Privacy Policy

We are pleased about your interest in our company and products. The protection of personal data is important to us, and we process data fairly, lawfully and transparently. This privacy policy (the "Policy") explains what personal data we collect on the website www.woodenwalldesign.com (the "Website"), for what purposes and on what legal basis we process it, how long we keep it, to whom we disclose it and what your rights are.

The Policy applies to visitors of the Website, registered users, buyers, newsletter subscribers and persons who contact us. If you purchase our products through other sales channels (for example, Amazon or Etsy), the privacy terms of those platforms also apply; the data we receive for order fulfilment is processed by us in accordance with this Policy.

We process personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation, the "GDPR"), the Latvian Personal Data Processing Law and other applicable legislation. The terms used in this Policy (personal data, processing, controller, processor, etc.) have the meanings given in Article 4 of the GDPR.

1. Controller and contact details

The controller of personal data processing is SIA "AW Latvia", unified registration No. 40103525986, registered office: Limbažu iela 2, Smiltene, Smiltenes nov., LV-4729, Latvia ("AW Latvia", "we").

Contact details for privacy matters: e-mail info@awl.lv, telephone +371 27650521, postal address as stated above. You may contact us on any matter relating to the processing of your personal data or this Policy.

2. What personal data we process

We process only the data necessary for the relevant purpose:

a) identification and contact details – name, surname, delivery and billing address, e-mail address, telephone number;

b) account data – username, password (in encrypted form), account settings and order history;

c) order and transaction data – the goods ordered, amounts, chosen delivery and payment method, invoices;

d) payment data – information on the payment status. We do not store payment card details: they are processed by the relevant licensed payment service provider;

e) communication data – your messages sent by e-mail or via the contact form on the Website, and our replies;

f) newsletter data – e-mail address, the fact of sign-up and confirmation (date, time, IP address);

g) technical data – IP address, browser and device type, operating system, pages opened, date and time of access, referring website (server log files);

h) cookie and similar-technology data – see section 5.

3. Purposes, legal bases and retention periods

We keep personal data only for as long as necessary for the relevant purpose or as required by law; thereafter the data is deleted or irreversibly anonymised.

Where processing is based on our legitimate interests (Article 6(1)(f) GDPR), those interests are: ensuring the security of the Website and our IT systems, defending our rights in disputes, maintaining communication with customers and developing our business. You have the right to object to such processing (see section 8).

Providing data is voluntary; however, the data required for order fulfilment (for example, name, delivery address, e-mail) is a precondition for concluding the contract – without it we cannot accept and fulfil an order.

4. Account, newsletters and communication

4.1. Registration on the Website

When you register on the Website, you create a user account. At the time of registration we additionally store the IP address, date and time – this is necessary to prevent misuse of our services and, where required, to investigate violations. You can view and correct your account data in your profile at any time or request deletion of the account by writing to info@awl.lv.

4.2. Newsletters

We send newsletters about our offers only if you have consented to this by signing up on the Website. Sign-up uses a double opt-in procedure: we send a confirmation e-mail to the address provided, and the subscription starts only after you confirm via the link it contains. We store the sign-up IP address, date and time so that we can demonstrate that consent was given (Article 7 GDPR). You can withdraw your consent at any time – every newsletter contains an unsubscribe link, and you can also write to info@awl.lv. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

4.3. Communication

If you contact us by e-mail or via the contact form on the Website, we use the data you provide solely to handle your enquiry and to reply to you.

5. Cookies and similar technologies

Cookies are small text files that the Website stores on your device. Cookies that are not strictly necessary for the operation of the Website are used only with your consent (GDPR and the Latvian Electronic Communications Law), which you give via the cookie consent tool (banner) when you first visit the Website. You can change or withdraw your consent at any time in the cookie settings on the Website, and you can also delete cookies in your browser settings. If you do not give consent, the core functions of the Website will still work; some additional features may not be available.

We use the following categories of cookies on the Website:

a) strictly necessary cookies – enable the core functioning of the Website (for example, the shopping cart, account login, security). They operate without consent, on the basis of our legitimate interest in operating the Website;

b) functional cookies – remember your choices (for example, language);

c) analytics cookies – Google Analytics 4 (see 5.1);

d) marketing cookies – Google Ads and Meta Pixel (see 5.2 and 5.3).

5.1. Google Analytics 4

With your consent, the Website uses the web analytics service Google Analytics 4, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It helps us understand how visitors use the Website and improve it. Google Analytics 4 does not store full IP addresses; data about the use of the Website may be transferred to Google LLC servers in the USA (see section 7). More information: https://policies.google.com/privacy. You can additionally opt out of analytics using the browser add-on at https://tools.google.com/dlpage/gaoptout.

