Privacy and Cookie Policy

The controller of personal data is:

SIA "Verona Decor"
Registration number: 40203420880
Registered address: Pieneņu iela 19, Rīga, LV-1063, Latvia
Studio address: Jāņa Asara iela 12-k1, Rīga, Latvia
Phone: +371 29 859 996
Email: verona@veronadecor.lv
Website: veronadecor.lv

For questions regarding personal data processing or the exercise of data subject rights, you may contact us using the phone number or email address above.

Depending on how you use the Verona Decor website and services, we may process the following categories of personal data:

1. Contact details: name, phone number, email address and preferred communication channel.
2. Order and delivery data: selected goods or services, order value and contents, delivery date and method, delivery address, recipient details, order comments and fulfilment status.
3. Flower-subscription data: names of the newlyweds or other recipients, date of the wedding or other event, selected gift amount, subscription details and other information necessary to provide the service.
4. Enquiry and project data: information about the event or order, date and location of the event, preferences, budget or price range, correspondence, files and other information you voluntarily provide for pricing, preparation of an offer or performance of a project.
5. Communication content: messages, comments, greeting-card texts and other information you voluntarily provide through the website, email, messaging services, forms or direct communication.
6. Payment data: payment amount, status and identifier, as well as information necessary to record and confirm payment. Verona Decor does not store the full bank card number or CVC code where payment is processed by an external payment provider.
7. CRM and interaction history data: history of orders, enquiries and projects, date of the last substantive contact, internal customer status and information needed to provide service when the customer contacts us again.
8. Important dates and occasions: for example, a wedding date, anniversary, birthday or another occasion, where this information has been provided by the customer or is connected with a completed order.
9. Marketing preference data: whether and when consent was given or withdrawn, the source of consent, selected communication channels and whether the person has opted out of marketing messages.
10. Photo, video and text materials: images, names and texts provided for a personalised couple page, portfolio or other agreed publications.
11. Technical data: IP address, browser and device information, technical information about website operation and data necessary to provide its core functions and security.
12. Website usage data: information about pages visited, referral source and other statistics and analytics data, to the extent and under the conditions described in the cookie section.

Verona Decor does not seek to collect special categories of personal data (for example, information about health, religious beliefs or political opinions) unless such information is required for a specific service. Please do not provide such information unless necessary.

3.1. Placing and fulfilling an order
Placing, paying for and fulfilling an order, communicating with the customer, arranging delivery and refunds, and handling order-related matters.

Data: contact details, order, delivery and payment data, correspondence and oth er information required to fulfil the order.
Legal basis: Article 6(1)(b) GDPR — entering into and performing a contract; Article 6(1)(c) GDPR — compliance with legal obligations where retention or processing is required by law.

3.2. Enquiries before a contract is concluded
Responding to an enquiry about a possible order or service, preparing a quotation or commercial offer, clarifying details, agreeing terms and taking other steps requested by the customer before an order is placed.

Data: contact details, information about the event or requested service, correspondence and other data provided for preparation of the offer.
Legal basis: Article 6(1)(b) GDPR — taking steps at the request of the data subject before entering into a contract.

If a communication is not related to a prospective order or contract, for example a general business question, a proposal for cooperation or other communication, processing may be based on Verona Decor’s legitimate interest in responding to enquiries and conducting business communications (Article 6(1)(f) GDPR).

3.3. Customer database and interaction history
Maintaining the CRM, keeping a record of interaction history, providing service on repeat contact, restoring the context of previous orders, organising internal customer work and protecting Verona Decor’s rights in the event of disputes.

Data: contact details, order and project history, correspondence, date of last interaction, customer status and related working records.
Legal basis: Article 6(1)(f) GDPR — Verona Decor’s legitimate interests in organising customer service, managing customer relationships, retaining business history and protecting its rights. When relying on this basis, Verona Decor takes into account the customer’s rights and reasonable expectations.

3.4. Important dates and marketing offers
A wedding date, birthday, anniversary or other occasion may be retained as part of the history of a particular order where it is objectively connected with the service provided. Such dates may be used for future reminders and marketing offers only to the extent that is clear to the person from the wording of the consent they provided.

If you voluntarily agree to receive special offers, Verona Decor may use your name, phone number, email address, interaction history and important dates and occasions you have provided in order to send, by email and/or WhatsApp, special bouquet offers for holidays such as 8 March, 14 February, Mother’s Day and others, as well as timely offers related to important dates you have provided, such as a birthday or anniversary.

The legal basis for this processing is your consent (Article 6(1)(a) GDPR). Consent is requested separately through an unticked checkbox, is voluntary, is not a condition for placing an order or receiving services, and may be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Each marketing message provides a simple and free way to opt out of further messages, for example by replying "STOP" in WhatsApp or using the "Unsubscribe" link in an email. After an opt-out, Verona Decor stops using the relevant data for direct marketing. Minimal information about the opt-out may be retained to prevent unwanted marketing from being sent again.

