Privatumo strategija

PRIVACY POLICY

Last updated: September 4, 2026

Foxglove House respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store and protect personal data when you visit, use or make a purchase from the Foxglove House online store.

1. DATA CONTROLLER

The data controller responsible for your personal data is:

Foxglove House
Skaistė Proscevičienė
Self-employed individual
Individual Activity Certificate No. 1503657
Statybininkų g. 11A-17
37363 Panevėžys
Lithuania

Email: pastas.skaiste@gmail.com
Phone: +370 690 55201

Foxglove House is the controller of personal data processed for the purposes described in this Privacy Policy, except where another organisation is responsible for its own processing, as described below.

2. PERSONAL DATA WE COLLECT

Depending on how you use our online store, we may collect and process the following personal data:

• name and surname;
• billing and delivery address;
• email address;
• telephone number;
• order and purchase information;
• information relating to returns, refunds, complaints and customer service enquiries;
• payment and transaction information processed through our payment service providers;
• information necessary to arrange delivery, including parcel locker or delivery information;
• technical information such as IP address, browser type, device information and information about your interaction with our website, where collected through cookies or similar technologies.

We aim to collect only personal data that is necessary for the relevant purpose.

3. HOW WE COLLECT PERSONAL DATA

We may collect personal data:

• directly from you when you place an order, contact us, subscribe to communications or otherwise provide information to us;
• automatically when you use our website, including through cookies and similar technologies;
• from service providers who process information on our behalf in connection with operating our online store and providing services to you;
• from other third parties where permitted by applicable law.

4. HOW WE USE YOUR PERSONAL DATA

We may use your personal data for the following purposes:

• to process and fulfil your orders;
• to process payments;
• to arrange delivery of your purchases;
• to provide order confirmations and other necessary order-related communications;
• to provide customer support and respond to enquiries;
• to process returns, refunds and complaints;
• to maintain accounting, tax and other legally required business records;
• to maintain, secure and improve our online store;
• to prevent fraud, misuse and security incidents;
• to comply with legal obligations;
• to send marketing communications where you have provided the required consent.

5. LEGAL BASES FOR PROCESSING

Where required by applicable data protection law, including the General Data Protection Regulation (GDPR), we process personal data on the following legal bases:

Contract

We process personal data where it is necessary to enter into or perform a contract with you, including processing and fulfilling your order, processing payments, arranging delivery and handling returns and refunds.

Legal obligation

We process personal data where necessary to comply with legal, tax, accounting and other obligations imposed on us by law.

Legitimate interests

We may process personal data where this is necessary for our legitimate interests, such as operating and securing our online store, preventing fraud and abuse, providing customer support, improving our services and protecting our legal rights, provided that these interests are not overridden by your rights and freedoms.

Consent

Where we rely on your consent, we process personal data only after obtaining the required consent. You may withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

6. PAYMENTS

Payments are processed through the payment methods and payment service providers available at checkout.

We do not store your full payment card number or card security code on our own systems. Payment information is processed by the relevant payment service provider in accordance with its own privacy policy and security measures.

7. SHIPPING AND SERVICE PROVIDERS

To fulfil your order, we may share the personal data necessary for delivery with shipping and parcel-locker service providers.

We may also share necessary personal data with service providers that help us operate the online store, process payments, provide customer support, maintain technical services or provide other services necessary for your purchase.

Only information necessary for the relevant service is shared.

These service providers may process personal data on our behalf and are required to handle it in accordance with applicable data protection requirements.

8. SHOPIFY

Our online store is hosted and operated using Shopify.

Shopify provides the e-commerce platform that enables us to sell products, process orders, accept payments and provide other online store functionality.

Shopify may process personal data in accordance with its own privacy policy, data processing terms and applicable data protection laws.

9. SHOPIFY NETWORK INTELLIGENCE AND ENHANCED SERVICES

Shopify Network Intelligence is enabled for our store.

Shopify may securely use customer data together with data from other Shopify merchants and Shopify to provide and improve enhanced services and features.

This may include using information about interactions with our store, other merchants and Shopify to help provide a more customised experience, improve Shopify services, provide reporting and analytics, and support relevant advertising and marketing services.

