Privatumo strategija

Last updated: 30 September 2026

This policy explains what personal data SIA “Brightly Agency” collects when you visit brightlyagency.com, book a seat at one of our events or come to one, why we collect it, and what your rights are.

1. Who we are

The data controller is SIA “Brightly Agency”, registration number 40203716407, Valkas iela 1A, Rīga, LV-1010, Latvia.
Email: info@brightlyagency.com
Phone: +371 25 741 869

Write to us at that email address about anything in this policy.

2. What we collect

When you book a seat, through our booking form:

  • your name, age, email address and phone number;
  • your nationality, whether you are local, a foreigner or an Erasmus student, and what you do (work, study and so on);
  • your Instagram handle, if you choose to give it;
  • the languages you speak, your interests, your social style, your sense of humour, the kind of evening you want and your budget for food and drinks;
  • allergies or dietary needs and any other notes, if you choose to give them;
  • how you heard about us, whether you are coming alone, and your answers about photos and about how we use your data.

When you pay: your name, email address, billing address and payment details. Payments are processed by Shopify Payments and its payment partners. We see the payment status and the last digits of the card, never the full card number.

At events: photos or short videos, if photos are taken at your event (see section 6).

When you visit the website: technical data such as your IP address, device and browser, and how you use the site. Shopify, which hosts our store, collects this through cookies and similar technologies.

When you contact us: whatever you tell us by email, phone, WhatsApp or through the contact form.

When you join our email list: your email address.

3. Why we use it, and on what legal basis

  • To take your booking, seat you at a table and run the event. This includes using your answers to build balanced tables and sending you the venue, the time and any changes. Legal basis: performing our contract with you (GDPR Article 6(1)(b)).
  • Allergies and dietary needs. These can say something about your health, so we only use them if you choose to give them, with your explicit consent, and only to pick a venue that works for you (GDPR Article 9(2)(a)). You can withdraw your consent at any time.
  • Photos. Only if you said yes on the booking form, on the basis of your consent (GDPR Article 6(1)(a)).
  • Payments, invoices and accounting. To meet our obligations under Latvian accounting and tax law (GDPR Article 6(1)(c)).
  • Keeping events safe and making them better. For example, remembering that someone was asked to leave an event, or seeing which formats people enjoy. Legal basis: our legitimate interests (GDPR Article 6(1)(f)).
  • News and offers by email. Only if you tick the box at checkout or join our email list on the website, on the basis of your consent. You can unsubscribe with the link in every email.

We put tables together from your answers. This does not lead to decisions with legal or similarly significant effects on you.

We do not sell your data, and we do not show your profile or your answers to other guests. You find out who is at your table when you sit down, and so do they.

4. Who we share it with

  • Shopify, which hosts our website and checkout and processes payments (see section 9).
  • The venue hosting your table: the name the table is booked under and the number of guests, plus allergies or dietary needs if the venue needs them to cater for you.
  • Service providers who help us run the business, such as email and file storage services and our accountant, only as far as they need it.
  • Authorities, when the law requires it.

Other guests do not get your contact details from us.

5. How long we keep it

  • Booking form answers: 24 months after your last Brightly event, then we delete or anonymise them. If you ask us to delete them sooner, we will.
  • Orders, payments and invoices: as long as Latvian accounting and tax law requires.
  • Photos: as long as we use them for the purpose you agreed to, or until you withdraw your consent.
  • Emails and messages: as long as we need them to deal with your question, and no longer than 24 months.

6. Photos at events

We sometimes take photos or short videos at events and may use them on our website and social media, including @brightly.latvia on Instagram. On the booking form you tell us whether you are happy to be photographed. If you said no, or you change your mind, tell us before the event or when it starts and we will keep you out of the frame. If a photo of you is already online and you want it taken down, write to info@brightlyagency.com and we will remove it.

7. Your rights

You have the right to:

  • see the data we hold about you and get a copy of it;
  • have wrong data corrected;
  • have your data deleted;
  • restrict how we use it;
  • object to uses based on our legitimate interests;
  • get your data in a portable format;
  • withdraw your consent at any time, without affecting what we did before you withdrew it.

To use any of these rights, write to info@brightlyagency.com. We reply within one month. We may need to check that it is really you.

If you think we handle your data wrongly, you can complain to the Data State Inspectorate of Latvia (Datu valsts inspekcija), www.dvi.gov.lv.

8. Age

Brightly events are for people aged 18 and over. We do not knowingly collect data about anyone younger.

9. Shopify and cookies

Our store runs on Shopify. Shopify processes personal data for us to provide the website, the checkout and payments, and uses cookies to keep the site working and secure. Some data may be processed outside the EU and EEA, for example in Canada or the United States. When that happens, safeguards such as European Commission adequacy decisions or Standard Contractual Clauses apply.

To help protect and improve our store, we use some Shopify features that combine data from your visits to our store with data from other merchants and from Shopify. For those features, and when you use Shopify services such as Shop Pay, Shopify is responsible for your data. You can read more in the Shopify Consumer Privacy Policy and use your rights through the Shopify Privacy Portal.

You can manage cookies in the cookie notice, when it is shown, or in your browser settings.

10. Changes

We may update this policy. The date at the top shows the latest version. If a change affects you in a significant way, we will let you know.