Privacy policy

The controller of your personal data is SIA "VG+", reg. no. 40203642983, registered address: Antonijas iela 24-1, Rīga, LV-1010. Salon address: Kalpaka bulvāris 9, Rīga, LV-1010.

For data protection matters: info@parkspa.lv, tel. +371 29121111.

• When you buy a gift card: your name, e-mail, phone (if provided), the message on the card, purchase details (card, amount, date, card code) and records of when the card was used.
• When you pay by card: the payment is processed by Stripe. We do not receive or store your payment card details.
• When you contact us (WhatsApp, phone, e-mail): your contact details and the content of your message.
• Technical data: a cookie that remembers your language and server logs (IP address, time) needed for security.

Health information you share during a visit is processed under the Latvian Law on the Rights of Patients; it is not collected through this website.

• Selling a gift card, e-mailing it to you and checking it at the salon — performance of a contract (Art. 6(1)(b) GDPR).
• Keeping accounting records — legal obligation (Art. 6(1)(c) GDPR).
• Website security and preventing gift card fraud — legitimate interests (Art. 6(1)(f) GDPR).
• Answering your questions — your request and our legitimate interests.

Data is shared only with service providers needed to run the website, and only as much as necessary:

• Stripe — payment processing (Ireland / USA).
• Resend — sending gift card e-mails (EU).
• SIA SitesPro — website maintenance; Hetzner server in Germany (EU).
• Cloudflare — domain DNS.
• Google Maps — the map on the contacts page, only if you open it (the “Show map” button).

Treatment bookings are handled by the external system ilgsbook.online, and WhatsApp messaging by WhatsApp — these services process data under their own privacy policies.

Where data is processed outside the EU (e.g. in the USA), this is based on the European Commission's standard contractual clauses or the EU–US Data Privacy Framework.

• Gift card and purchase data — while the card is valid and then for 5 years, as required by the Latvian Accounting Law.
• Correspondence — until your question is resolved, but no longer than 1 year.
• Server logs — up to 30 days.

The website uses only one strictly necessary cookie (NEXT_LOCALE), which remembers your language. We do not use advertising or tracking cookies. The Google map on the contacts page loads only when you ask for it, and Google may then use its own cookies. On the payment page, Stripe uses its own cookies to process the payment securely.

You have the right to access, correct or erase your data, restrict or object to its processing, and receive your data in a portable format. To exercise these rights, write to info@parkspa.lv. We will reply within one month.

If you believe your data is processed incorrectly, you may lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija, www.dvi.gov.lv).

We may update this policy. The current version is always available on this page.