Privacy Policy
Last updated: October 2025
In this Privacy Policy, you will find detailed information about how the limited liability company Iconic, registration number 40203623997, registered office: Dzirnavu iela 42, Riga, LV-1010, Latvia, processes personal data of individuals. Before providing us with your personal data, we encourage you to carefully read the provisions of this Iconic Privacy Policy (hereinafter – the “Policy”).
Our processing of personal data is carried out in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, repealing Directive 95/46/EC (General Data Protection Regulation – GDPR), as well as applicable Latvian legislation.
This Policy describes how we collect, use, store, and disclose information when you use our website www.iconic-shop.co or other services we provide (hereinafter – the “Services”). Your data will not be disclosed to other persons, except in the cases provided for herein or required by applicable laws.
1. Controller and Contact Information
The controller of personal data processing is SIA Iconic (hereinafter – the “Controller”), registration number 40203623997, registered office: Dzirnavu iela 42, Riga, LV-1010, Latvia.
For questions regarding personal data processing, you may contact our designated representative – Arturs Beiers (email: ab@iconic-shop.co). By using this contact information or submitting a request to the Controller’s registered office, you may obtain information regarding processing. Requests for exercising your data subject rights may be submitted in accordance with Section 8 of this Policy.
2. What Personal Data Do We Process?
We collect and process personal data that you voluntarily provide, as well as information generated during the use of our Services.
This includes: your name, surname, email address, phone number, date of birth, delivery and billing addresses, permanent identifiers that allow you to be identified, as well as other information voluntarily provided by you.
We also process transaction data (orders, payments, delivery information), as well as data regarding visits and use of our website. Data may also be obtained in person at our retail locations, for example, at the store on Kr. Barona iela 16, Riga.
3. From What Sources Do We Obtain and Collect Your Personal Data?
Typically, you provide your data to us consciously and voluntarily, for example, when registering for a user account, subscribing to newsletters, purchasing goods, entering into a purchase agreement, or joining a loyalty program.
We also obtain your data when you contact us outside our website – electronically by sending an email, by submitting a written document in paper form, or by calling us by phone.
4. For What Purposes and on What Legal Basis Are Your Personal Data Processed?
User Account Registration and Administration
Your data is used to register and maintain a user account. This includes confirming registration, providing access to the account, processing requests, and communicating with you when necessary to provide important information.
Required data: name, surname, email address, date of birth, gender, phone number, and delivery address.
Legal basis – conclusion and performance of a purchase contract with you.*
Order Processing and Administration
Your data is used to process orders in our store (for example, purchase of goods on installment terms or loyalty program registration) as well as in the online shop. This includes processing payments, issuing invoices, notifying you about order status, delivery, and other actions necessary for order fulfillment.
Required data: name, surname, email address, information about orders, payments, transactions, and delivery.
Legal basis – conclusion and performance of a purchase contract with you.*
Personalized Offers, Commercial Notifications, Benefits, and Surveys
We use your data to manage personalized and commercial offers, loyalty program benefits, and other advantages, such as birthday benefits. We also process data to conduct customer surveys regarding our services in order to evaluate and improve them.
For these activities, automated decision-making is applied, based on general rules. To provide you with personalized offers and recommendations, profiling is carried out using algorithms and predictive models to analyze your behavior, choices, and similar parameters.
Required data: name, surname, email address, date of birth, purchase history, and user data related to activities on the online shop (for example, frequently viewed products). For surveys, only your email address is required.
Legal basis – your consent to receive personalized or commercial offers and to participate in surveys.**
Compliance with Legal Obligations
We process your data to fulfill legal requirements, such as accounting, product liability, and product safety obligations.
Required data: name, surname, email address, information about orders, payments, transactions, and delivery.
Legal basis – compliance with legal obligations.*
Handling Customer Complaints, Claims, and Feedback
We use your data to process complaints, claims, suggestions, or feedback regarding our products and services, including in the online shop.
Required data: name, surname, email address, phone number, as well as the content of the complaint and supporting documents justifying your claim.
