Privacy Policy of laceny.it

1. General Information

1.1. This Privacy Policy explains how laceny.it (operated by ApexGlobal SIA, reg. no. 40203313036, legal address: “Ābeļi”, Priekuļu pag., Cēsu nov., LV-4154, Latvia) collects, processes, and protects personal data of Customers.
1.2. The Policy is prepared in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and other applicable data protection laws.
1.3. By using the Shop and providing personal data, the Customer confirms they have read and agree to this Privacy Policy.

2. Data Controller and Contact

3. Collected Personal Data

The Shop may collect and process the following personal data:

  • Name and surname

  • Delivery and billing address

  • Email address and phone number

  • Payment details (processed securely through third-party providers, not stored by the Shop)

  • Order history and communication records

  • Technical data (IP address, device, browser type, cookies)

4. Purpose and Legal Basis of Processing

Personal data is processed for the following purposes:

  • To process and deliver Customer orders (Article 6(1)(b) GDPR – contract performance)

  • To manage payments and invoices (Article 6(1)(c) GDPR – legal obligation)

  • To provide customer support (Article 6(1)(f) GDPR – legitimate interest)

  • To send marketing communications if the Customer has given consent (Article 6(1)(a) GDPR – consent)

  • To ensure site security and improve services (Article 6(1)(f) GDPR – legitimate interest)

5. Data Retention

  • Order and invoicing data: retained for 5 years in accordance with accounting regulations.

  • Customer accounts: retained while the account is active.

  • Marketing data: retained until consent is withdrawn.

  • Technical and analytical data: retained for up to 24 months.

6. Data Sharing

Personal data may be shared with:

  • Payment processors (e.g., PayPal, Stripe, EveryPay)

  • Delivery partners (e.g., courier and postal services)

  • IT and hosting service providers (e.g., WooCommerce, Hostinger, CJ Dropshipping)

  • Public authorities where required by law.

The Shop ensures that all partners comply with GDPR or equivalent data protection standards.

7. Customer Rights

Under GDPR, the Customer has the following rights:

  • Right to access personal data

  • Right to correct inaccurate data

  • Right to delete data (“right to be forgotten”)

  • Right to restrict processing

  • Right to object to processing (including marketing)

  • Right to data portability

  • Right to withdraw consent at any time

Requests regarding personal data can be sent to [email protected].

8. Cookies Policy

8.1. The Shop uses cookies to ensure proper functionality, improve user experience, and analyze website traffic.
8.2. Types of cookies used:

  • Essential cookies – required for checkout and basic functions.

  • Analytical cookies – help us understand how visitors use the site (e.g., Google Analytics).

  • Marketing cookies – used to deliver relevant ads (e.g., Facebook Pixel, Google Ads).
    8.3. Customers can manage or disable cookies in their browser settings. Disabling cookies may affect website functionality.
    8.4. When visiting the Shop for the first time, Customers are asked to accept or decline cookies through a cookie consent banner.

9. International Data Transfers

If data is transferred outside the European Economic Area (EEA), the Shop ensures adequate safeguards (e.g., Standard Contractual Clauses or partner compliance with GDPR).

10. Changes to the Privacy Policy

The Shop may update this Privacy Policy from time to time. Updated versions will be published on the website with the revision date.

11. How We Use Your Personal Data?

11.1. We process personal data such as name, contact details, order information, payment status, and delivery address for the purpose of processing customer orders, arranging delivery, handling returns, refunds, and exchanges, and fulfilling our contractual and legal obligations.
11.2. Such processing is based on the performance of a contract, compliance with legal obligations, and our legitimate interest in resolving claims and fulfilling customer requests.

12. Contact Information

If you have questions or complaints regarding personal data, please contact: