Login

Country

Cart

Your cart is empty

Privacy policy

Last updated: 3 August 2026

This Privacy Policy explains how SIA GIGI BLOKS, operating the store and brand BE.E GEM ("we", "us", "our"), collects, uses, and discloses your personal data when you visit beegem.eu, make a purchase, or otherwise communicate with us (the "Services"). Our online store is powered by Shopify, which provides the underlying platform. We act as the data controller of your personal data within the meaning of the EU General Data Protection Regulation (Regulation (EU) 2016/679, "GDPR").

We process personal data in accordance with the GDPR and the Latvian Personal Data Processing Law (Fizisko personu datu apstrādes likums). If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls in respect of personal data.

1. Who We Are (Data Controller)

Controller: SIA GIGI BLOKS, operating under the brand BE.E GEM

  • Registration number: 40103722021 (entered in the Commercial Register on 17 October 2013)
  • VAT number: LV40103722021
  • Registered / correspondence address: Elvīras iela 9A – 3, Rīga, LV-1083, Latvia
  • Email: hello@beegem.eu

We have not appointed a Data Protection Officer, as we are not required to do so under Art. 37 GDPR. Data-protection enquiries can be sent to the email above.

2. Personal Data We Collect or Process

Depending on how you interact with the Services, we may collect or process the following categories of personal data, including inferences drawn from it:

  • Contact details — your name, billing and shipping address, phone number, and email address.
  • Financial information — payment card details, financial account information, transaction and payment confirmation details. Card data is processed by our payment providers; we do not store full card numbers.
  • Account information — username, password, preferences and settings.
  • Transaction information — items you view, add to cart or wishlist, purchase, return, exchange or cancel, and your order history.
  • Communications — information you include when you contact us, e.g. customer-support enquiries.
  • Device information — device, browser and network data, IP address, and other unique identifiers.
  • Usage information — how and when you interact with and navigate the Services.

3. Where We Obtain Your Personal Data

  • Directly from you — when you create an account, use the Services, communicate with us, or provide data to us.
  • Automatically — from your device when you use the Services, and through cookies and similar technologies (see Section 6).
  • From our service providers — e.g. Shopify, payment, fulfilment and analytics providers acting on our behalf.
  • From partners or other third parties — e.g. marketing and advertising partners, where lawful.

4. How We Use Your Personal Data and Legal Basis

We process personal data only where we have a lawful basis under Art. 6 GDPR. The table below sets out our purposes and the corresponding legal basis.

Purpose of processing Personal data used Legal basis (GDPR Art. 6)
Providing the Services, processing orders, payments, returns and exchanges, managing your account Contact details, financial/transaction information, account information Performance of a contract — Art. 6(1)(b)
Accounting, tax and other statutory record-keeping Transaction and contact details, invoices Legal obligation — Art. 6(1)(c)
Security, fraud prevention, authenticating accounts, securing the Services Account, device, usage information Legitimate interests — Art. 6(1)(f): protecting the store and customers from fraud and misuse
Improving and tailoring the Services (basic analytics, remembering preferences) Usage, device, transaction information Legitimate interests — Art. 6(1)(f): operating and improving our store
Email marketing / newsletter to new subscribers; non-essential (marketing & analytics) cookies; personalised advertising and profiling Contact details, usage/device information, inferences Consent — Art. 6(1)(a); withdrawable at any time
Responding to legal requests, exercising or defending legal claims Any relevant personal data Legal obligation — Art. 6(1)(c) / Legitimate interests — Art. 6(1)(f)

Where we rely on legitimate interests, you have the right to object (see Section 10). Where we rely on consent, you may withdraw it at any time; withdrawal does not affect processing carried out before withdrawal.

5. Marketing Communications

We send marketing emails (our "Notes" newsletter and promotions) only to subscribers who have given prior, opt-in consent, or to existing customers in respect of similar products where permitted by the Latvian Law on Information Society Services (Informācijas sabiedrības pakalpojumu likums). You can withdraw your consent or unsubscribe at any time using the link in any marketing email. We may still send non-promotional messages about your account or orders.

6. Cookies and Similar Technologies

We use cookies and similar technologies to operate the store, remember your preferences, measure performance, and — subject to your consent — for analytics and personalised advertising. Strictly necessary cookies are used to run the Services. Non-essential cookies (analytics, marketing, personalised advertising) are set only after you give consent through our cookie-consent banner, and you can change or withdraw your choices at any time via the cookie settings. This website is also protected by hCaptcha. For details of the specific cookies used, see our separate Cookie Policy.