Legal basis – our legitimate interests in reviewing customer feedback and complaints in order to improve service quality.***
Statistics and Market Research
Your data is used to analyze, assess, and improve the provision of our services and to expand our offerings.
Required data: information about your orders, deliveries, payments, purchase history, and website activities.
Processing is carried out solely for statistical purposes, and the results are not used to make decisions affecting an individual person.
5. In What Cases and to What Recipients Do We Disclose Your Data?
Your personal data is disclosed only to the extent necessary to ensure the operation of the website and the provision of services. They may be disclosed to our employees and cooperation partners (processors) who provide IT support, payment processing, delivery, and other business services.
In certain cases, your personal data may be provided to state authorities if such disclosure is required by applicable laws.
6. In What Territory Do We Process Your Personal Data?
Your personal data is processed within the European Union.
If third-party services are used, such as Google Analytics or Facebook, data transfers outside the EU may occur. In such cases, we encourage you to review the privacy policies of the relevant service providers.
7. How Long Do We Store Data and When Are They Deleted?
We store your personal data only as long as necessary to achieve the specific purpose or as required by applicable legislation (e.g., for accounting purposes).
If circumstances arise that require extended storage, the information is retained until those circumstances no longer apply.
We store and process your personal data for as long as at least one of the following conditions exists:
- a contract concluded with you is in force;
- under applicable legislation, it is possible to exercise our or your legitimate
interests (for example, to submit objections or bring claims in court); - there is a legal basis or obligation to retain the data;
- your consent for the respective processing is valid.
8. What Are Your Rights and How Can You Exercise Them? - This section lists your rights as provided for by data protection legislation.
8. What Are Your Rights and How Can You Exercise Them?
This section lists your rights as provided for by data protection legislation.
Right of Access
You may request confirmation as to whether we process personal data relating to you. If so, you have the right to access the data and receive information about its processing.
Right to Rectification
If data about you is incorrect or incomplete, you have the right to request that it be corrected or supplemented.
Right to Restriction of Processing
In certain cases, you may request that we restrict the processing of your data, for example, until the accuracy of the data has been verified. To exercise this right, a written request must be submitted to us.
Right to Erasure
You have the right to request the deletion of your personal data. Each request is evaluated, and data will be erased if applicable under the law.
Data will not be deleted if their processing is required to comply with legal obligations or if they are necessary to establish, exercise, or defend legal claims.
Right to Object to Processing
You have the right to object to processing of your data if it is carried out based on our legitimate interests. In such a case, processing will be stopped unless we have compelling reasons to continue. To exercise this right, a written request must be submitted to us.
Right to Data Portability
You have the right to receive your data in a structured, commonly used, and machine-readable format and to transfer them to another controller if processing is based on your consent and carried out by automated means. If you wish and it is technically feasible, we can transmit the data directly to another controller you designate.
Right to Withdraw Consent
If processing is based on your consent, you may withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal. You can withdraw or change your consent in your user account, in the mobile application, or by contacting us.
Right to Lodge a Complaint
If you believe that your data is being processed in violation of data protection laws, we encourage you to contact us first. If no solution is reached or you are dissatisfied with our response, you have the right to lodge a complaint with the Data State Inspectorate (Elijas iela 17, Riga, LV-1050, www.dvi.gov.lv).
In any case, before lodging a complaint, we invite you to contact us so that together we may find an appropriate solution.
9. Validity and Changes of the Policy
This Iconic Privacy Policy may be amended or updated if required by changes in our operations or legislation.
The most recent version will always be available on our website www.iconic-shop.co.
If there are discrepancies between the text of this Policy in Latvian and translations into other languages, the Latvian text shall prevail.
Legal References:
* REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, Article 6(1)(c) – “processing is necessary for compliance with a legal obligation to which the controller is subject.”
** REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, Article 6(1)(a) – “processing is based on the data subject’s consent.”
*** REGULATION (EU) 2016/679 OF THE EUROPEAN PARLIAMENT AND OF THE COUNCIL of 27 April 2016, Article 6(1)(f) – “processing is necessary for the purposes of the legitimate interests pursued by the controller or by a third party.”
