Last updated: 27 October 2026
This page adds ELITÉRA-specific details to our Privacy Policy: how we handle consultations, your photos and Korean beauty requests, and how long we keep your data. We keep it simple: we only collect what we need, we never sell your data, and you can ask us about your data at any time.
1. Who is responsible for your data
The controller of your personal data is BLUMBERGA IK (trading as ELITÉRA), registration no. 40002225301, Aleksandra Čaka iela 126, Rīga, LV-1012, Latvia. Email: eliteraextensions@gmail.com.
For any question about your data or to use your rights, write to this email. We reply within one month.
2. What data we collect and why
Online store orders
When you place an order, we process your name, email, phone number, billing and delivery address, the products you order and payment details. Payments are processed by Shopify and its payment partners. We never see your full card details.
Purpose: to process and deliver your order, send order emails, handle returns and complaints. Legal basis: performance of a contract (Art. 6(1)(b) GDPR) and our legal accounting obligations (Art. 6(1)(c) GDPR).
Online hair consultations
When you book a paid consultation, we process your name, email and phone number, the information you share about your hair and wishes (for example a description, photos, desired length and colour), your order details and the personal discount code issued to you.
Purpose: to contact you, arrange a time, hold the consultation, select hair for you and apply your consultation credit. Legal basis: performance of a contract (Art. 6(1)(b) GDPR).
Consultations take place via Zoom or WhatsApp, as you choose. These providers process connection data under their own privacy terms. We do not record consultations. Please send only the photos needed for the consultation.
Your photos are used only for your consultation. We never publish them or share them with anyone, including on social media or as before-and-after examples, unless you have given us separate, explicit permission in writing. You can withdraw that permission at any time.
Korean beauty (K-beauty) requests
Korean products are not paid online. When you send a request through the form on the product page, we receive your name, phone number, email, the products and quantities you chose, and your comment. The form is delivered to our email inbox.
Purpose: to contact you and arrange pick-up and payment in person in Riga. Legal basis: steps taken at your request before entering into a contract and performance of a contract (Art. 6(1)(b) GDPR).
Messages and contact form
When you write to us by email, through the contact form or on social media, we process your name, contact details and the content of your message. Purpose: to answer you. Legal basis: performance of a contract or our legitimate interest in answering your question (Art. 6(1)(f) GDPR).
Newsletter
If you subscribe, we use your email to send news and offers. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe at any time with the link at the end of every email.
Cookies
Essential cookies (language, currency, cart and security) are needed for the store to work and are always on. Analytics and marketing cookies are used only if you accept them in the cookie banner. You can change your choice at any time with the “Cookie preferences” link at the bottom of every page. Legal basis: your consent (Art. 6(1)(a) GDPR).
3. Who receives your data
We share your data only with service providers we need to run our business, and only as much as they need:
- Shopify: our store platform, which also processes payments;
- Google: our email service;
- Zoom or WhatsApp (Meta): only for consultations, if you choose them;
- delivery carriers: your name, phone and address, only for shipped orders;
- public authorities, only where the law requires it.
We do not sell your personal data.
Some of these providers may process data outside the European Economic Area, for example in the USA. In such cases they use transfer safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
Shopify also processes data about your use of the store to provide and improve its services. More: Shopify Consumer Privacy Policy.
4. How long we keep your data
- Orders, invoices and payment records: 5 years, as required by Latvian accounting law.
- Consultation photos, notes and chats: up to 12 months after your consultation, then deleted.
- K-beauty requests and other messages not linked to an order: up to 12 months, then deleted.
- Newsletter: until you unsubscribe.
- Cookies: according to their expiry shown in the cookie preferences.
If there is a complaint or dispute, we may keep the relevant data until it is resolved.
5. How we protect your data
Only ELITÉRA has access to your data. Our accounts are protected with passwords and two-step verification, and our devices are locked. No method of storing or sending data online is 100% secure, but we take reasonable care to protect it.
6. Your rights
Under the GDPR you have the right to:
- access the data we hold about you and get a copy;
- correct inaccurate data;
- ask us to delete your data, unless we must keep it by law;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw your consent at any time, without affecting earlier processing.
To use your rights, write to eliteraextensions@gmail.com. We may ask you to confirm your identity.
You can also lodge a complaint with the Data State Inspectorate of Latvia (Datu valsts inspekcija), Elijas iela 17, Rīga, LV-1050, www.dvi.gov.lv.
7. Children
Our store is not intended for children under 16, and we do not knowingly collect their data.
8. Changes
We may update this page when our services change. The date at the top shows the latest version.