7. Profiling and Personalised Advertising

With your consent, we and our partners (including through Shopify) may use cookies and your activity on the Services to build a profile of your interests and show you personalised product recommendations and advertisements, including based on items you previously viewed or added to your cart. This involves profiling within the meaning of Art. 4(4) GDPR but does not produce legal or similarly significant effects on you (Art. 22 GDPR). You can withdraw consent or object at any time.

8. How We Disclose Personal Data

We may disclose personal data to the following categories of recipients, subject to this Policy:

  • Shopify and other processors acting on our behalf (IT and platform hosting, payment processing, analytics, customer support, cloud storage, fulfilment and shipping).
  • Marketing and advertising partners — only where you have consented; they act under their own privacy notices.
  • Third parties you direct us to — e.g. carriers to ship your order, or social-media / login integrations you choose to use.
  • Authorities and advisers — where required to comply with law, respond to valid legal process, or establish, exercise or defend legal claims, and in connection with a business transaction such as a merger.

9. Shopify, and International Transfers

The Services are hosted by Shopify, which processes personal data to provide and improve the platform. For certain enhanced features, Shopify may act as an independent controller; see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.

Your personal data may be transferred to, stored, or processed outside the European Economic Area (EEA), including in the United States (e.g. by Shopify and certain service providers). Where we transfer personal data outside the EEA, we rely on an adequacy decision of the European Commission or on appropriate safeguards such as the European Commission's Standard Contractual Clauses. You can request a copy of the relevant safeguards by contacting us at hello@beegem.eu.

10. Your Rights

If you are located in the EEA (including Latvia), you have the following rights, which we will honour subject to the conditions and exemptions in the GDPR:

  • Access — to obtain confirmation and a copy of the personal data we hold about you (Art. 15).
  • Rectification — to have inaccurate or incomplete data corrected (Art. 16).
  • Erasure — to have your data deleted in certain circumstances (Art. 17).
  • Restriction — to restrict processing in certain circumstances (Art. 18).
  • Portability — to receive your data in a portable format and have it transmitted to another controller (Art. 20).
  • Objection — to object to processing based on legitimate interests and to direct marketing (Art. 21).
  • Withdraw consent — where processing is based on consent, at any time (Art. 7(3)).

To exercise any right, contact us at hello@beegem.eu. We will respond within one month of receiving your request, as required by Art. 12(3) GDPR (extendable by two further months for complex requests, with notice). We may need to verify your identity. We will not discriminate against you for exercising your rights. You may also use an authorised agent, subject to proof of authorisation.

11. Complaints and Supervisory Authority

If you have a complaint about how we process your personal data, please contact us first at hello@beegem.eu. You also have the right to lodge a complaint with the Latvian supervisory authority:

  • Data State Inspectorate (Datu valsts inspekcija) — Elijas iela 17, Rīga, LV-1050, Latvia; tel. +371 67223131; email pasts@dvi.gov.lv; www.dvi.gov.lv.

If you are located in another EEA country, you may contact your local supervisory authority; a list is available at edpb.europa.eu.

12. Retention of Your Personal Data

We keep personal data only as long as necessary for the purposes for which it was collected, including to meet legal, accounting or reporting requirements. Indicative retention periods:

  • Accounting and tax documents (orders, invoices) — retained for 5 years, as required by the Latvian Accounting Law (Grāmatvedības likums). This applies even after you close your account: we must keep the transaction records for accounting and tax purposes, and to this extent the right to erasure does not apply.
  • Customer account data — for as long as your account remains active, and a reasonable period thereafter.
  • Marketing consent and related data — until you withdraw consent or unsubscribe, and thereafter only proof of consent as needed.
  • Support communications — for as long as needed to handle your enquiry and any follow-up.

13. Security

We implement appropriate technical and organisational measures to protect personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. Please avoid sending sensitive or confidential information through unsecured channels.

14. Children's Data

The Services are not intended for children. In Latvia, in relation to information-society services, a child aged 13 or older may consent to the processing of their personal data; for children under 13, the consent of a parent or guardian is required (Fizisko personu datu apstrādes likums, Art. 33). We do not knowingly collect personal data from children under this age. If you believe a child has provided us with personal data, contact us and we will delete it.

15. Third-Party Websites and Links

The Services may link to websites operated by third parties. We are not responsible for the privacy practices or content of those websites; please review their own policies before providing personal data.

16. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for operational, legal, or regulatory reasons. We will post the revised version here, update the "Last updated" date, and, where required, provide additional notice.

17. Contact

For any questions about this Privacy Policy or to exercise your rights, contact us at:

  • SIA GIGI BLOKS (BE.E GEM), reg. No. 40103722021
  • Elvīras iela 9A – 3, Rīga, LV-1083, Latvia
  • hello@beegem.eu