This policy explains what personal data we process, why, on what legal basis and for how long, who we share it with and what your rights are. It applies to in-person classes at our studios in Riga, to online lessons, to the website npdrawing.com and to any contact with us — by phone, email, WhatsApp, social media or in person.
We try to keep it simple. If anything is unclear, write to [email protected].
1. Who we are
The controller of your personal data is SIA "ABNP GROUP", a limited liability company registered in the Republic of Latvia. NP Drawing is a trading name of SIA "ABNP GROUP". We run interest education (interešu izglītība) classes for children and teenagers under a licensed programme.
- Registration number: 50203405101
- Registered address: Kvēles iela 17, Rīga, LV-1024, Latvia
- Contact address (studio): Tīnužu iela 2, Rīga
- Email: [email protected]
- Phone: +371 20636341
We process data in accordance with the EU General Data Protection Regulation 2016/679 (GDPR), the Latvian Personal Data Processing Law (Fizisko personu datu apstrādes likums) and other applicable laws.
2. Whose data we process
- parents and legal guardians — those who send an enquiry, enrol a child, pay for classes or simply get in touch with us;
- children and teenagers who attend classes at our studios or online;
- website visitors;
- job applicants and staff (as far as the employment relationship requires).
Enquiries, arrangements and payments are made only by adult parents or legal guardians. Children do not send enquiries or pay themselves.
3. What data we collect
About the parent: first and last name, phone number, email address, preferred lesson language and studio, comments in your enquiry, the history of our messages and calls.
For payments and documents: amount, date and reference of the payment, invoice details and, where needed, payer details. We never see or store card details: online payments are processed by the bank or payment provider. We process a personal identity number only where it is required for a contract, an invoice or a document required by law (for example, a statement for the education expenses tax refund).
About the child: first name, age or age group, schedule and attendance, learning progress. If you choose to tell us something important for safety (for example, an allergy to materials), we use it only to keep your child safe in class, and only with your consent.
In online lessons: the child's first name and the live video and audio during the Zoom lesson. We do not record lessons or store video.
Photos, videos and children's artwork — only with your separate consent (see Photo & Artwork Consent).
On the website: technical data (IP address, browser type, pages visited) and cookies — see our Cookie Policy.
4. Why we use data and our legal basis
- Replying to your enquiry, booking a trial lesson, finding the right group — your consent and steps taken at your request before a contract (Art. 6(1)(a) and (b) GDPR).
- Running classes: schedule, reminders, rescheduling, teacher feedback — performance of a contract (Art. 6(1)(b)).
- Issuing invoices, taking payments, bookkeeping — performance of a contract and legal obligation (Art. 6(1)(b) and (c)).
- Reporting to public authorities in the field of interest education where the law requires it — legal obligation (Art. 6(1)(c)).
- Answering questions, handling complaints, improving our classes, asking for your feedback — our legitimate interest in running the school well (Art. 6(1)(f)).
- Sending news and offers — your consent or, for existing customers, our legitimate interest in offering similar services of our own (you can opt out at any time, see section 5).
- Advertising the school online and measuring results (e.g. Meta Pixel, Google Analytics) — only with your cookie consent (Art. 6(1)(a)).
- Publishing children's photos and artwork, your testimonials — only with your separate consent (Art. 6(1)(a)).
- Protecting our rights, preventing misuse, keeping the studio safe — legitimate interest and legal requirements.
We do not make decisions about you or your child solely by automated means, and we do not build profiles that have legal effects. We do not use data for purposes unrelated to running the school.
5. Marketing and commercial messages
We may tell you about new groups, workshops, camps, offers and other NP Drawing news by email, SMS, WhatsApp or other messaging apps. We only write to parents — never to children.
You can opt out of marketing messages at any time:
- by clicking "unsubscribe" at the end of an email;
- by replying "stop" to a message;
- by writing to [email protected];
- by calling +371 20636341;
- in person at our studio at Tīnužu iela 2, Rīga.
We stop sending messages no later than five working days after receiving your request. Opting out of marketing does not affect service messages about your classes (schedule, rescheduling, invoices).
6. Who we share data with
We never sell personal data. We share it only with those who help us run the school, and only as much as needed:
- website hosting and protection against attacks — Cloudflare;
- processing website enquiries, our customer management system (CRM), automated notifications;
- email and document storage — Google;
- messaging apps — WhatsApp (Meta) and others, if you choose to contact us there;
- online booking and online lessons — Calendly, Zoom;
- payments — banks and payment providers (for example, Stripe);
- advertising and analytics — Meta, Google, only if you accept cookies;
- our accountant, lawyers and auditors;
- public authorities and law enforcement — only where and as far as the law requires;
- our teachers — only the data of students in their own groups.
Each processor is bound by a data processing agreement or by its own legal obligations.
7. Transfers outside the EU
Some of our providers (for example, Google, Meta, Cloudflare, Zoom, Calendly, Stripe) are based in the USA or may process data there. In such cases we rely on the EU–US Data Privacy Framework where the provider is certified, and/or on Standard Contractual Clauses approved by the European Commission.
8. How long we keep data
- enquiries that did not lead to classes — up to 12 months;
- customer and student data — while we work together and up to 24 months after the last lesson;
- accounting documents — as long as the law requires (in Latvia, usually 5 years);
- consent to news and offers — until you opt out or after 24 months without contact;
- published photos and artwork — until you withdraw consent;
- correspondence about complaints and disputes — until the limitation period expires.
When data is no longer needed, we delete it or irreversibly anonymise it.
9. Your rights
You have the right (including on behalf of your child) to:
- know what data we hold about you and get a copy;
- correct inaccurate data;
- ask us to delete data;
- restrict processing;
- receive your data in a machine-readable format and pass it to someone else;
- object to processing based on legitimate interest — and to marketing at any time;
- withdraw consent at any time — this does not affect processing that took place before.
To exercise your rights, write to [email protected] (ideally with a document signed with a secure electronic signature such as eParaksts) or come to our studio at Tīnužu iela 2 with an identity document. We will check that the request really comes from you — this protects your child's data from strangers — and reply within one month.
If you are unhappy with how we handle your data, please contact us first — we will try to put it right. You also have the right to complain to the Latvian Data State Inspectorate (Datu valsts inspekcija), www.dvi.gov.lv.
10. Children's data
We collect only the minimum about children, and we receive it from parents. We do not send children advertising, do not create accounts for them and do not use their data for advertising or profiling. We publish children's photos and artwork only with a parent's consent and never with surnames.
11. Security
We protect data with encrypted connections (HTTPS), limited access (only people who need data for their work can see it), reliable providers and confidentiality obligations for staff and teachers. If a breach occurs that may affect your rights, we will inform the Data State Inspectorate and you, as the law requires.
12. Cookies and social media
The website uses cookies. Essential cookies always work; analytics and advertising cookies can be switched off. Details are in our Cookie Policy.
If you message us or interact with our pages on Facebook, Instagram or other social networks, those platforms process your data under their own rules. We only see statistics about our pages in aggregated form.
13. Intellectual property
The texts, photographs, logos, graphics and other materials on the website belong to NP Drawing or are used with the permission of their owners. They may not be copied or distributed, in whole or in part, without our written permission.
14. Changes to this policy
We may update this policy. The current version is always published on this page, with the date of the last update shown at the top. We will inform customers in advance of significant changes.
15. Contact
SIA "ABNP GROUP" (NP Drawing) · Reg. No. 50203405101 · Registered address: Kvēles iela 17, Rīga, LV-1024 · Studio: Tīnužu iela 2, Rīga · [email protected] · +371 20636341