Privacy & Cookie Policy

Last updated: 03-02-2026

We, SIA Paul Mason Properties, (“we” or “IKEA”), are committed to safeguarding your privacy and act as the data controller for the purposes of the General Data Protection Regulation (“GDPR”).

In this Policy, we explain what “personal data” we collect and why, how long do we keep it, whom do we share it with and how do we ensure that it remains secure. We also explain what privacy rights you have in relation to your personal data and how you can get in touch with us.

Note that by providing your personal data to us, you confirm that it is accurate and that you are at least 18 years old.

Mostly, we receive your personal data directly from you when you use our services, for example:

Shop in one of our stores, pick-up and order points, or online;

Create a registered IKEA Family account with us;

Use your IKEA Family card to enjoy some additional benefits;

Subscribe to our marketing newsletters;

Submit a request for a refund, return, replacement or other type of query with our Customer Relations team;

Participate in one of our promotional campaigns, games or other events;

Connect with us via our social media channels;

Or otherwise engage with us, whether online or in one of our physical locations.

We also collect some of your personal data automatically. This includes your location data (e.g., city), activity data (e.g., pages visited), device data (e.g., your IP address, device settings), and other technical information.

In some cases, we may receive your personal data from others, for example, our third-party service providers (e.g., delivery, warranty service, and other partners).
We may collect and use your personal data for the following purposes.

2.1. To ensure you can access the IKEA website and app

Description: We may use your personal data to enable you to access IKEA through our website or app and to ensure the proper functioning of all the essential features, like being able to browse our products and services.

If you download the IKEA app and give your permission, we may have access to your device’s camera, files, media, and other information. You may also agree to receive in-app push notifications from us (e.g., about the status of your order). You can manage your permissions by adjusting your device settings at any time.

Personal data: Device data (e.g., app user token, your device’s operating system, crash logs), activity data (e.g., interactions with the app, preferences), and/or other data (e.g., access to the camera, files and media on your device, if permitted).

Legal basis: Our legitimate interest in ensuring a smooth customer experience on the IKEA website and app; or your consent (for device access and push notifications).

Retention: Until the expiry or deletion of cookies and other trackers (see Section 3), or until you withdraw your consent.

2.2 To enable you to shop as an IKEA Family member or Guest

Description: We may use your personal data to enable you to shop at IKEA online, whether through our website or app. You may do so as a Guest or choose to create a registered IKEA Family account with us for some added convenience and benefits, like tracking your order history, accessing your IKEA Family benefits, as well as creating and storing your interior designs in the Planner. You may also shop with us as an IKEA Business customer.

Additionally, we may use your information (such as your email or phone number) to keep in touch with you regarding the status of your online order and notify you of our legal updates (e.g., changes to our Terms & Conditions and Privacy & Cookie Policy).

Personal data: Identification data (e.g., full name, login and password), contact data (e.g., home address, email, phone number), activity data (e.g., preferred pick-up point, favorite items, shopping cart), communications data (e.g., emails confirming your online order or account registration status), financial data (e.g., payment information), purchase data (e.g., order history, invoices), location data (e.g., IP address), device data (e.g., device settings, user token), and/or other data (e.g., designs created using the Planner).

Legal basis: Our contract with you (see our Terms & Conditions (for regular customers) and Terms & Conditions (for business customers)).

Retention: Until you delete your account, or after 5 years of inactivity (see our Terms & Conditions); purchase documents are stored for 10 years.

2.3 To handle your payments

Description: We may use your personal data to process your payments when shopping at IKEA, whether online or in one of our physical locations.

Note: We rely on third-party service providers to process your payments on our online store. Since they handle your personal data as independent data controllers, please refer to their respective privacy policies to find out more about how they use and safeguard your information.

Personal data: Identification data (e.g., full name), contact data (e.g., home address, email, phone number), and/or financial data (e.g., bank account information, credit or debit card details).

Legal basis: Our contract with you (see our Terms & Conditions).

Retention: As specified by our third-party service providers.

