SIA Proffee (Reg. No. 40103420140, legal address: Ilūkstes iela 54, k-7-68, Rīga, LV-1082), as the operator of the website thespa.lv, respects your privacy and processes personal data in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data and on the free movement of such data (GDPR), as well as the Law on the Processing of Personal Data of the Republic of Latvia.

We may collect the following data when you fill out a form on the website or contact us by other means:

• Name;
• Email address;
• Company name;
• Phone number;
• Message;
• Number of employees;
• Other information that you voluntarily provide during communication or when ordering services.

We also automatically collect technical data such as your IP address, browser language, and activity on the website (including through cookies and analytics tools). For more information, see our Cookie Policy.

We use personal data for the following purposes:

• To respond to inquiries and maintain communication;
• To receive and process orders;
• To provide services;
• For internal administration;
• For accounting purposes;
• To analyze website traffic and improve the site (if you have given your consent);
• To ensure website security and prevent misuse.

We process personal data on the following legal grounds:

• Your consent (e.g., when submitting forms or accepting cookies);
• Performance of contractual obligations (e.g., when providing services);
• Legitimate interests (e.g., ensuring website security or replying to an inquiry);
• Compliance with legal obligations (e.g., bookkeeping or fulfilling requirements from regulatory authorities).

Your data may be shared with third parties in the following cases:

• With an external accounting service provider, if bookkeeping is outsourced under contract;
• With the Stripe payment system — payment data is entered directly into the Stripe system and is not processed on our website. We receive from Stripe only the following data: payer’s name and surname, email address, phone number (if provided), address (if provided), country, card type and the last 4 digits, card issuer and expiry date, payment start date and authorization date, unit price, amount, and total amount. These data are used solely for confirming orders, internal administration, and accounting purposes;
• With our hosting provider (Nano IT SIA, Latvia) — for website hosting and maintenance;
• With Google services (e.g., Google Analytics) — only if the user has given consent;
• With independent professionals (e.g., spa specialists, massage therapists) working with us under a cooperation agreement — only to the extent necessary for providing the service you have ordered. These partners are obliged to keep the data confidential and use it solely for service delivery purposes.

We may also disclose personal data to government authorities or law enforcement if required by law, to comply with legal obligations, or to protect our or others’ legal interests.

Our website uses cookies, including third-party cookies, to enhance functionality and analyze site traffic.
When visiting the site for the first time, you can choose which cookie categories to allow (except for essential cookies, which are always used), and change your preferences at any time.
For more details, please see our Cookie Policy.

We implement appropriate technical and organizational security measures to protect personal data.
Access to data is granted only to authorized staff and partners (e.g., spa specialists, massage therapists) who need it to perform their duties.
All such persons are required to maintain confidentiality and use the data only within the scope of their work on our behalf.

You have the right to:

• Access your personal data;
• Request corrections or deletion of your data;
• Request restriction of data processing;
• Withdraw your consent (if data is processed based on consent);
• File a complaint with the Data State Inspectorate.

To exercise your rights, please contact us at: info@thespa.lv
We will respond to your request within one month.

We retain personal data no longer than necessary for the purposes for which it was collected, or as required by law.
Technical cookies may be stored for up to 365 days. Analytics cookies are retained in accordance with the policies of the respective service provider (e.g., Google).

If you have any questions or comments regarding our Privacy Policy, please contact us at: info@thespa.lv