5.2. Google Ads and remarketing

With your consent, we use Google Ads conversion measurement and remarketing features (Google Ireland Limited) to show our advertisements in Google search and the Google advertising network to people who have visited the Website, and to measure the effectiveness of advertising. You can manage your advertising settings at https://adssettings.google.com.

5.3. Meta Pixel (Facebook and Instagram)

With your consent, the Website uses the Meta Pixel, provided by Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland). It allows us to show advertisements on Facebook and Instagram to users who have visited the Website and to measure their effectiveness. With regard to the collection and transmission of data to Meta, we and Meta Platforms Ireland Limited are joint controllers to a certain extent. Meta’s data processing terms: https://www.facebook.com/privacy/policy. You can manage advertising settings in your Facebook/Instagram account settings.

5.4. YouTube videos

The Website may contain embedded YouTube videos in privacy-enhanced mode (youtube-nocookie.com). In this mode, YouTube (Google Ireland Limited) does not store cookies until you play a video. When you play a video, YouTube may process your data in accordance with the Google privacy policy.

6. Recipients of personal data

We disclose your data only where necessary for the relevant purpose, to the following categories of recipients:

a) delivery and logistics service providers (couriers, parcel lockers, freight carriers) – for delivering orders;

b) payment service providers – for payment processing: payment card transactions are processed by a licensed payment service provider (indicated at the time of payment), and, if you choose PayPal, your data required for payment processing is received by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449, Luxembourg), which also processes data in accordance with its own privacy policy (https://www.paypal.com/legalhub/privacy-full), including for fraud prevention;

c) IT, hosting and Website maintenance service providers;

d) accounting, audit, legal and other professional service providers;

e) Google and Meta – for the operation of the tools described in section 5 (only with your consent);

f) state and municipal authorities – where required by law (for example, the State Revenue Service, law enforcement authorities).

With service providers processing data on our behalf (processors), we have concluded contracts in accordance with Article 28 GDPR, and they may process data only on our instructions. We do not sell your personal data to third parties.

7. Transfers outside the EU/EEA

As a rule, we process data in the European Union / European Economic Area. When the Google and Meta tools referred to in section 5 or PayPal are used, certain data may be transferred to companies in the USA (Google LLC, Meta Platforms, Inc., PayPal, Inc.). Such transfers take place on the basis of the European Commission’s adequacy decision of 10 July 2023 on the EU-U.S. Data Privacy Framework – the companies mentioned are certified participants in that framework – and, where applicable, on the basis of standard contractual clauses approved by the European Commission (Article 46 GDPR). You can find out more about the safeguards used by contacting us.

8. Your rights

Under the GDPR you have the following rights:

a) to access your data – to obtain confirmation as to whether we process your data and to receive a copy of it (Article 15 GDPR);

b) to have inaccurate data rectified and incomplete data completed (Article 16);

c) to have data erased ("right to be forgotten") where it is no longer necessary, consent has been withdrawn or the processing is unlawful, and there is no other legal basis or obligation to keep it (Article 17);

d) to restrict processing in the cases provided for by law (Article 18);

e) to data portability – to receive the data you have provided to us on the basis of consent or a contract in a structured, commonly used and machine-readable format and to transmit it to another controller (Article 20);

f) to object to processing based on legitimate interests, on grounds relating to your particular situation, and to object at any time and without justification to the processing of data for direct marketing purposes (Article 21);

g) to withdraw consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Article 7);

h) not to be subject to solely automated decision-making producing legal effects concerning you (Article 22). We do not carry out automated decision-making, including profiling, that would produce legal or similarly significant effects on you.

To exercise your rights, write to info@awl.lv or to our postal address. We reply to requests without undue delay and no later than within one month (in complex cases the period may be extended by a further two months, of which we will inform you). We may ask for additional information to verify your identity so that data is not disclosed to an unauthorised person. Handling of requests is free of charge, except for manifestly unfounded or excessive requests.

9. Right to lodge a complaint

If you believe that the processing of your personal data infringes the GDPR, we invite you to contact us first – we will try to resolve the matter. You always have the right to lodge a complaint with a supervisory authority: in Latvia this is the Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv). If you live in another EU/EEA country, you may also contact the data protection supervisory authority of your country of residence.

10. Data security

We use appropriate technical and organisational measures to protect data: an encrypted connection (TLS/SSL) for data transmission on the Website, encrypted storage of passwords, restriction of access to employees who need it to perform their duties, and regular maintenance of our systems. At the same time, please remember that no one can guarantee complete security of data transmission over the internet; if you prefer, you can also provide information to us by telephone or post.

11. Minors

The Website and the purchases offered on it are intended for persons aged 18 or over. We do not knowingly collect data of minors. If we learn that we have received such data without a legal basis, we will delete it.

12. Changes to this Policy

We may update this Policy from time to time (for example, when the services we use or the legislation changes). The current version, with its effective date, is always available on the Website. In the event of material changes, we will additionally inform you on the Website or by e-mail.