Privacy Policy

Who we are

The controller of your personal data is SIA "World Of Women", registered in Latvia, reg. No. 40203618290, VAT No. LV40203618290, legal address: Grostonas iela 21-118, Rīga, LV-1013, Latvia, operating the online store wowshop.lv ("WOWSHOP", "we"). For any privacy matter, contact us at info@wowshop.lv.

What data we collect

• Account data — name, e-mail address, phone number, password (stored as a hash), or your Google account e-mail if you sign in with Google.
• Order data — delivery address, chosen parcel locker or courier details, purchased items, order history, payment status. We never see or store your card number or bank credentials — payment is completed with the payment provider (BluOr Bank, PayPal).
• Newsletter data — your e-mail address when you subscribe.
• Technical data — cookies strictly needed to run the store (cart, sign-in session, language, cookie choice, wishlist). See the Cookie Policy for the full list.

Why we process it (legal bases)

• To fulfil your order and deliver it — performance of a contract (GDPR Art. 6(1)(b)).
• To create and operate your account — performance of a contract.
• To send the newsletter you subscribed to — your consent (Art. 6(1)(a)), withdrawable at any time via the unsubscribe link or by writing to us.
• To comply with accounting and tax law — legal obligation (Art. 6(1)(c)).
• To defend against fraud and secure the store — legitimate interest (Art. 6(1)(f)).

Who receives your data

We share data only with service providers needed to run the shop, under data-processing agreements:

• Payment providers: BluOr Bank AS (Latvia), PayPal (Europe) S.à r.l.
• The carrier you choose at checkout — Omniva, DPD, Latvijas Pasts or FedEx — who receives your name, phone, address or chosen locker, together with our shipping platform.
• IT service providers that host and operate our website, database and video content.
• Google Ireland Ltd., only if you choose “Continue with Google”.

Transfers outside the EU/EEA

Some of our IT and payment service providers may process data in the United States. Such transfers rely on the EU–US Data Privacy Framework or Standard Contractual Clauses.

How long we keep it

• Order and invoice data — 5 years (Latvian accounting law).
• Account data — while your account exists; deleted on request.
• Newsletter e-mail — until you unsubscribe.
• Cookie choice — 12 months.

Your rights

You may request access to, correction or deletion of your data, restriction of processing, data portability, and you may object to processing based on legitimate interest. Where processing relies on consent you may withdraw it at any time. Write to info@wowshop.lv — we answer within 30 days.

You also have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).