Privacy Policy

This Privacy Policy explains how we collect, use, share and protect your personal data when you visit our store or place an order. We process personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable national law.

1. Who we are

The data controller is Example Accessories, Gedimino pr. 1, Vilnius, Lithuania. For any privacy questions you can reach us at privacy@example.com.

2. What information we collect

We collect information you give us and information collected automatically:

• Order and account data — name, email, phone number, billing and delivery address.
• Transaction data — items purchased, amounts and payment confirmation (we never store full card numbers).
• Communications — messages you send us and our replies.
• Technical and usage data — IP address, device and browser type, and how you use the site, collected through cookies and analytics.

3. How we use your information and our legal basis

We use your data to: process and deliver orders and handle returns (to perform our contract with you); send service messages such as order confirmations (contract); send marketing emails where you have opted in (consent); improve and secure the store and meet accounting and tax obligations (our legitimate interests and legal obligations).

4. Cookies and analytics

We use essential cookies to make the store work (for example your cart and session) and, with your consent, analytics cookies to understand how the site is used. You can manage non-essential cookies at any time through your browser or our cookie settings.

5. Who we share your data with

We share data only with the service providers needed to run the store — payment processors, delivery couriers, our hosting and email providers — and only as far as necessary. These providers act as our processors under written agreements. We may also disclose data where required by law. We never sell your personal data.

6. How long we keep your data

We keep order and accounting records for as long as required by tax law (generally up to 10 years), account data for as long as your account is active, and marketing data until you withdraw consent. After that, data is deleted or anonymised.

7. Your rights

Under the GDPR you have the right to access your data; to have it corrected or erased; to restrict or object to processing; to data portability; and to withdraw consent at any time. To exercise any of these rights, contact us at privacy@example.com. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania.

8. How we protect your data

We use appropriate technical and organisational measures — including encryption in transit, access controls and secure payment processing — to protect your data against loss, misuse and unauthorised access.

9. International transfers

Where a provider processes data outside the European Economic Area, we ensure appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses.

10. Children

Our store is intended for adults. We do not knowingly collect personal data from children under 16 without parental consent.

11. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the effective date noted at the top of any major change.