Privacy Policy

Last updated: July 31, 2026

This Privacy Policy describes how giroflow (giroflow Limited) collects, uses, and protects your personal information when you visit our website and interact with our services. We are committed to protecting your privacy and handling your data responsibly in accordance with applicable data protection regulations.

Who We Are

We operate an e-commerce platform specializing in artisan chocolate truffle and praline gift tower box sets from Giroflow. As the data controller, we are responsible for how we collect and use your personal information. We take your privacy seriously and have implemented measures to safeguard your data throughout your interaction with our website.

Information We Collect

We collect information in several ways to provide and improve our services:

Contact information you provide when requesting quotes or inquiries (name, email, phone number, address)
Order and transaction data when you make purchases (billing address, payment details, product preferences)
Usage data automatically collected through cookies and analytics tools (pages visited, time spent, device information)
Communication data from emails, messages, or support inquiries you send to us
Technical data such as IP addresses and browser information to optimize site performance

Legal Basis for Processing

We process your personal information based on the following legal grounds:

Consent: When you explicitly agree to receive marketing communications or consent to specific data processing activities
Contractual necessity: To fulfill orders and provide services you request
Legitimate interests: To improve our services, prevent fraud, and maintain website security
Legal obligation: When required by applicable laws and regulations

How We Use Your Information

We use the information we collect for legitimate business purposes including processing and fulfilling your orders, providing customer support, personalizing your experience, sending promotional communications with your consent, analyzing website usage to improve our services, preventing fraud and security threats, and complying with legal obligations. We will not sell or rent your personal information to third parties without your explicit consent.

Data Retention

We retain your personal information only as long as necessary to provide our services and comply with legal obligations:

Contact form inquiries: up to 24 months after your last interaction with us
Order and transaction data: up to 7 years (as required for accounting and tax purposes)
Analytics and cookie data: up to 14 months from collection date
Server logs and technical data: up to 12 months
Marketing communications data: until you unsubscribe or withdraw consent

Your Privacy Rights

You have the following rights regarding your personal information:

Right to access: You can request a copy of the personal data we hold about you
Right to rectification: You can correct inaccurate or incomplete information
Right to erasure: You can request deletion of your data in certain circumstances
Right to restrict processing: You can limit how we use your information
Right to data portability: You can request your data in a structured, portable format
Right to object: You can object to marketing communications and certain processing activities
Right to withdraw consent: You can withdraw previously given consent at any time

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience, analyze website traffic, remember your preferences, and deliver targeted content. Cookies are small text files stored on your device that help us understand how you use our site. We use both session-based and persistent cookies. You can control cookie settings through your browser preferences, though some features may not function properly if cookies are disabled. For detailed information about how we use cookies, please refer to our separate Cookie Policy.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. Our website uses encryption for sensitive data transmission, secure payment processing systems, and restricted access to personal information. However, no method of data transmission over the internet is completely secure, and we cannot guarantee absolute security. If you believe your information has been compromised, please contact us immediately.

Supervisory Authority

If you believe we have violated your privacy rights or data protection regulations, you have the right to lodge a complaint with the relevant data protection authority. In Latvia, the competent authority is the Data State Inspectorate (Datu valsts inspekcija). You can submit a complaint through their official website or contact them directly. Filing a complaint does not prevent you from seeking other legal remedies.

Third-Party Services

Our website may integrate with third-party services for payment processing, analytics, and marketing purposes. These providers have their own privacy policies and data protection practices. We carefully select partners who meet our data protection standards. We do not authorize these services to use your information for their own marketing purposes without your consent. We remain responsible for third-party services' handling of your data under our oversight.

Policy Updates

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of significant changes by posting the updated policy on our website with a revised "Last updated" date. Your continued use of our website following such notifications constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.

Contact Us

If you have questions about this Privacy Policy, how we handle your data, or wish to exercise your privacy rights, please reach out to us:

Email: [email protected]

Phone: +371 67 123 458

Address: Krisjana Barona Street 56, giroflow, LV-1011, Latvia

We typically respond to inquiries within 10 business days. If you prefer, you can submit a formal data subject access request in writing to the address above.