3.5. Personalised couple pages
Names, photographs and text provided for a personalised couple page are used to create, publish and technically maintain that page. Where publication requires the processing of personal data, Verona Decor obtains the relevant consent or relies on another applicable legal basis and informs the persons concerned.

3.6. Website operation and security
Technical data necessary for the correct and secure operation of the website, prevention of abuse, correction of errors and availability of website functions may be processed on the basis of Verona Decor’s legitimate interests (Article 6(1)(f) GDPR) and, where strictly necessary technologies store information on the user’s device, without separate consent in cases permitted by law.

3.7. Website analytics
Optional analytics cookies and similar technologies are used only after the user has given consent. More information is provided in the section "Use of cookies and similar technologies".

A buyer or customer may provide Verona Decor with another person’s data, for example the name, phone number and address of a bouquet recipient, or information about newlyweds or another recipient of a service. The source of such data is the buyer, customer or another person who provided the information to Verona Decor.

We use such data only to the extent necessary to fulfil the order, arrange delivery or a gift, or provide the agreed service, unless there is a separate legal basis for other processing.

Where personal data is obtained from someone other than the individual, Verona Decor provides the information on processing required by the GDPR within the applicable time limit and, where appropriate, at the first direct contact with that person, unless a GDPR exception applies. The recipient may also contact Verona Decor directly and exercise the rights described in this Policy.

Verona Decor may create or receive photographs and video materials of completed projects for documentation, personalised pages, its portfolio, website and social media.

Photos and videos featuring identifiable individuals may be used by Verona Decor in its portfolio, on the website and on social media on the basis of the customer’s consent given in the contract.

Photographs of décor, premises, design details and other objects in which people are absent or cannot be identified may be used separately from personal data.

Payment for certain orders may be made through the Stripe payment system.

Verona Decor receives information necessary to confirm and record a payment, such as the amount, status and transaction identifier, as well as limited information about the payment method. Verona Decor does not receive or store the full bank card number or CVC code where these data are processed directly by Stripe.

Payment data transferred to Stripe is processed by that provider in accordance with its own privacy policy and applicable terms.

Personal data is accessible to Verona Decor employees and engaged persons only to the extent necessary to perform their work duties and for the relevant processing purpose.

Depending on the specific process, data may be shared with the following services, contractors and categories of recipients:

• Tilda Publishing — for operation of the website, forms, online store, cookie mechanisms and other platform functions used;
• Airtable — for maintaining the CRM, customer database, orders, projects, tasks, important dates and interaction history;
• Google — including Gmail / Google Workspace, Google Drive, Google Sheets and Google Apps Script — for email, storage of files and working materials, processing enquiries, automated data transfers and internal workflows;
• Make.com — for automation and integration between website forms, the CRM, Google Workspace and other services used; automation scenarios may transfer contact details, enquiry and order information and other information necessary for the relevant process;
• Mailchimp — for sending marketing emails, managing subscriptions and processing unsubscribe requests;
• Meta Platforms / Facebook / Instagram — for customer communications, handling enquiries, advertising tools and analytics, including Meta Pixel after the relevant user consent has been obtained;
• Google Analytics — for analysing website traffic and user interaction with the website after consent to analytics cookies has been obtained;
• Stripe — for payment processing;
• Tally — for external forms and questionnaires, where used;
• WhatsApp and Telegram — for communication, receiving messages and work notifications where the customer or Verona Decor uses the relevant channel;
• courier services and other persons involved in delivering orders;
• accounting, legal, technical and other contractors where access to data is necessary to perform their tasks;
• public authorities, courts and law-enforcement authorities — in the cases and to the extent provided by law.

Some services used by Verona Decor or their subprocessors may process personal data outside the European Economic Area.

Where such a transfer takes place, Verona Decor uses safeguards provided for by the GDPR, such as a European Commission adequacy decision, Standard Contractual Clauses or another applicable mechanism, and assesses additional safeguards where necessary.

Information about the safeguards used for international transfers may be requested using the contact details set out in this Policy.

Verona Decor retains personal data no longer than necessary for the relevant processing purpose, taking into account legal obligations, potential limitation periods and the need to protect the parties' rights.

1. Customer contact details, order and project history and related CRM information — for up to 5 years from the customer’s last order or substantive interaction, unless longer retention is required on another lawful basis.
2. Enquiry and communication data that did not lead to an order or further cooperation — for up to 2 years after the last substantive communication.
3. Information about orders, payments, refunds and accounting documents — for the periods required by applicable law. For certain categories of documents, the law may require a retention period different from the retention period in the active CRM.
4. Data necessary to handle complaints, resolve disputes or protect the rights of Verona Decor and customers — until the applicable limitation period expires and the relevant dispute is concluded.
5. Names, photographs and texts provided specifically for a personalised couple page — for the duration of the relevant service and operation of the page, but no longer than one year from its creation unless the parties have separately agreed another lawful use.
6. Data used for direct marketing and personalised offers — until consent is withdrawn. After an opt-out, minimal information about the opt-out may be retained for as long as necessary to avoid sending unwanted messages again and to demonstrate that the person’s choice has been respected.
7. Cookie data — for the periods stated in the cookie section, or until deleted by the user/consent is withdrawn, where applicable.

