Aroma Sense Baltic Privacy Policy

Effective from: 26 June 2026

This privacy policy explains how SIA DESIGNSHOT, registration number 40103925602, registered address: Dārziņu 23. līnija 46, Rīga, LV-1063, processes personal data in the online store. www.aromasense.lv.

SIA DESIGNSHOT is the controller of personal data. If you have any questions regarding the processing of personal data, you can contact us by email at: info@aromasense.lv.

1. Purposes and legal basis of personal data processing

We process personal data in order to ensure the operation of the online store, create and maintain customer accounts, receive and fulfil orders, organise the delivery of goods, process payments, communicate with customers, and comply with obligations laid down in applicable laws and regulations.

The processing of personal data is carried out on the basis of one or more of the following legal grounds:

the conclusion and performance of a contract;
taking steps at your request prior to entering into a contract;
the fulfilment of a legal obligation;
the legitimate interests of the controller, for example, to protect its legal rights, prevent fraud, administer orders, and resolve disputes;
Your consent, where the specific processing is based on consent.

If the provision of personal data is necessary for the conclusion or performance of a contract and you do not provide such data, we may not be able to create a customer account, process your order, accept payment, or ensure delivery.

2. What personal data we process

Depending on the service used, we may process the following personal data:

first name and surname;
email address;
phone number;
delivery address;
billing address;
customer account information, including the password in a protected form;
information about orders placed;
information related to the execution of payment;
information that you provide during the checkout process or in any other communication with us;
technical information, to the extent necessary for the operation, security and administration of the website.

The phone number is a mandatory data field because it is necessary for processing the order, arranging delivery, and contacting the customer where required for the execution of the order.

For the purpose of creating and maintaining a customer account, we process the data necessary for authentication, displaying order history and ensuring a more convenient shopping experience.

3. Recipients of personal data

In order to ensure the operation of the online store, we may transfer personal data to third parties only to the extent necessary. Personal data may be disclosed to the following recipients or categories of recipients:

to delivery service providers, including Omniva and VAS Latvijas Pasts;
to payment service providers, including PayPal, Stripe or MakeCommerce, depending on the payment method available at the given time;
to information technology, hosting, e‑store maintenance and technical support service providers;
to accounting, legal and other professional service providers;
to state and municipal authorities in cases provided for by legal acts.

Only the data necessary for delivery are transferred to delivery partners, such as the recipient’s name, surname, address, phone number, and other delivery‑related information. Payment service providers process personal data in accordance with their own terms of service and privacy policies.

4. Retention periods of personal data

We store personal data only for as long as necessary for the purpose for which it was collected or as required by the applicable legal acts.

Client account data are stored as long as the client account is active or until a request to delete the account is received, insofar as there is no other legal basis for further data retention.
Order, delivery, payment, and accounting data may be stored for as long as necessary for the performance of the contract, handling of claims, protection of rights, and compliance with legal requirements.

Communications data and submissions may be stored for a reasonable period in order to review requests and claims and to protect our legitimate interests.

5. Your rights

According to the GDPR, you have the right to:

to obtain information about the processing of your personal data;
to request access to your personal data;
to request the rectification of inaccurate personal data;
to request the erasure of personal data where there is a legal basis;
to request the restriction of the processing of personal data;
to object to the processing where it is based on legitimate interests;
to exercise the right to data portability, insofar as it is applicable;
to withdraw consent at any time, where the processing is based on consent.

To exercise your rights, you can contact us by sending an email to info@aromasense.lv or by using the contact details provided in our online store info@aromasense.lv

6. Complaints

If you believe that the processing of your personal data does not comply with legal requirements, you have the right to lodge a complaint with the Data State Inspectorate. The Data State Inspectorate is the supervisory authority for personal data protection in Latvia.

Information on submitting complaints is available on the website of the Data State Inspectorate: www.dvi.gov.lv.
The publicly available contact details include the address Elijas iela 17, Rīga, LV-1050, the email pasts@dvi.gov.lv and the phone number +371 67223131.

7. Personal data security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, unlawful processing, loss, destruction, or damage. Access to personal data is granted only to those persons who need it for the performance of their job duties or for the provision of services.

Passwords and other sensitive authentication information are not stored in plain text. However, no method of data transmission or storage can be considered absolutely secure, and therefore complete security cannot be guaranteed.

8. Changes to this policy

We reserve the right to periodically update this Privacy Policy so that it complies with the applicable legal acts and reflects the actual processing of personal data. The current version of the Privacy Policy is always published in the online store www.aromasense.lv.