Privacy & Cookie Policy — i-Light.lv
1) Controller & Contacts
SIA “i-Light.lv” • Reg. No. 40103561417
Address: Brīvības gatve 195-22, Rīga, LV-1039, Latvia
Email: veikals@i-light.lv • Phone: +371 22331877
Supervisory authority: Data State Inspectorate of Latvia (dvi.gov.lv). You have the right to lodge a complaint.
2) Scope
This policy applies to website visitors, buyers, user accounts and anyone contacting us.
3) Data We Process
- Orders: name, surname, address(es), email, phone, company details (where applicable), purchase history.
- Payments: payment identifiers and status (card details are processed by the payment provider).
- Account/Support: login data, support messages and requests.
- Technical: IP, device/browser info, error logs, security events.
- Cookies & similar technologies: see the Cookie Policy below.
4) Purposes & Legal Bases (GDPR Art. 6)
- Order fulfilment, delivery, returns — contract 6(1)(b).
- Accounting, taxes, warranties — legal obligation 6(1)(c).
- Site operation/security, fraud prevention — legitimate interests 6(1)(f).
- Analytics & marketing (GA4, Google Ads, Meta Pixel) — consent 6(1)(a) (activated only after consent via the banner).
5) Recipients (Sharing)
- Payments: Klix by Citadele (and other chosen processors).
- Delivery: Omniva, Latvijas Pasts and other couriers.
- Hosting/IT maintenance: our server & email providers; error monitoring.
- Analytics/marketing (after consent): Google (GA4/Ads), Meta (Facebook/Instagram).
We sign data processing agreements with processors and ensure appropriate safeguards.
6) Transfers Outside the EEA
Where providers are outside the EEA, we use EU Standard Contractual Clauses and other appropriate safeguards.
7) Retention
- Orders/Accounting: up to 10 years (as required by law).
- Account: until deletion + reasonable backup period.
- Support/communications: until the case is closed (typically up to 2 years).
- Cookies: see the Cookie Policy.
8) Your Rights
Access, rectification, erasure (“right to be forgotten”), restriction, data portability, objection (for legitimate interests), and withdrawal of consent (does not affect prior processing). To exercise your rights, email veikals@i-light.lv. You can complain to the Data State Inspectorate.
9) Children
We do not knowingly collect personal data of children under 16 for commercial purposes. Contact us if such data were provided by mistake.
10) Security
We apply appropriate technical and organisational measures (TLS/HTTPS, access control, firewalls, backups, logs). No internet transmission is 100% secure.
11) Changes
We may update this policy; the latest version is effective upon publication on our website.
Cookie Policy
1) What are cookies?
Small text files stored on your device that enable core site functions, remember settings and — with your consent — allow analytics and targeted advertising.
2) Categories we use
- Necessary (always on): session, cart, payment flow, preferences, security.
- Analytics (after consent): Google Analytics 4 events (page views, e‑commerce).
- Marketing (after consent): Google Ads conversions/remarketing, Meta Pixel.
3) Consent Mode v2
Before consent the Google signals ad_storage, analytics_storage, ad_user_data, ad_personalization are denied; after consent — granted. You can change your choices at any time.
4) Third‑party providers
Google Ireland Ltd. (GA4/Ads), Meta Platforms Ireland Ltd. (Pixel), Klix by Citadele, etc. Their services/cookies may operate outside the EEA — we apply safeguards (see Section 6).
5) Typical retention
- Necessary: session–30 days.
- Analytics/Marketing: 3–24 months or until you withdraw consent (provider‑dependent).
6) Withdraw consent
Open “Cookie settings” and reject categories or delete cookies in your browser.