PRIVACY POLICY
PARA SIA — fromPARA.com
Effective date: 27 September 2026
Version: 1.0
1. About this Privacy Policy
This Privacy Policy explains how PARA SIA collects, uses, stores and otherwise processes personal data when you:
* visit fromPARA.com;
* create or use a customer account;
* purchase products from our online shop;
* contact us or submit an enquiry;
* request a return or submit a complaint;
* subscribe to our newsletter, product-launch notifications or other marketing communications; or
* otherwise interact with PARA in connection with our online shop.
We process personal data in accordance with Regulation (EU) 2016/679 (General Data Protection Regulation — GDPR), the Latvian Personal Data Processing Law (Fizisko personu datu apstrādes likums) and other applicable data-protection legislation.
2. Data Controller
The controller responsible for the processing described in this Privacy Policy is:
PARA SIA
Registration No.: 40203721516
VAT No.: LV40203721516
Address: Mazā Jugla iela 3F, Riga, LV-1064, Latvia
Email: [email protected]
Telephone: +371 2254 2254
Website: fromPARA.com
PARA has not appointed a Data Protection Officer.
For questions concerning this Privacy Policy, the processing of your personal data or the exercise of your data-protection rights, please contact us at [email protected].
3. What personal data we process
Depending on how you interact with PARA, we may process the following categories of personal data:
Identification and contact information
This may include your:
* name and surname;
* email address;
* telephone number;
* billing address;
* delivery address or selected parcel terminal;
* company name, registration details and VAT information where you purchase on behalf of a business.
Account information
If you create a customer account, we may process:
* your account details;
* login and account identifiers;
* saved contact information;
* order history;
* account preferences; and
* information associated with your interactions with PARA.
We do not receive your account password in readable form.
Order and transaction information
We may process:
* products ordered;
* quantities;
* order number;
* order date;
* purchase price;
* discounts;
* VAT and other accounting information;
* selected payment method;
* payment status;
* invoices;
* refunds and returns; and
* information necessary to administer an order.
Delivery information
Depending on the selected delivery method, we may process:
* recipient’s name;
* telephone number;
* email address;
* selected Omniva parcel terminal;
* delivery address where courier delivery is selected; and
* information required to identify and track the shipment.
Payment information
Payments are processed through Stripe.
PARA does not store your complete payment-card number or card security code. Stripe processes the payment information required to complete the transaction.
PARA may receive limited payment information from Stripe, such as payment status, transaction identifier, payment method.
Stripe may also process technical and device information for payment security and fraud prevention.
Communications and customer service
If you contact us, we may process:
* your name;
* contact details;
* contents of your message;
* order information;
* correspondence history;
* photographs or documents you voluntarily provide in connection with a return, complaint or support request; and
* information required to investigate and respond to your enquiry.
This may include communications made through email, telephone, WhatsApp Business, the fromPARA.com contact form or postal correspondence.
Website and technical information
When you visit fromPARA.com, we may process information such as:
* IP address;
* browser and device information;
* session identifiers;
* language and display preferences;
* pages visited;
* interactions with the website;
* referring website or campaign information;
* date and time of visits; and
* cookie and consent information.
Optional analytics information is collected only in accordance with your cookie choices.
For detailed information about cookies, please see our Cookie Policy.
Newsletter and marketing information
If you subscribe to PARA’s newsletter, launch notifications or other marketing communications, we may process:
* your email address;
* your subscription status;
* date and method of consent;
* information necessary to demonstrate your consent;
* unsubscribe information; and
* information concerning the delivery of communications where available through our systems.
4. Why we process your personal data
We process personal data only where there is a valid legal basis.
4.1. Processing and fulfilling orders
We process identification, contact, order, payment and delivery information to:
* process your order;
* receive and confirm payment;
* issue order confirmations and invoices;
* prepare and dispatch products;
* arrange delivery;
* process returns and refunds; and
* provide customer service relating to your purchase.
Legal basis: Article 6(1)(b) GDPR — processing necessary to enter into or perform a contract.
4.2. Customer accounts
Where you choose to create an account, we process account information to provide account functionality, maintain your order history and enable you to manage your purchases.
Legal basis: Article 6(1)(b) GDPR where processing is necessary to provide the account service requested by you.
