Last updated: 21 October 2026
About us
Controller: SIA REIFY, registration No. 40203128203, legal address Smilšu iela 38-22, Tukums, Tukuma nov., LV-3101, Latvia, e-mail: info@beba.lv, phone +371 26117101 (the "Company", "we").
In this Privacy Policy, "you" and "your" refer to any visitor or customer of the website www.beba.lv (the "website").
When processing personal data, the Company complies with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Latvian Personal Data Processing Law and other applicable laws of Latvia.
What personal data we process and why
Sale and delivery of goods
Data: name and surname; contact details (e-mail, phone number); selected parcel locker and delivery information; order contents and history; payment method and status; for legal entities – company name, details and representative's data; information about a third person receiving the goods (if provided).
Purpose: processing, payment and delivery of orders, communication about orders, handling withdrawals and claims regarding non-conforming goods.
Legal basis: conclusion and performance of a contract (GDPR Art. 6(1)(b)); compliance with legal obligations, e.g. preparing and keeping accounting records (Art. 6(1)(c)).
Customer account
Data: name, surname, e-mail, order history, saved preferences.
Purpose: providing account functionality (viewing orders, faster checkout).
Legal basis: performance of a contract.
Newsletters and direct marketing
Data: e-mail address, name (if provided), information on newsletter opens.
Purpose: informing you about new products, offers and gift ideas.
Legal basis: your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time using the link at the end of each newsletter or by writing to info@beba.lv.
Abandoned checkout reminders
If you started checkout and entered your e-mail but did not complete the order, we may send one reminder about the items left in your cart. Legal basis: our legitimate interests (GDPR Art. 6(1)(f)). You can object to such reminders at any time.
Communication with us
If you contact us by e-mail, phone, contact form or social media, we process the information you provide to answer your question or handle your complaint. Legal basis: performance of a contract or our legitimate interests.
Security and fraud prevention
We process technical data (IP address, device and browser information) to keep the website secure and prevent fraudulent transactions. Legal basis: our legitimate interests.
Where we obtain personal data
We obtain personal data from you (when you order, register an account, subscribe to our newsletter or contact us), automatically when you use the website (cookies and similar technologies), and from our service providers (e.g. payment status from the payment provider, delivery status from the carrier). You are responsible for ensuring the data you provide are true and accurate.
Who we share your personal data with
To fulfil our obligations to you, we share personal data only with service providers who need them:
- Shopify International Limited (Ireland) – online store platform and data hosting provider;
- Stripe Payments Europe, Limited (Ireland) – payment processing. Payment card data are processed only by Stripe and are not passed on to the Company;
- delivery companies – Omniva, DPD, Venipak, SmartPosti, Latvijas Pasts (depending on the parcel locker you choose);
- product suppliers – if a product is shipped directly from the supplier's warehouse, the supplier receives the data needed to prepare the shipment (name, surname, phone, parcel locker);
- accounting service providers – data contained in accounting documents;
- law enforcement, state and municipal authorities – only in cases and to the extent required by law.
Service providers may not use your personal data for any other purpose. We do not sell your personal data.
Transfers outside the EU/EEA
We aim to process your personal data within the European Union and European Economic Area (EU/EEA). Some of our service providers (e.g. Shopify and Stripe group companies) may also process data outside the EU/EEA (e.g. in Canada or the USA). In such cases, transfers are based on a European Commission adequacy decision or standard contractual clauses, as required by the GDPR.
Cookies
Cookies are small text files stored on your device when you visit a website. We use:
- necessary cookies – ensure the website works (cart, checkout, language selection, security). They are used without consent, as the website cannot function without them;
- analytics cookies – help us understand how visitors use the website so we can improve it;
- marketing cookies – allow us to show you more relevant advertising on other websites.
Analytics and marketing cookies are used only if you have given consent in the cookie notice shown on your first visit. You can change your choice at any time via the cookie preferences link in the website footer and delete cookies in your browser settings.
How long we keep your personal data
Order-related data are kept as long as necessary to perform the contract and handle possible claims (up to 2 years after delivery), and data contained in accounting documents for the period required by law (up to 5 years). Data processed on the basis of consent are kept until consent is withdrawn. When the retention period ends, data are securely deleted or anonymised.
How we protect your personal data
We use appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, disclosure or destruction, including encrypted connections (HTTPS), access restrictions and careful selection of service providers.
Your rights
- Access – request information about the data we process about you;
- Rectification – request correction or completion of inaccurate data;
- Erasure – request deletion of data where there is no legal basis to continue processing;
- Restriction – in certain cases, request restriction of processing;
- Portability – receive your data in a structured, machine-readable format;
- Objection – object to processing based on our legitimate interests, including direct marketing;
- Withdrawal of consent – withdraw consent at any time without affecting the lawfulness of prior processing.
To exercise your rights, write to info@beba.lv. We will respond within one month. If you believe the processing of your data infringes your rights, you may lodge a complaint with the Data State Inspectorate of Latvia (www.dvi.gov.lv).
Children's data
Although our products are intended for children, the website and purchases are intended for adults. We do not knowingly collect children's personal data.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time. The current version is always available on the website with the date of the last update.
Contact
If you have questions about the processing of personal data, write to info@beba.lv or call +371 26117101. Postal address: SIA REIFY, Smilšu iela 38-22, Tukums, Tukuma nov., LV-3101, Latvia.