuse. However, no online system is completely secure, and we therefore cannot guarantee absolute security.

Your rights

You have the right to access your personal data, have it corrected or deleted, restrict or object to its processing, and receive it in a portable format. You may withdraw your consent to the publication of photographs at any time. To exercise these rights, write to info@santamieriiga.com, and we will respond within one month. If you believe that your personal data is being processed incorrectly, you may lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).

Managing cookies

You can manage or delete cookies in your browser settings. If you disable them, the website may not remember your chosen language.