Where limited account information is retained for security, fraud prevention or the establishment or defence of legal claims, processing may also be based on PARA’s legitimate interests under Article 6(1)(f) GDPR.
Creating an account is not required where guest checkout is available.
4.3. Payments and fraud prevention
We process transaction and payment-related information to process payments, confirm transactions, prevent fraudulent transactions, process refunds and maintain the security of our shop.
Legal basis: Article 6(1)(b) GDPR for processing necessary to complete your transaction and Article 6(1)(f) GDPR where processing is necessary for PARA’s legitimate interest in preventing fraud and protecting its online shop and customers.
Stripe independently processes certain information in accordance with its applicable privacy information and legal obligations.
4.4. Delivery
We process and disclose necessary contact and delivery information to Omniva in order to deliver your order.
For parcel-terminal deliveries, this generally includes information necessary to identify and notify the recipient and the selected parcel terminal.
For courier deliveries, the delivery address is additionally provided.
Legal basis: Article 6(1)(b) GDPR — performance of the purchase contract.
4.5. Accounting, taxation and legal obligations
We process and retain transaction, invoice and accounting information where required by Latvian accounting, taxation and other applicable legislation.
Legal basis: Article 6(1)(c) GDPR — compliance with a legal obligation.
4.6. Customer service and communications
We process information contained in enquiries and correspondence to answer questions, provide customer support, administer returns and complaints and resolve problems relating to our products and services.
Depending on the nature of the communication, the legal basis is:
* Article 6(1)(b) GDPR where the communication concerns entering into or performing a contract; or
* Article 6(1)(f) GDPR where processing is necessary for PARA’s legitimate interest in responding to enquiries, maintaining appropriate customer service, protecting its rights or resolving disputes.
4.7. Website operation and security
We process technical information necessary to:
* operate fromPARA.com;
* maintain sessions and shopping carts;
* authenticate registered customers;
* remember essential website settings;
* maintain website and account security;
* detect technical problems; and
* prevent abuse and fraudulent activity.
Legal basis: depending on the particular processing, Article 6(1)(b) GDPR where technically necessary to provide a requested online service, or Article 6(1)(f) GDPR based on PARA’s legitimate interest in operating and securing its website.
Essential cookies and similar technologies are used where permitted without consent under applicable law.
4.8. Website analytics
If you consent to optional cookies, we use Google Analytics 4 (GA4) and related Google technologies to understand how visitors use our website and to improve its content, functionality and performance.
Information may include pages visited, interactions, approximate technical/location information derived from network information, device/browser characteristics and other analytics identifiers.
Legal basis: Article 6(1)(a) GDPR — your consent.
You may refuse optional cookies or subsequently withdraw your consent. See our Cookie Policy for details.
4.9. Third-party content
Our website may contain content provided through third-party services, including YouTube.
Where such third-party content is classified as optional under our cookie settings, it is blocked until you allow optional cookies.
Third-party providers may process technical information when their content is loaded.
Legal basis: where consent is required, Article 6(1)(a) GDPR.
4.10. Newsletter and marketing communications
If you voluntarily subscribe to our newsletter, launch notifications or marketing communications, we use your contact information to send the communications you requested.
Legal basis: Article 6(1)(a) GDPR — consent, together with applicable Latvian requirements governing electronic commercial communications.
Subscription to marketing communications is voluntary and is not required to purchase products from PARA.
You may withdraw your consent at any time by using the unsubscribe mechanism provided in a marketing email or by contacting [email protected].
Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.
We may retain limited information concerning an unsubscribe request where necessary to ensure that no further marketing is sent to that address.
5. Where we obtain your data
We generally obtain personal data:
* directly from you when you order, register, contact us or subscribe;
* automatically from your device when you use our website, subject to applicable cookie requirements;
* from Stripe in connection with payment transactions;
* from Omniva in connection with shipment and delivery status; and
* from other service providers where necessary to operate the services you have requested.
6. When providing personal data is required
Certain personal data are necessary to conclude and perform a purchase contract.
If you do not provide information required for payment, invoicing or delivery, we may be unable to process or fulfil your order.
Information marked as optional is not required to make a purchase unless stated otherwise for a particular service.
