1. Introduction
Welcome to hooklivo (accessible at www.hooklivo.com). This privacy policy sets out how hooklivo (referred to as “we”, “us”, or “our” in this document) collects, uses, and manages your personal data when you visit our website or purchase our items.
For the purposes of the General Data Protection Regulation (GDPR) and applicable Latvian data protection laws, the data controller responsible for your personal data is hooklivo.
2. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
- Identity Data: includes first name and last name.
- Contact Data: includes delivery address, billing address, email address, and telephone number.
- Financial Data: includes payment card details. We do not store your complete financial details on our internal systems.
- Transaction Data: includes details about payments to and from you and other details of items you have purchased from us.
3. How We Use Your Personal Data
We will only process your personal data when the law allows us to. Most commonly, we will use your personal data in the following circumstances:
- Where we need to perform the contract we are about to enter into or have entered into with you (such as processing and delivering your order).
- Where it is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests.
- Where we need to comply with a legal or regulatory obligation.
4. Payment Processing
All payment transactions on our website are processed directly by our designated payment processor, Stripe. When you make a purchase, Stripe collects and processes your financial data in accordance with their respective privacy policies and strict regulatory obligations. We only receive confirmation of payment to fulfil your order and do not retain your sensitive payment credentials on our servers.
5. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements. In accordance with Latvian and European tax and corporate laws, we are legally required to retain basic information about our customers (including Contact, Identity, Financial, and Transaction Data) for a minimum of five (5) years after they cease being customers.
6. Data Disclosures
We may share your personal data with the following parties for the purposes set out in section 3:
- Service providers acting as processors who provide IT, logistics, and system administration services.
- Professional advisers including lawyers, bankers, auditors, and insurers based in the EU.
- Latvian State Revenue Service (VID) and other regulatory authorities based in the EU who require reporting of processing activities in certain circumstances.
- Stripe, strictly for the purpose of payment execution and order finalisation.
7. Your Legal Rights
Under European data protection laws, you have specific rights in relation to your personal data, including the right to:
- Request access to your personal data.
- Request correction of your personal data.
- Request erasure of your personal data.
- Object to processing of your personal data.
- Request restriction of processing your personal data.
- Request transfer of your personal data.
- Withdraw consent at any time where we are relying on consent to process your personal data.
If you wish to exercise any of the rights set out above, please contact our data controller via the contact details provided below. We aim to respond to all legitimate and verified requests within 72 hours.
8. Data Management Measures
We employ strict organisational measures to manage your personal data and mitigate the risks of accidental loss, unauthorised access, alteration, or disclosure. Access to your personal data is limited to those employees, agents, contractors, and relevant third parties who have a strict business need to know. They will only process your personal data on our instructions and are subject to a duty of confidentiality. Please note that no transmission of data over the internet operates without inherent risks, and we process all data with this reality in mind.
9. Contact Details
If you have any questions about this privacy policy or our data management practices, please contact our data controller at:
- Data Controller: hooklivo
- Email Address: hook@hooklivo.com
We aim to acknowledge all correspondence within 24 hours.