Privacy Policy

This Privacy Policy explains how your personal data is collected, used, and protected when you visit or make a purchase from our website.

1. The Data Controller

The entity responsible for the processing of your personal data (the “Data Controller”) is:

  • Name: Rasa Januškaitė (Individual operation)
  • Address: Pagėgių g. 15B-9, Kaunas, Lithuania
  • Contact Email: rasaparduotuve@gmail.com

2. What Personal Data We Collect and Why

We only collect the data necessary to provide our services, process your orders, and improve your experience on our website.

  • Account Creation & Order Fulfillment: When you create an account or place an order, we collect your name, email address, phone number, and billing/shipping addresses.
    • Purpose & Legal Basis: To process your order, deliver your goods, and provide customer support (Performance of a Contract).
  • Payment Information: We do not store your credit card or bank details on our servers. All payments are processed securely by our authorized third-party payment gateways (Stripe and Paysera).
    • Purpose & Legal Basis: To securely finalize your purchase (Performance of a Contract).
  • Website Analytics: We use Google Analytics to understand how visitors interact with our website. This may collect technical data such as your IP address, browser type, and pages visited.
    • Purpose & Legal Basis: To improve our website performance and user experience (Consent via cookie banner).

3. Who We Share Your Data With

We do not sell your personal data. We only share your data with trusted third-party service providers who assist us in operating our store:

  • Hostinger: For website hosting and email services.
  • WordPress & WooCommerce: Our e-commerce platform that manages store functionality.
  • Stripe & Paysera: To securely process your payments.
  • Google Analytics: To analyze website traffic securely and anonymously.

These providers are legally obligated to protect your data and only process it according to our instructions and applicable GDPR laws.

4. Data Retention

We will retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy:

  • Customer Accounts: Kept until you request deletion.
  • Order & Financial Records: Retained for 10 years to comply with Lithuanian tax and accounting laws.
  • Analytics Data: Retained according to Google Analytics standard retention periods (typically 14 to 26 months).

5. Cookies and Tracking Technologies

Our website uses cookies (small text files placed on your device) to ensure the site functions correctly:

  • Essential Cookies: Required for WooCommerce to remember what is in your cart and keep you logged in.
  • Analytics Cookies: Placed by Google Analytics to help us measure website traffic. You have the right to accept or decline these non-essential cookies.

6. Your Rights Under GDPR

As a resident of the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of Access: You can request a copy of the personal data we hold about you.
  • Right to Rectification: You can ask us to correct any inaccurate or incomplete data.
  • Right to Erasure (Right to be Forgotten): You can request that we delete your personal data, subject to certain legal exceptions (e.g., tax records).
  • Right to Restrict Processing: You can ask us to temporarily stop processing your data.
  • Right to Withdraw Consent: Where we rely on your consent (e.g., analytics cookies), you can withdraw it at any time.

How to exercise your rights: To make a request regarding your data, please email us at rasaparduotuve@gmail.com. We will respond within 30 days.