Newsletter and marketing consent is always optional.
7. Who receives your personal data
We disclose personal data only where necessary for the purposes described in this Privacy Policy.
Recipients may include:
Odoo
PARA uses Odoo Enterprise SaaS for its website, online shop, customer accounts, CRM, invoicing, accounting and related business processes.
Odoo therefore hosts and processes personal data required to operate these services on PARA’s behalf and/or as otherwise described in Odoo’s applicable data-processing documentation.
Stripe
Stripe processes information required to process payments and may process information for security, fraud prevention, regulatory compliance and related payment purposes.
PARA does not receive or store complete card credentials.
Omniva
PARA provides Omniva with information necessary to deliver orders.
The particular information depends upon the delivery method selected.
PARA uses Google Workspace for business email and communications.
Where you consent to optional analytics cookies, PARA also uses Google Analytics 4 and related Google technologies for website analytics.
Public authorities and professional advisers
We may disclose personal data where required by law to competent authorities, courts, regulators, tax authorities or law-enforcement authorities.
Where necessary, information may also be disclosed to professional advisers for the establishment, exercise or defence of legal claims.
We do not sell your personal data.
8. Social media
PARA maintains profiles on services including:
* Instagram;
* Facebook;
* Pinterest; and
* YouTube.
If you interact with PARA through these platforms, the relevant platform provider may process personal data independently in accordance with its own privacy terms.
PARA may process information that you send directly to us through these platforms for communication and customer-service purposes.
Please consult the privacy information of the relevant social-media provider for information about its processing activities.
9. International transfers
Some service providers used by PARA are international organisations and processing may involve personal data being accessed or processed outside Latvia or the European Economic Area.
Where personal data are transferred outside the EEA, PARA and/or its service providers use transfer mechanisms required by applicable data-protection law, where necessary. These may include an adequacy decision adopted by the European Commission, participation in the EU–US Data Privacy Framework where applicable, or European Commission Standard Contractual Clauses together with appropriate supplementary safeguards where required.
More information about international transfers by individual service providers is available in their respective privacy documentation.
You may contact [email protected] for further information concerning safeguards applicable to transfers of your personal data.
10. How long we retain personal data
PARA does not retain personal data indefinitely merely because storage is technically possible.
We use the following retention principles:
Order, invoice, transaction and accounting information: retained for the period required under applicable Latvian accounting and taxation legislation, generally at least five years for relevant supporting accounting documentation, and longer where a longer statutory period applies. Latvian Accounting Law requires ordinary supporting accounting documents to be retained for at least five years.
Customer accounts: maintained while the account is active. Accounts that remain inactive for an extended period may be deleted or anonymised, except for transaction information that PARA must retain under law or information necessary for an ongoing legal matter.
Order history: retained to the extent required for accounting, taxation, contractual, warranty/non-conformity, dispute-resolution and legitimate record-keeping purposes. Information no longer required for those purposes will be deleted or anonymised.
Customer-service communications: retained for as long as reasonably necessary to resolve the enquiry and, where appropriate, for a limited subsequent period to maintain customer-service history or establish, exercise or defend legal claims.
Contact-form enquiries: retained for the period necessary to respond and deal with the matter and thereafter only where there is a legitimate reason for continued retention.
Newsletter subscribers: retained while the subscription remains active. If you unsubscribe, PARA will stop using your data to send the relevant marketing. Limited suppression information may be retained to record and respect your unsubscribe request.
Cookie consent records: retained for the period reasonably necessary to demonstrate and manage the consent choices made through our website.
Analytics data: retained in accordance with the configured retention period of the applicable analytics service and your consent choices.
Where personal data are relevant to a dispute, investigation or legal claim, we may retain the relevant information until that matter and any applicable legal limitation period have ended.
11. Cookies
fromPARA.com uses essential and optional cookies and similar technologies.
Essential cookies are used to provide functionality requested by visitors, including sessions, account functionality and shopping-cart operation.
Optional cookies, including analytics cookies, are used only in accordance with the consent choices presented through our cookie banner.
When visiting the website, you can choose between allowing optional cookies and using only essential cookies.
You can subsequently change or withdraw your cookie consent.