2.4. To offer the hire purchase arrangement

Description: We may use your personal data to provide you with a hire purchase option (Klix), which allows you to pay for IKEA products and services in installments, as specified in our financing agreement with you.

Note: This service is provided by our partner, AS Citadele Banka, who handles your personal data as an independent data controller. Please refer to their respective privacy policy to find out more about how they use and safeguard your information. Keep in mind that IKEA does not handle your personal data for this purpose directly.

Personal data: Identification data (e.g., full name), contact data (e.g., phone number, email), and/or financial data (e.g., credit amount, financing agreement details).

Legal basis: Our contract with you (see our Terms & Conditions).

Retention: As specified by AS Citadele Banka.

2.5 To provide interior design services to you

Description: We may use your personal data to provide interior design services to you (e.g., kitchen planning), order your selected items, and notify you about your order status (e.g., by email or text).

Personal data: Identification data (e.g., full name, signature), contact data (e.g., home address, email, phone number), and/or other data (e.g., premises layout, order details).

Legal basis: Our contract with you (see our Terms & Conditions).

Retention: 10 years following the completion of an interior design agreement; while your order information is stored for 1 year following its receipt, and the appointment-related information is kept for 3 months.

2.6 To deliver your order to you

Description: We may use your personal data to deliver the items you order online directly to your door or provide you with the Click & Collect option.

Note: In case of home delivery, we rely on third-party service providers to deliver your purchases to your chosen address. Since they handle your personal data as independent data controllers, please refer to their respective privacy policies to find out more about how they use and safeguard your information.

Personal data: Identification data (e.g., full name, signature), contact data (e.g., home address, email, phone number), and/or other data (e.g., order details).

Legal basis: Our contract with you (see our Terms & Conditions).

Retention: 10 years following the delivery of your order; and as specified by our third-party service providers.

2.7 To assemble or install your purchased items

Description: We may use your personal data to assemble and/or install your purchases at your home or other location.

Note: We rely on third-party service providers to assemble and install your purchased items. Since they handle your personal data as independent data controllers, please refer to their privacy policies to find out more about how they use and safeguard your information.

Personal data: Identification data (e.g., full name, signature), contact data (e.g., home address, email, phone number), and/or other data (e.g., order details).

Legal basis: Our contract with you (see our Terms & Conditions).

Retention: 10 years following the assembly or installation of your order; and as specified by our third-party service providers.

2.8 To provide a warranty service to you

Description: We may use your personal data to provide you with a warranty service.

Note: We may also rely on third-party service providers to provide you with a warranty service. Since they handle your personal data as independent data controllers, please refer to their respective privacy policies to find out more about how they use and safeguard your information.

Personal data: Identification data (e.g., full name), contact data (e.g., home address, email, phone number), or other data (e.g., description of the issue, photo evidence).

Legal basis: Our contract with you (see our Terms & Conditions).

Retention: 10 years following the completion of a warranty service (if provided by IKEA), while personal data received from third-party warranty services providers is stored for up to 1 year; and as otherwise specified by our third-party service providers.

2.9. To manage returns, replacements and refunds

Description: We may use your personal data to handle the return and/or replacement of your purchased IKEA item, as required by the laws of the Republic of Latvia and our internal procedures, and/or to issue refunds to your bank account.

Note: We may also receive your personal data from the third-party warranty service provider you have contacted.

Personal data: Identification data (e.g., full name, signature), contact data (e.g., home address, email, phone number), financial data (e.g., bank account number), and/or other data (e.g., order details, completed returns, replacement or refund form).

Legal basis: Our contract with you (see our Terms & Conditions).

Retention: 10 years following the return, replacement or refund for an IKEA item, while personal data received from third-party warranty services providers is stored for up to 1 year.

2.10. To provide customer support to you

Description: We may use your personal data so that we can evaluate and respond to your queries, requests, complaints, feedback, and other concerns.