After the relevant retention period ends, the data is deleted or anonymised unless further retention is required by law or another lawful basis.

Verona Decor implements reasonable technical and organisational measures to protect personal data against accidental loss, destruction, alteration, unauthorised access or disclosure.

Access to personal data is granted only to employees and contractors who need it to perform their work duties. Depending on the system, individual user accounts, access controls, multi-factor authentication, backups and other security measures may be used.

However, no method of storing or transmitting data over the internet can guarantee absolute security.

Verona Decor may use automated tools to operate its loyalty programme, segment customers, award bonuses, apply discounts provided by the programme and create personalised offers.

Such processes are not used to make decisions that produce legal or similarly significant effects for the customer.

Where provided by the GDPR, you have the right to:
1. obtain confirmation as to whether Verona Decor processes your data and receive information about that processing;
2. obtain a copy of your personal data;
3. correct inaccurate data or complete incomplete data;
4. request erasure of data where grounds exist;
5. request restriction of processing;
6. object to processing based on legitimate interests;
7. receive data you have provided in a portable format where the right to data portability applies;
8. withdraw previously given consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before it was withdrawn.

Where personal data is used for direct marketing, you have the right to object to such processing at any time. After receiving an opt-out, Verona Decor stops using the relevant personal data for direct marketing. You may opt out using the method indicated in the message, for example by replying "STOP" in WhatsApp or using the "Unsubscribe" link in an email, or by using the contact details in section 1.

To exercise your rights, write to the email address specified in section 1. Verona Decor may request additional information where reasonably necessary to verify the identity of the requester.

Verona Decor responds to data subject requests without undue delay and, as a rule, no later than one month after receiving the request. Where permitted by the GDPR, this period may be extended and the requester will be informed.

If you believe that your personal data is being processed in breach of the law, you have the right to lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija): www.dvi.gov.lv.

Cookies are small text files stored on a user's device when visiting the website. The website may also use similar browser storage technologies, including localStorage and sessionStorage.

These technologies may be necessary for the shopping cart, language settings and other website functions and, with consent, may also be used for statistics, analytics and advertising.

14.1. Essential cookies and technologies
They are necessary for the operation of the website and its core functions. Separate user consent is not required where they are objectively necessary to provide a service requested by the user or to transmit information.

• t_cookiesCategories, t_cookiesConsentGiven and, where the user rejects cookies, t_cookiesRejectAll — store the user’s selected cookie settings; the stated retention period is up to 1 year from the selection or last change of settings.
• iso_code (localStorage) — stores the selected website language; retained until the language is changed or the user deletes the website data.
• tcart and tcart_discounts (localStorage) — used for the shopping cart, to retain its contents and discounts; the stated retention period is up to 30 days.
• visited (sessionStorage) — technical information about the current website visit; retained until the browser session ends.
• Google security technologies, where they are actually loaded on the website, may be used to protect web traffic and prevent spam, fraud and abuse.

14.2. Analytics cookies
For internal statistics, Verona Decor uses Tilda tools and may use Google Analytics. Analytics cookies and similar technologies are activated only after the user has consented to the relevant cookie category.

• tildasid and tildauid — visit statistics;
• TILDAUTM — identification of UTM tags and the source of an advertising referral;
• previousUrl — identification of the referral source or previous page.

Tilda Publishing is the recipient and processor of the relevant data. As of the date this Policy was last updated, Tilda’s own analytics cookies are retained for no more than 90 days. If the user does not allow analytics cookies, statistics may operate in a limited mode without setting optional cookies.

Where Google Analytics is used, relevant data may be transferred to Google to measure website traffic and interaction. Google Analytics is activated only after the user consents to analytics cookies.

14.3. Advertising cookies
Verona Decor may use advertising cookies and similar technologies, including Meta Pixel and other advertising tools, to assess advertising effectiveness, build audiences, display more relevant advertising and analyse user interaction with advertising campaigns.

These cookies and technologies are activated only after the user gives consent through the website’s cookie settings. The user may reject advertising cookies or change their choice at any time through the cookie settings.

On your first visit to the website, you can accept all optional cookies, reject them or choose which categories to allow in the cookie settings. Rejecting analytics and advertising cookies does not prevent you from placing an order or using the website’s core functions.

You can change your preferences or withdraw consent at any time through the cookie settings. Data stored by the website can also be deleted through your browser settings.

Disabling cookies and other browser technologies necessary for the website to function through your browser settings may affect the shopping cart, forms, language settings and other website functions.

Verona Decor may update this Policy if data-processing activities, website functions, services used or legal requirements change.

The current version of this Policy is published on veronadecor.lv with the date of the latest update. Material changes affecting consent already given or users' rights will, where necessary, be communicated to the relevant persons by an additional method.

Last updated: 10.10.2026