Detailed information about the cookies used, their providers, purposes and durations is provided in our Cookie Policy.
12. Your data-protection rights
Subject to the conditions and limitations established by applicable law, you have the right to:
* access personal data PARA holds about you;
* request correction of inaccurate or incomplete personal data;
* request erasure of personal data where the applicable legal conditions are satisfied;
* request restriction of processing;
* object to processing based on legitimate interests;
* object at any time to processing for direct marketing;
* receive applicable personal data in a structured, commonly used and machine-readable format and exercise the right to data portability where the legal requirements are satisfied;
* withdraw consent at any time where processing is based on consent; and
* lodge a complaint with a competent data-protection supervisory authority.
Right to erasure (“right to be forgotten”)
You may request deletion of your personal data where the conditions of Article 17 GDPR are satisfied, for example where the data are no longer necessary for the purpose for which they were collected, you withdraw consent and there is no other legal basis for processing, or the data have been processed unlawfully.
The right to erasure is not absolute. PARA may be required or entitled to retain certain personal data despite a deletion request where continued processing is necessary to comply with a legal obligation, establish, exercise or defend legal claims, or where another exception under applicable law applies.
In particular, PARA cannot delete invoices, transaction records and other accounting information that it is legally required to retain under Latvian accounting or tax legislation merely because a customer requests deletion of their personal data. Such information will be retained for the applicable statutory retention period and will not be used for unrelated purposes.
Where a deletion request can be fulfilled only partially, PARA will delete or anonymise the personal data that it no longer has a lawful reason to retain and retain only the information for which continued processing has a valid legal basis.
GDPR gives individuals an unconditional right to object to processing of their personal data for direct marketing.
13. How to exercise your rights
To exercise your rights or ask a question about the processing of your personal data, contact:
PARA SIA
Email: [email protected]
Address: Mazā Jugla iela 3F, Riga, LV-1064, Latvia
We may request information necessary to verify your identity before acting on a request, particularly where disclosure or deletion of personal information is requested.
We will respond within the period required by the GDPR. Under normal circumstances this is one month after receipt of the request, subject to the extensions permitted by the GDPR for complex or numerous requests.
14. Right to complain
If you believe that PARA has processed your personal data unlawfully, you may contact us first so that we can investigate the matter.
You also have the right to lodge a complaint with the Latvian data-protection supervisory authority:
Datu valsts inspekcija (Data State Inspectorate)
Elijas iela 17
Riga, LV-1050
Latvia
Telephone: +371 67223131
Datu valsts inspekcija
You may also have the right to complain to another competent supervisory authority, particularly in the EU/EEA Member State of your habitual residence, place of work or place of the alleged infringement.
15. Automated decision-making
PARA does not currently make decisions about customers based solely on automated processing that produce legal effects or similarly significantly affect them within the meaning of Article 22 GDPR.
Payment providers may carry out automated fraud and security assessments in connection with payment processing under their own applicable procedures.
16. Data security
PARA takes appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to personal data is limited according to business requirements, and PARA uses service providers and systems intended to provide appropriate technical and organisational safeguards.
No internet-based service can guarantee absolute security. If PARA becomes aware of a personal-data breach, it will assess and handle the incident in accordance with applicable data-protection legislation.
17. Children
PARA’s website and products are not specifically directed at children.
PARA does not intentionally collect personal data from children for marketing purposes.
The ability to make a purchase depends on the Customer having the legal capacity and/or necessary authorisation to enter into the relevant transaction and use the selected payment method.
18. Third-party websites and services
fromPARA.com may contain links to websites or services operated by third parties.
PARA is not the controller of personal data independently collected by those third-party websites merely because fromPARA.com contains a link to them.
We recommend reviewing the relevant third party’s privacy information before providing personal data to it.
19. Changes to this Privacy Policy
PARA may update this Privacy Policy where our processing activities, services, technologies or applicable legal requirements change.
The current version will be published on fromPARA.com with its effective date.
Where a change materially affects processing based on consent, PARA will obtain new consent where required by law.
⸻
PARA SIA
Registration No. 40203721516
VAT No. LV40203721516
Mazā Jugla iela 3F, Riga, LV-1064, Latvia
+371 2254 2254
Effective date: 27 September 2026
Version 1.0