Keep in mind that when you reach out to our Customer Support Centre by phone, we record these conversations for quality assurance purposes. If you do not agree with this, you may choose to contact us via email or by visiting one of our customer meeting points in person instead.

Note: In case of missing or damaged items or other issues with your order, we may transfer your personal data to our third-party insurance service providers to process your claim. Since they handle your personal data as independent data controllers, please refer to their respective privacy policies to find out more about how they use and safeguard your information.

Personal data: Identification data (e.g., full name, loyalty card number), contact data (e.g., home address, email, phone number), activity data (e.g., purchase history), special category data (e.g., health data), or other data (e.g., content of request or complaint and supporting documentation, voice recordings).

Legal basis: Our legal obligation (e.g., Law on Consumer Protection of the Republic of Latvia; our contract with you (see our Terms & Conditions); or our legitimate interest in handling our your concerns (for the recordings of your phone conversations with our Customer Support Centre, or in case you are a non-customer reaching out to us).

Retention: 1 year following the resolution of your query, complaint or other type of request, while the recordings of phone conversations with our Customer Support Centre are kept for 30 days.

Note: We may retain your personal data for longer in case that is necessary for the protection of our or a third party’s legitimate interests (e.g,. in case of a legal dispute), or as specified in our settlement agreement with you.

2.11. To provide childcare services at Småland

Description: We may use your and your child’s personal data in order to provide you with our childcare services at Småland during your visit to IKEA. For this purpose, we collect certain personal data that allows us to identify you and your child; get in touch with you during your child’s stay with us; and/or pass your and your child’s information to the official authorities, medical staff, insurance providers or other third parties in case of an emergency. Please note that the local laws in Latvia require us to collect certain information about your child.

Personal data: Identification data (e.g., your full name, your child’s full name, age, personal code and declared place of residence), contact data (e.g., telephone number), or other optional data (e.g., voluntarily provided information to our staff about your child.

Legal basis: Our contract with you (see our Småland Rules); and legal obligation (the Cabinet Regulation No. 404 on the “Requirements for Child Supervision Service Providers and the Procedure for Registering Child Supervision Service Providers”) (for collecting your child’s personal data, including personal code and declared address of residence).

Retention: 1 month following the end of the calendar month in which you visited Småland.

2.12. To provide various in-store services

Description: We may use your personal data to provide various in-store services to you (such as leasing you a wheelchair or administering the Lost & Found service).

Personal data: Identification data (e.g., full name, signature), and/or contact data (e.g., phone number).

Legal basis: Our contract with you (see our Terms & Conditions); or legal obligation.

Retention: Until the end of the service.

2.13. To improve your customer experience

Description: We may use your personal data in order to carry out statistical analysis and business reporting so that we can improve our products and services, enhance user experience on our website and app, and adjust our commercial strategy. For instance, we analyze what products you add to the list of your favorite items or how you tend to use our app, which helps us get a general overview of our customer interests.

Also, if you agree to receive direct marketing from us (see Section 2.14.), we track your engagement with our email marketing communications (e.g., if and when you have opened the message, clicked on its content, etc.). We do this to better understand if the information we send is relevant to you.

Personal data: Activity data (e.g., purchase history, favorite items, app usage), location data (e.g., country, city), device data (e.g., information collected via cookies or other trackers), and/or other data (e.g., gender, if you have children under 12).

Legal basis: Our legitimate interest in better understanding our customers and improving our products and services.

Retention: Until you delete your account, or after 5 years of inactivity (see our Terms & Conditions).

2.14. To send you direct marketing and personalize your experience

Description: We may use your personal data to send you inspirational newsletters about our news, special offers, promotions, home ideas and other updates about IKEA products and services; to notify you whenever your marked IKEA items are back in stock; to remind you about the items you have put in your online shopping basket; ask for your feedback; or invite you to participate in our customer surveys, special events or other activities.

If you agree, we may also send you direct marketing communications tailored to your personal characteristics or interests (e.g., city, gender, if you live with children under 12 years of age, your favorite items, purchase history, etc.).

