1. Data controller

The controller responsible for the processing of personal data is:

Jana Repše
A natural person registered with the Latvian State Revenue Service as an economic activity operator
Trading under the name TUFTING.LV

Studio and business address: Brīvības gatve 214S, Rīga, LV-1084, Latvia
Declared address: Slokas iela 179–20, Rīga, LV-1067, Latvia
Email: info@tufting.lv
Website: tufting.lv

TUFTING.LV is a trading and website name and is not a separate legal entity.

2. Scope of this Privacy Policy

This Privacy Policy applies to personal data processed in connection with:

• use of the Website;
• enquiries and contact forms;
• the rug calculator;
• custom-rug requests;
• design-reference submissions;
• quotations;
• Orders;
• payments;
• delivery and studio pickup;
• returns and complaints; and
• communication with Customers.

3. Personal data collected

The personal data collected depends on how you use the Website and interact with TUFTING.LV.

3.1. Information you provide directly You may provide:
• first and last name;
• email address;
• telephone number;
• Instagram username or other social-media contact details;
• billing address;
• delivery address;
• recipient information;
• rug dimensions;
• shape and colour selections;
• requested text or lettering;
• design instructions;
• messages and correspondence;
• uploaded images, sketches or design-reference links;
• Order and invoice details;
• payment reference and payment status;
• bank-account information where needed to issue a refund;
• return or complaint information; and
• any other information you voluntarily provide.

3.2. Information relating to a custom design When requesting a Custom Product, you may submit:
• artwork;
• photographs;
• names;
• logos;
• drawings;
• text;
• colour references;
• room photographs; or
• links to content hosted on another website.
These materials may contain personal data about you or another person. Please do not submit another person’s personal data or image unless you have an appropriate reason and permission to do so.

3.3. Technical information When you visit the Website, certain technical information may be processed automatically by the hosting provider or connected website services, including:
• IP address;
• browser type;
• device type;
• operating system;
• date and time of access;
• requested pages;
• referring page;
• approximate location derived from the IP address;
• security logs;
• error information; and
• cookie or consent preferences.
The exact information depends on the Website configuration and active integrations.

3.4. Payment information Payments are currently made by bank transfer. TUFTING.LV may process:
• payer name;
• bank-account number;
• payment amount;
• date of payment;
• payment reference;
• invoice number; and
• payment status. TUFTING.LV does not request online-banking passwords, payment-card PINs or other authentication credentials.

4. Why personal data is processed

Personal data may be processed to:
• respond to questions and enquiries;
• review rug ideas and design references;
• operate the rug calculator;
• prepare estimated and final prices;
• prepare quotations;
• discuss and approve designs;
• create and fulfil Orders;
• communicate about production;
• issue invoices;
• identify and reconcile payments;
• arrange delivery or studio pickup;
• provide order updates;
• process returns, complaints and refunds;
• maintain accounting and tax records;
• protect legal rights;
• prevent fraud and misuse;
• maintain Website security;
• diagnose technical problems;
• improve Website functionality;
• manage cookie preferences; and
• comply with legal obligations.

Personal data will not be used for a materially incompatible purpose unless permitted by law or additional information is provided.

5. Legal bases for processing

5. Legal bases for processing
Depending on the circumstances, personal data is processed on one or more of the following legal bases.

5.1. Steps before entering into a contract
Information is processed when necessary to:
• respond to a quotation request;
• assess whether a rug can be produced;
• discuss specifications;
• prepare a price; or
• take other steps requested before an Order is concluded.

5.2. Performance of a contract
Information is processed when necessary to:
• confirm an Order;
• produce a rug;
• receive payment;
• provide delivery or collection;
• communicate about fulfilment; or
• handle an Order-related issue.

5.3. Legal obligation
Certain information is processed and retained to comply with accounting, tax, consumer-protection and other legal requirements.

5.4. Legitimate interests
Personal data may be processed where necessary for legitimate interests, including:
• operating and securing the Website;
• maintaining appropriate business records;
• responding to Customers;
• preventing fraud and misuse;
• resolving disputes;
• establishing, exercising or defending legal claims; and
• improving services.
Before relying on legitimate interests, consideration is given to whether those interests are overridden by the rights and freedoms of the affected person.

5.5. Consent
Consent is relied upon where legally required, including for:
• optional analytics or advertising cookies;
• optional marketing communications; or
• publication of identifiable Customer content where no other legal basis applies.

Consent may be withdrawn at any time. Withdrawal does not affect processing carried out lawfully before the withdrawal.

6. Rug calculator and image-link tester

The rug calculator may process dimensions, shape, colours, lettering and other selections to produce an estimated price or visual preview.
Calculator results are estimates and do not create a confirmed Order.
Where you provide a design-reference or image link, the image may be stored on and retrieved from a third-party website. The external provider may process information according to its own privacy policy.
You should avoid submitting links that reveal unnecessary private information or provide unrestricted access to private online accounts or folders.

7. Cookies

The Website may use cookies or similar technologies.

7.1. Necessary cookies
Necessary cookies support essential functions such as Website security, technical operation and storage of consent preferences.
These cookies may be used without consent where they are strictly necessary to provide a service requested by the visitor.

7.2. Optional cookies
Optional cookies may be used for analytics, advertising or similar purposes only where those tools are active and the required consent has been obtained.
Optional cookies should not be activated before consent where consent is legally required.

7.3. Cookie preferences
Visitors may accept, reject or manage optional cookies through the Website’s cookie banner.
Cookie preferences may also be managed through browser settings. Disabling some cookies may affect Website functionality.

