Privacy policy
Last updated: September 14, 2026.
Paper Chapel is operated by Sabiedrība ar ierobežotu atbildību Grigerlab (SIA Grigerlab), registration number 40103828294, registered at Zvaigžņu iela 2B-34, Rīga, LV-1009, Latvia (“Paper Chapel,” “we,” “us”). We are responsible for the personal information we process for our store at paperchapel.com. You can contact us about privacy at shop@grigerlab.com.
This policy explains how we collect, use and share personal information when you visit our store, place an order or contact us. Shopify hosts our store and also processes some information for its own purposes, as described below. If this policy conflicts with our Terms of Service about the processing of personal information, this policy controls.
Information we collect
Depending on how you use the store, we process:
- Your name, email address, telephone number, billing and delivery addresses, and information you provide when contacting us.
- Products you view, add to your cart or buy; order, delivery, return and payment-status information. Payment-card details are handled by payment providers; we receive the transaction information needed to manage your order.
- Account information and preferences if you choose to use a customer account.
- Device, browser, IP address, approximate location, cookie and similar identifiers, and information about your interactions with the store.
We receive this information from you, automatically when you use the store, and from providers involved in payments, order fulfilment, delivery or analytics.
Why we use it and our legal bases
As a company established in the European Union, we identify the following GDPR legal bases for our processing:
- Contract — Article 6(1)(b). We use your contact, order, delivery and transaction information to take your order, process payment, fulfil and deliver your purchase, handle returns and provide the customer account or order-related help you request.
- Legal obligation — Article 6(1)(c). We keep and use records when necessary to meet applicable tax, accounting, consumer-protection and other legal obligations.
- Legitimate interests — Article 6(1)(f). We use information as necessary to protect the store and its customers from fraud and misuse, respond to inquiries that are not part of an order, maintain our services, measure and improve store performance where analytics can lawfully operate without prior consent, and establish or defend legal claims.
- Consent — Article 6(1)(a). Where applicable law requires prior consent for non-essential analytics, personalization or advertising cookies and similar technologies, we rely on your consent before using them for those purposes. You may withdraw consent at any time, without affecting processing that took place before withdrawal. Consent is not required to buy from us.
We need the contact, payment and delivery information requested at checkout to process and deliver an order. If you do not provide it, we may be unable to complete your purchase. Other information requested for optional features is voluntary.
Cookies and analytics
Essential technologies support the cart, checkout, security and other services you request. We and our partners, including Shopify, use optional cookies and similar technologies for analytics, personalization and advertising. We use Google Analytics to understand visits and shopping interactions and to measure store performance. You can read how Google uses information from partner sites and Google's Privacy Policy.
Where prior consent is required, we use these optional technologies for those purposes only after you agree. Where a Cookie preferences control is available, you can use it to change or withdraw your choice. You can also contact us at shop@grigerlab.com about your privacy rights.
Who receives information
Depending on the service or purpose, we share personal information with:
- Shopify, which hosts the store and supports checkout, customer accounts, security and store services;
- payment providers, to process and confirm transactions;
- production and delivery partners, to produce and deliver orders;
- Google, for analytics as described above, subject to your choices and applicable law;
- providers that help us operate the store or respond to customers; and
- authorities or professional advisers when disclosure is required by law or necessary to protect legal rights.
Information about your activity on this store is shared with Shopify and may be shared with other providers in other countries to provide store services. Shopify may combine information about your interactions with this store, other merchants and Shopify to provide enhanced services, including personalization, advertising and measurement. Shopify is responsible for its own processing for those features. You can read the Shopify Consumer Privacy Policy and exercise applicable choices directly through the Shopify Privacy Portal.
Links to other sites
Our store may link to websites or services operated by others. Their own privacy notices apply when you use those services. We are not responsible for how an independent third party processes information you provide directly to it.
International transfers
Please note that we may transfer, store and process your personal information outside the country you live in.
If we transfer your personal information out of the European Economic Area or the United Kingdom, we will rely on recognized transfer mechanisms like the European Commission's Standard Contractual Clauses, or any equivalent contracts issued by the relevant competent authority of the UK, as relevant, unless the data transfer is to a country that has been determined to provide an adequate level of protection.
To request a copy of the applicable transfer safeguards, contact us at shop@grigerlab.com.
Paper Chapel SEO and Google account data
Paper Chapel SEO is an internal tool used by authorized Paper Chapel operators. With the store owner's Google authorization, it reads reports from our Google Analytics and Search Console accounts, advertising data from our Google Ads account, and product listing information from our Merchant Center account. We use this information to review our own store's performance and diagnose product listing issues. Shopify's Google & YouTube integration remains responsible for synchronizing our products to Merchant Center.
Google OAuth credentials are held in private, access-controlled credential storage until access is revoked or no longer needed. Google account data may be reviewed by authorized Paper Chapel operators and service providers working on our behalf to support this internal tool. We do not sell Google account data or request access to shoppers' Google accounts. Questions can be sent to shop@grigerlab.com.
How long we keep information
How long we retain your personal information depends on different factors, such as whether we need the information to maintain your account, to provide you with services, comply with legal obligations, resolve disputes, or enforce other applicable contracts and policies.
Security
We use measures intended to protect personal information against unauthorized access, loss and misuse. No method of transmission or storage can be guaranteed to be completely secure.
Your rights
Under the GDPR, you may request access to your personal information, correction of inaccurate information, deletion, restriction of processing, or portability where applicable. You may object to processing based on legitimate interests and withdraw consent for consent-based processing. These rights can be subject to legal exceptions; for example, we may need to retain records required by law.
Depending on your US state, you may have rights to know, access, correct or delete information, receive a portable copy where applicable, and opt out of its sale, sharing or use for targeted advertising. You may use our Data Sharing Opt-Out page where applicable. Where applicable, we honor a Global Privacy Control (GPC) signal as an opt-out of sale, sharing or targeted advertising for the browser or device sending it. We do not respond to the separate browser Do Not Track (DNT) signal. We do not discriminate against you for exercising privacy rights.
If we send promotional emails, you can unsubscribe using the link in those emails. We may still send messages needed for your account or orders.
To make a request, email shop@grigerlab.com. We may ask for information reasonably necessary to verify your identity or an authorized agent's authority. We respond within the period required by applicable law.
If we decline a privacy request, we will explain the reason where required by law. If applicable law gives you a right to appeal our decision, you can request an appeal by replying to our response or emailing shop@grigerlab.com.
If you are dissatisfied with how we handle your information, please contact us. You may also complain to a data protection authority, including the Latvian Data State Inspectorate, or the authority in the EEA country where you live or work.
Children
The store is not directed to children. If you believe a child has provided personal information to us, please contact us so we can review the situation and take appropriate action.
Changes and contact
We may update this policy when our services or legal obligations change. We will post the updated policy here and provide additional notice when required by law.
For questions or privacy requests, contact Sabiedrība ar ierobežotu atbildību Grigerlab (SIA Grigerlab), Zvaigžņu iela 2B-34, Rīga, LV-1009, Latvia, at shop@grigerlab.com.