With your permission, we may also invite you to participate in our promotional campaigns, games, competitions, and other events (see Section 2.15. below).

If you allow, we may also use your personal data for personalization purposes (displaying relevant content, offers or recommendations based on your interactions with us and your profile information).

Personal data: Identification data (e.g., name, IKEA Family card number), contact data (e.g., email, phone number), activity data (e.g., favorite items, preferences), communications data (e.g., content of email or text messages), device data (e.g., information collected via cookies or other trackers), and/or other data (e.g., city, gender, language, if you live with children under 12 years of age).

Legal basis: Your consent.

Retention: Until you choose to unsubscribe (by changing your preferences in your profile settings; clicking on the unsubscribe link in each email you receive from us; or contacting us at the details provided in Section 8 below).

2.15. To allow you to join our events and other promotional activities

Description: We may use your personal data to enable you to participate in IKEA digital or in-person promotional campaigns, games, competitions, and other events.

Keep in mind that during our in-person events, photos and/or video recordings of you may be taken and shared on our website, social media or other platforms. If you do not wish to be captured, please inform the IKEA representatives at the specific event in advance.

Personal data: Identification data (e.g., full name, IKEA Family card number, social media handle), contact data (e.g., email, phone number, home address), and/or other data (e.g., entry submissions, photos, or videos).

Legal basis: Your consent (for participation); legitimate interest in promoting the IKEA brand, products and services, or contractual agreement (in case of photo and/or video recordings).

Retention: As indicated in the privacy information of a specific event or promotional activity.

2.16. To connect with you on social media

Description: We may use your personal data when you engage with us (e.g., comment, share or like posts from IKEA) on our social media channels (like Facebook, Instagram, LinkedIn, and others).

Note: We rely on third-party service providers who manage these social media platforms that we use. Since they handle your personal data as independent data controllers, please refer to their privacy policies to find out more about how they use and safeguard your information.

Personal data: Identification data (e.g., full name, social media handle, photos), activity data (e.g., comments, likes, shares), and/or location data (e.g., city).

Legal basis: Your consent (in specific cases); or our legitimate interest in promoting the IKEA brand, products and services.

Retention: As specified by our third-party service providers.

2.17. To register you as a visitor to our premises

Description: We may use your personal data when you visit our premises (e.g., one of our offices).

Personal data: Identification data (e.g., full name, signature, company), and/or other data (e.g., date and time of visit, visitor’s number).

Legal basis: Our legitimate interest in managing access to our premises, ensuring the health, safety and security of persons and property as well as the confidentiality of our business information.

Retention: 30 days following the end of your visit.

2.18. To carry out video surveillance in our premises

Description: We may use your personal data in the context of our video surveillance operations in our stores, pick-up-and-order points, and other indoor and outdoor premises owned or controlled by us.

Personal data: Video recordings containing your image.

Legal basis: Our legitimate interest in ensuring the health, safety and security of our property, customers, employees, and other third parties, and preventing, controlling and investigating unlawful acts, and other incidents.

Retention: 25 days, or until the resolution of an investigation, legal claim or other proceedings.

2.19. To fulfill our contractual, legal and tax obligations

Description: We may use your personal data in order to fulfill our contractual, legal and tax obligations (e.g., managing our contract and payments with you, completing a transfer-acceptance deed for a prize or a gift, issuing an invoice, submitting reports to the tax authorities, reporting to auditors, etc.).

Personal data: Identification data (e.g., full name, company, date of birth, personal code), contact data (e.g., home address, email, phone), and/or other data (e.g., contract, bank account information, VAT registration number, company number).

Legal basis: Our contract with you (see our Terms & Conditions or the individual contract); or legal obligation (on a case-by-case basis).

Retention: 10 years following the end of our contractual relationship (or until the expiry of a warranty), or as required by law.

2.20. To defend our rights and legitimate interests

Description: We may use your personal data (including special category data, such as data relating to your health) for the purposes of preventing, controlling or otherwise managing potential and actual criminal, administrative or other types of offences and reporting the same to the public authorities. We may also use your personal data for the purposes of our legal, debt recovery, insurance, or other claims.