7.4. Active integrations
The specific cookies used depend on which Hostinger and third-party integrations are enabled.
The Privacy Policy should be updated if services such as Google Analytics, Meta Pixel, Hotjar, Google Tag Manager or another tracking service are added.

10. International transfers

Some service providers may process information outside Latvia or the European Economic Area.
Where required, an international transfer will rely on an applicable legal mechanism, such as:
• a European Commission adequacy decision;
• standard contractual clauses;
• another legally recognised safeguard; or
• a specific exception permitted by data-protection law.
The applicable mechanism depends on the provider and the location of processing.

8. Recipients of personal data

Personal data may be disclosed where necessary to:
• Hostinger and its relevant infrastructure providers;
• email and communication-service providers;
• banks and payment-service providers;
• courier, postal and delivery providers;
• accounting or tax-service providers;
• IT and security-service providers;
• professional advisers;
• competent public authorities where required by law; and
• other service providers necessary to fulfil an Order.
Only information reasonably necessary for the relevant service should be disclosed.
Personal data is not sold or rented.

9. Delivery providers

Where delivery is requested, information such as the recipient’s name, delivery address, telephone number, email address and parcel information may be shared with the selected delivery provider.
The delivery provider may act as an independent controller for parts of its processing and may provide its own privacy information.

22. Contact information

Data controller: Jana Repše
Trading name: TUFTING.LV
Studio and business address: Brīvības gatve 214S, Rīga, LV-1084, Latvia
Email: info@tufting.lv

11. Storage periods

Personal data is kept only for as long as necessary for the purpose for which it was collected or as required by law.
In general:
• enquiries that do not result in an Order may be retained for up to two years after the last meaningful communication;
• design discussions and quotations may be retained for up to two years unless an Order is placed;
• Order and customer-service correspondence may be retained for the duration of the relationship and a reasonable period afterwards;
• invoices, transaction information and accounting documents are retained for the period required by applicable law;
• design and production files may be retained where reasonably necessary to document the agreed specifications, handle future questions or defend legal claims;
• refund and complaint records may be retained until the matter is resolved and for a reasonable limitation period afterwards;
• consent records may be retained for as long as needed to demonstrate consent;
• technical and security logs may be retained for a limited period appropriate to their purpose; and
• cookie information is retained according to the duration of the relevant cookie or consent setting.
Personal data may be retained for longer where required by law or necessary to establish, exercise or defend a legal claim.
When information is no longer required, it will be deleted, anonymised or securely disposed of.

12. Photographs of completed work

TUFTING.LV may photograph completed Products for:
• production records;
• quality control;
• proof of fulfilment;
• portfolio purposes; or
• social-media and Website content.
A photograph of a Product that does not identify a Customer may not always constitute personal data.
Where a photograph, design, name, portrait, private room or other information can identify a Customer or another person, it will be published only where an appropriate legal basis exists.
Customers may notify TUFTING.LV before production if a design is private or should not be published.

13. Data security

Reasonable technical and organisational measures are used to protect personal data against:
• unauthorised access;
• unlawful disclosure;
• accidental loss;
• destruction;
• alteration; and
• misuse.
Measures may include secured accounts, access controls, software updates, passwords, encrypted connections and appropriate backup practices.
No internet transmission or electronic-storage method can be guaranteed to be completely secure.

14. Data breaches

Where a personal-data breach occurs, the situation will be assessed and handled in accordance with applicable data-protection law.
Where legally required, the Data State Inspectorate and affected persons will be notified.

15. Your rights

Subject to applicable conditions and exceptions, you may have the right to:
• receive information about the processing of your personal data;
• access your personal data;
• correct inaccurate or incomplete information;
• request deletion;
• request restriction of processing;
• object to processing based on legitimate interests;
• object to direct marketing;
• receive certain data in a structured, commonly used and machine-readable format;
• request transfer of certain data to another controller where applicable;
• withdraw consent at any time where processing is based on consent; and
• not be subject to certain decisions based solely on automated processing.
Not every right applies in every situation. For example, information may need to be retained to meet accounting, tax or legal obligations.

16. Exercising your rights

Requests may be sent to:
info@tufting.lv
The request should clearly explain which right you wish to exercise.
Additional information may be requested where reasonably necessary to confirm your identity and prevent unauthorised disclosure.
A response will be provided within the period required by applicable law.

17. Automated decision-making

TUFTING.LV does not use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects.
The rug calculator may automatically generate an estimate or preview. This is an informational tool and does not make a legally binding automated decision.
The final price, design and Order are reviewed and confirmed separately.

18. Children’s data

The Website and Products are not specifically directed at children.
Where a child’s personal data is submitted without appropriate authorisation, TUFTING.LV may delete it after becoming aware of the situation.
Parents or guardians may contact info@tufting.lv regarding concerns about a child’s information.

19. External websites

The Website may link to social-media services, image-hosting platforms and other external websites.
TUFTING.LV does not control those websites and is not responsible for their privacy, security or content.
Visitors should review the privacy information provided by each external website.

20. Complaints

Questions or concerns should first be sent to:
info@tufting.lv
You may also contact the competent supervisory authority in the EU or EEA country where you live, work or believe an infringement occurred.

21. Changes to this Privacy Policy

This Privacy Policy may be updated when the Website, services, integrations, processing activities or legal obligations change.
The current version will be published on this page with the date of the latest update.

info@tufting.lv

Brīvības gatve 214S, Rīga, LV-1084

Terms and conditions
Privacy policy
Refund policy
FAQ