Legal
Privacy Policy
Last updated: 2026-09-27
Who we are
This shop is operated by MB Eistrateg, registration code 307099536, registered in Lithuania ("we", "us"). We are the data controller for the personal data described below. You can reach us at the contact details on our Contact page.
What data we collect
We only collect what we need to sell and deliver your order:
- Order details — first name, last name, email address, delivery address, city, postal code, phone number (if you provide it), the items you bought and the amount paid.
- Contact form — your name, email address and the message you send us.
- Back-in-stock requests — your email address and the product you asked about.
- Technical data — standard server logs kept by our hosting provider for security and reliability.
- Advertising measurement data — with your consent, Google Ads receives limited information about visits and completed purchases, including the order value, currency and a transaction reference. We do not send your name, email, address or payment details to Google Ads.
We do not collect or store your card or bank details. Payments are handled entirely by Paysera; we only receive confirmation that a payment succeeded.
Why we use it, and on what legal basis
- To process and deliver your order, and to contact you about it — necessary to perform our contract with you (GDPR Art. 6(1)(b)).
- To keep accounting records of sales — required by Lithuanian law (GDPR Art. 6(1)(c)).
- To answer your message or tell you a product is back in stock — at your request, in our legitimate interest of responding to enquiries (GDPR Art. 6(1)(f)).
- To measure whether our Google advertisements result in purchases — only with your consent (GDPR Art. 6(1)(a)). You may withdraw that consent at any time using Cookie settings.
We do not sell personal data or use it for automated decision-making.
Who else processes your data
We use a small number of service providers who process data on our behalf under data processing agreements:
- Paysera — payment processing (Lithuania, EU).
- Supabase — the database storing orders and messages (EU region).
- Resend — sending order confirmation emails (emails are sent from the EU; delivery logs may be stored in the USA under EU-approved safeguards).
- Vercel — website hosting.
- Google Ads — advertising conversion measurement, only according to your consent choice.
We also share your name, address and phone number with the delivery service carrying your parcel, so that it can reach you.
How long we keep it
- Order and accounting records are kept for as long as Lithuanian accounting and tax law requires.
- Contact form messages and back-in-stock requests are deleted once they are no longer needed.
Your rights
Under the GDPR you have the right to:
- Ask what personal data we hold about you and get a copy of it.
- Have inaccurate data corrected.
- Ask us to delete your data, where we are not legally required to keep it.
- Ask us to restrict or object to how we use it.
- Receive your data in a portable format.
To exercise any of these, contact us using the details on our Contact page. You also have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt). Contact
Cookies
We use necessary browser storage to remember your shopping cart and cookie choice. We also use the Google Ads tag for conversion measurement. Advertising and analytics storage is denied by default and enabled only if you select Accept. You can reject optional tracking or change your choice at any time using Cookie settings.
Changes to this policy
If we change how we handle personal data, we will update this page and the date shown above.