Note: In certain cases (e.g., criminal activity), we may be required to disclose certain personal data to law enforcement, regulatory or other public authorities or authorized third parties.

Personal data: Identification data (e.g., full name), contact data (e.g., email, phone number), and/or other data (e.g., information relating to an administrative, criminal or other type of offence, or a legal or other type of claim).

Legal basis: Our legitimate interest in establishing, exercising and defending our rights and legal claims.

Retention: 10 years following the resolution of a specific case; or as required by law.
“Cookies” are small text files that are stored on your computer, phone, or tablet, and allow us to optimize and personalize our website for you; better understand how you are using it; and show you targeted advertising.

In addition to cookies, there are other tracking technologies that we use to store and read information on your computer, tablet or mobile phone, such as Javascript, tracking pixels, and local storage.

3.1 What types of cookies do we use?

We use the following types of cookies on our website:

Strictly necessary: They are necessary for our website to work properly (e.g., so you can easily navigate through the pages, add items to a shopping basket, view videos, etc.). These are essential cookies that are enabled automatically.

Functionality and customization cookies: They help us improve your user experience by remembering your preferences (e.g., language and country).

Performance and analytics cookies: They help us enhance our website and provide you with a more personalized experience by tailoring content to your individual interests. Together with our partners, we use these cookies to collect information about how you interact with our website (e.g., pages you visited and how long you spent on them, the links you clicked on, etc.), which, in turn, helps us improve your experience when shopping at IKEA.

Advertising, marketing and social media cookies: They help us and our third-party partners track your activity across multiple websites and build your profile in order to display ads tailored to your specific interests

Some of these cookies are set by us (the so-called first-party cookies), while others are set by our third-party partners (e.g., advertisers, analytics providers).

We keep your personal data collected through cookies based on how long each cookie lasts. More specifically, session cookies are temporary and last only for the duration of your browsing session, while persistent cookies are set for a specific period of time.

3.2 How can you manage your cookie preferences?

You can find more detailed information on the exact cookies we use and change your preferences at any time by clicking on the Cookie Settings link at the bottom of the page.

Note that when you withdraw your consent to non-essential cookies (i.e., those other than strictly necessary cookies), we will stop placing new cookies while those already placed on your browser will be deactivated and no longer collect your personal information. If you wish to remove cookies that were previously placed on your device, you need to do so manually through your browser settings. Below are the instructions on how to remove cookies in the most commonly used browsers:

Google Chrome

Mozilla Firefox

Safari

Microsoft Edge

In case you are using a mobile browser or our app, please refer to your device’s or app’s help resources for instructions.
You are free to choose whether you wish to provide your personal data to us; yet this may change if and how we are able to engage with you.

More specifically, if we require certain information in order to uphold our contract with you or comply with our legal obligations, your refusal could result in us not being able to provide you with our services or certain features (e.g., to process your order, provide you with a home delivery or assembly service, process your return, etc.).

In other cases, however, particularly when we rely on your voluntary permission (e.g., to send you direct marketing emails), you can withdraw your consent at any time, and this will not affect your ability to access our services (although you may miss out on some exciting offers and news from IKEA).
We may share your personal data with the following parties.

5.1. Inter IKEA Group companies

Since we, SIA Paul Mason Properties, belong to the Inter IKEA Group, we may share your personal data with other group companies for business and operational support purposes.

5.2. Our service providers and partners

We work with a number of trusted service providers and partners in order to deliver the best possible customer experience to you. They support us in key areas such as payments, logistics, home delivery, assembly and installation, warranty service, IT, cloud storage, technical support, safety and security, communications, marketing, analytics, among others.

We may also share your personal data with other entities that support our business operations, such as our legal and tax advisers, notaries, auditors, accountants, insurance providers, business consultants, translators, and others.