Information relating to your activity on our store may be shared with Shopify and third parties that may be located in countries other than where you live in order to provide these services.

Where required by applicable law, including for customers in the European Economic Area, the United Kingdom or Switzerland, Shopify relies on consent for certain processing connected with personalised advertising and provides mechanisms for customers to withdraw consent or object to certain processing.

You can learn more about how Shopify processes personal data and exercise applicable rights through the Shopify Consumer Privacy Policy and Shopify Privacy Portal.

https://www.shopify.com/legal/privacy/app-users

10. COOKIES AND SIMILAR TECHNOLOGIES

Our online store uses cookies and similar technologies.

Some cookies are necessary for the operation, security and functionality of the online store.

Other cookies or similar technologies may be used for analytics, marketing or other purposes where applicable.

Where consent is required by law, non-essential cookies and similar technologies will only be used after the required consent has been obtained.

You can manage your cookie preferences through the cookie settings available on our website.

11. MARKETING COMMUNICATIONS

Where you have provided the required consent, we may use your email address or other contact details to send marketing communications about our products, offers or other updates.

You can withdraw your consent or unsubscribe from marketing communications at any time by using the unsubscribe option included in the relevant communication or by contacting us.

We may continue to send necessary non-marketing communications relating to your orders, purchases or customer service enquiries.

12. DATA RETENTION

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy.

Order, accounting, tax and other business records may be retained for longer where required by applicable Lithuanian law.

Other personal data will generally be retained only for as long as necessary for the relevant purpose, unless a longer retention period is required or permitted by law, or is necessary to establish, exercise or defend legal claims.

When personal data is no longer required, it will be deleted or securely disposed of where appropriate.

13. DATA SECURITY

We take appropriate technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

14. INTERNATIONAL DATA TRANSFERS

Some of the service providers used to operate our online store may process personal data outside the European Economic Area.

Where personal data is transferred outside the European Economic Area, we will use appropriate safeguards where required by applicable data protection law, such as an adequacy decision or recognised contractual safeguards.

15. YOUR DATA PROTECTION RIGHTS

Subject to applicable law, you may have the right to:

• obtain information about the processing of your personal data;
• request access to your personal data;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing of your personal data;
• request data portability where applicable;
• withdraw consent where processing is based on consent.

You may exercise your rights by contacting us:

Email: pastas.skaiste@gmail.com
Phone: +370 690 55201

We may need to verify your identity before responding to certain requests.

16. SHOPIFY PRIVACY RIGHTS

Where Shopify processes personal data for its own purposes as described in the Shopify Network Intelligence and Enhanced Services section, Shopify may be responsible for responding to requests concerning that processing.

You may exercise applicable rights directly with Shopify through the Shopify Privacy Portal.

https://privacy.shopify.com/en

17. AUTOMATED DECISION-MAKING

We do not use your personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.

18. CHILDREN'S DATA

Our online store is not directed to children.

We do not knowingly collect personal data from children where such collection is prohibited by applicable law.

If you believe that a child has provided us with personal data, please contact us so that we can take appropriate steps to delete the information where required.

19. RIGHT TO LODGE A COMPLAINT

If you believe that your personal data has been processed unlawfully, you have the right to contact us and request that we review the matter.

You also have the right to lodge a complaint with the competent data protection supervisory authority.

In Lithuania, the supervisory authority is:

State Data Protection Inspectorate
(Valstybinė duomenų apsaugos inspekcija – VDAI)
Lithuania

20. THIRD-PARTY WEBSITES

Our website may contain links to third-party websites or services.

If you follow a link to a website that we do not control, we recommend reviewing that website's privacy policy and terms.

We are not responsible for the privacy practices of third-party websites.

21. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes to our business, online store, services or applicable legal requirements.

The latest version will be published on this page together with the date of the latest update.

22. CONTACT

If you have any questions about this Privacy Policy or how we process your personal data, please contact:

Foxglove House
Skaistė Proscevičienė
Statybininkų g. 11A-17
37363 Panevėžys
Lithuania

Email: pastas.skaiste@gmail.com
Phone: +370 690 55201