Privacy Policy

This page mirrors https://fi.bstore.eu/policies/privacy-policy

Privacy Policy

Last updated: 7 May 2025

SIA "BSO GROUP" (registration No. 44103124095, VAT No. LV44103124095, legal address: Engures iela 1-2, Jūrmala, LV-2016, Latvia; operational address: Dzelzavas iela 120G, Rīga, LV-1021, Latvia; email: info@bstore.eu; phone: +371 24820328) — hereinafter referred to as BSO GROUP or we — is the data controller of your personal information and operates the online store at bstore.eu.

This Privacy Policy describes how we collect, use, store and disclose your personal data in accordance with the EU General Data Protection Regulation (GDPR) No. 2016/679 and applicable Latvian law.

The online store at bstore.eu is built on the Shopify platform. Shopify acts as our data processor for hosting and technical services under a Data Processing Agreement compliant with GDPR Article 28. For purposes related to Shopify's own fraud prevention and platform improvement services, Shopify may act as an independent data controller — please see the Shopify Privacy Policy for details.

1. Who We Sell To

bstore.eu primarily sells professional beauty and salon equipment to:

  • Businesses and legal entities (SIA, AS, UAB, OÜ, GmbH and other registered companies) — purchasing for commercial or professional purposes;
  • Self-employed persons and individual entrepreneurs — purchasing in connection with their business activity.

In limited cases, we also sell to consumers — natural persons purchasing goods for personal, household or family use unrelated to any business activity. Where this Privacy Policy refers to rights applying specifically to consumers, it means this latter category. Business buyers and self-employed persons do not have the same statutory consumer rights under EU consumer protection law.

2. Personal Data We Collect

Depending on how you interact with bstore.eu, we may collect the following categories of personal data:

  • Contact details: name, company name, billing and shipping address, phone number, email address;
  • Account information: username, password, account preferences;
  • Order and transaction data: items ordered, payment confirmation, order history, returns and exchanges;
  • Financial information: payment method type and transaction confirmation (we do not store full card numbers — payment processing is handled by our payment service providers);
  • Device and usage data: IP address, browser type, pages visited, time spent on site, referral source — collected automatically via cookies and similar technologies;
  • Communications: content of emails, enquiries and support requests you send us.

3. Purposes and Legal Basis for Processing

Purpose Legal basis (GDPR Art. 6)
Processing and fulfilling orders; issuing invoices Performance of a contract (Art. 6(1)(b))
User account management Performance of a contract (Art. 6(1)(b))
Customer support and dispute resolution Performance of a contract / Legitimate interests (Art. 6(1)(b)(f))
Warranty and returns processing Legal obligation / Contract (Art. 6(1)(b)(c))
Compliance with tax and accounting obligations Legal obligation (Art. 6(1)(c))
Anti-money laundering (AML) checks Legal obligation (Art. 6(1)(c))
Website analytics and performance improvement Legitimate interests (Art. 6(1)(f))
Fraud prevention and security Legitimate interests (Art. 6(1)(f))
Sending order-related transactional notifications Performance of a contract (Art. 6(1)(b))
Marketing emails and newsletters Consent (Art. 6(1)(a)) — separate opt-in required
Personalised advertising (cookies) Consent (Art. 6(1)(a)) — via cookie consent banner

Note on abandoned cart reminders: If you have an account or have provided your email during checkout, we may send you a reminder about an incomplete order. This is based on our legitimate interest (Art. 6(1)(f)). You can opt out at any time by clicking "unsubscribe" in the email or contacting info@bstore.eu.

4. Data Retention Periods

Data category Retention period Reason
Order and invoice records 5 years from transaction date Latvian accounting and tax law obligation
Account data (active accounts) For the duration of account existence Contract performance
Account data (inactive accounts) 3 years from last login/purchase Legitimate interests; deleted on request
Marketing consent and communications Until consent is withdrawn or 2 years of inactivity Consent-based; withdrawal does not affect prior processing
Website analytics (cookies) Up to 26 months Legitimate interests / consent
Support communications 3 years from resolution Legitimate interests (legal claims)

5. Cookies

We use cookies and similar technologies on bstore.eu. Cookies are small text files stored on your device by your browser.

We use the following types of cookies:

  • Strictly necessary cookies: required for the website to function (e.g. shopping cart, session authentication). No consent required.
  • Analytics cookies: help us understand how visitors use the site (e.g. Google Analytics). Require your consent.
  • Marketing and advertising cookies: used to show you relevant advertisements. Require your consent.

You can manage your cookie preferences at any time via the Cookie Settings link in the footer of our website. Withdrawing consent does not affect processing that took place while consent was active.

We use Google Analytics (provided by Google LLC, USA). Data transferred to Google is subject to Standard Contractual Clauses. To opt out of Google Analytics tracking, you may install the Google Analytics Opt-out Browser Add-on.

6. Recipients of Personal Data

We may share your personal data with the following categories of recipients:

  • Shopify Inc. (Canada/USA) — our platform provider and data processor, under a GDPR-compliant DPA;
  • Payment service providers (e.g. Citadele/Klix, ESTO AS) — as independent data controllers for payment and financing processing;
  • Shipping and logistics partners — for order delivery (e.g. DPD, Omniva, DHL, local courier services);
  • Google LLC — for analytics services (Google Analytics);
  • Consentmo — for GDPR compliance tooling and processing of data subject requests;
  • Competent authorities — if required by applicable law (e.g. tax authorities, law enforcement).

We do not sell your personal data to third parties. We do not transfer personal data to recipients outside the EEA without appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

7. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

  • Right of access — request a copy of the data we hold about you;
  • Right to rectification — request correction of inaccurate or incomplete data;
  • Right to erasure ("right to be forgotten") — request deletion of your data where no legal basis for retention exists;
  • Right to restriction — request that we limit how we process your data;
  • Right to data portability — receive your data in a structured, machine-readable format;
  • Right to object — object to processing based on legitimate interests or for direct marketing purposes;
  • Right to withdraw consent — where processing is based on consent, you may withdraw it at any time without affecting prior processing.

To exercise your rights, please visit our Personal Data Requests page or email info@bstore.eu. We will respond within 30 days as required by GDPR Article 12.

If you believe we have not adequately addressed your concern, you have the right to lodge a complaint with:

8. International Data Transfers

Your personal data may be transferred to and processed in countries outside the European Economic Area (EEA), including Canada and the United States (Shopify, Google). Such transfers are made using appropriate safeguards:

  • European Commission Standard Contractual Clauses (SCCs);
  • Adequacy decisions (e.g. Canada is covered by an EU adequacy decision).

9. Children

Our services are intended for business customers and adult consumers. We do not knowingly collect personal data from persons under the age of 18. If you believe a minor has provided us with personal data, please contact info@bstore.eu and we will delete it promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated via email or a notice on the website before taking effect.

11. Contact

SIA "BSO GROUP"
Legal address: Engures iela 1-2, Jūrmala, LV-2016, Latvia
Operational/warehouse address: Dzelzavas iela 120G, Rīga, LV-1021, Latvia
Email: info@bstore.eu
Phone: +371 24820328
Registration No.: 44103124095 | VAT No.: LV44103124095