As some of our service providers and partners are based outside the European Economic Area (“EEA”), we rely on either the adequacy decisions or the Standard Contractual Clauses issued by the European Commission when transferring your personal data to the non-EEA locations. This ensures that your personal data remains subject to the same protections as those provided by the GDPR, even when shared internationally.

5.3. Authorized entities

In some cases (e.g., suspected or actual illegal activity or safety concerns), we may have to share your personal data with public authorities (regulatory bodies, government agencies, law enforcement, courts, etc.) or other entities, as required by law or in case that is necessary for the establishment, exercise or defense of our rights or legal claims.
Under the GDPR, you have certain privacy rights, which you may exercise at any time by contacting us at the details provided in Section 8 below. Note that the below rights are subject to certain exceptions and limitations defined in the GDPR and the local data protection laws.

Keep in mind that before we can handle your privacy rights request, we may first need to verify your identity. Please also be aware that we are unable to provide you with information about other individuals or change the way we handle their data, unless you can demonstrate that you are authorized to request this.

Right to access: You may ask us to provide you with a copy of the information we hold about you. Note that this excludes information that may negatively impact the rights and freedoms of other individuals.

Right to correction: You may request us to update any incorrect or incomplete information about you.

Right to deletion: You may ask us to delete the information we hold about you, in case where:

Your personal data is no longer needed for the purpose it was collected and used;

You withdraw your consent (if that was the legal basis under which we handled your personal data);

You object to us handling your personal data and there are no overriding reasons for us to keep it;

Your personal data was processed unlawfully; or

Or other conditions specified in the data protection laws apply.

Note: Remember that simply uninstalling the IKEA app from your device does not delete your IKEA Family account automatically—you need to submit a deletion request by contacting us at the details provided in Section 8 below.

Right to restriction: You may ask us to restrict the use of your personal data in certain cases. This means we will continue to store your information, but we will temporarily stop using it for other reasons. You may wish to do so when:

You are waiting for us to correct your personal data;

You believe your information was collected unlawfully and you prefer us to limit its use rather than delete it entirely;

You wish us to retain your information so that you can establish, exercise or defend a legal claim; or

You have objected to us handling your personal data and are awaiting our assessment whether we have any overriding reasons to continue handling it.

Right to data portability: You may request us to provide you with a copy of your personal data in a structured, commonly used and machine-readable format and/or have it transferred to another entity. Note that this only applies to personal data that is handled using automated means and on the basis of your consent or our contract with you.

Right to object: You may object to us handling your personal data when we do so on the basis of our legitimate interests, and there are no overriding reasons or legal claims that would make it necessary for us to keep using your information. Note that in the case of direct marketing specifically, we will always respect your objection and stop sending you communications as soon as you unsubscribe.

Right to withdraw consent: You may take away your consent (where we rely on it as a legal basis to handle your personal data) at any time. Note that this will not affect the legality of our use of your information prior to this withdrawal.

Right not to be subject to automated decision-making: You may choose not to be subject to automated decision-making (including profiling) that has significant legal or other effects on you. The only exceptions to this are when such decisions are required by law, necessary for us to uphold our contract with you, or if we have your explicit consent. Yet some safeguards still apply, for example, your right to request human review, express your point of view, and contest the decision.

Right to complain: You may reach out to us at the details provided in Section 8 in case you have any questions or concerns about how we handle your personal data. If our response is not satisfactory or if you wish to raise a complaint with the local data protection authority instead, you may contact them at Data State Inspectorate of the Republic of Latvia (Elijas iela 17, Rīga, LV-1050; www.dvi.gov.lv; phone no.: +371 67223131; email: [email protected]).
If you have any questions about how we handle your personal data, wish to exercise your privacy rights or submit a complaint, you can reach out to our Data Protection Officer by email at [email protected] or by post at SIA Paul Mason Properties, registration no.: LV50103951541, address: Bikeru St. 2, Ulbroka, Stopiņi rural territory, Ropaži municipality, LV-2130, Latvia.

If you have a non-privacy related query, you can contact our Customer Support Centre at +371 63301000 or [email protected].