Privacy policy
How we handle your personal data under the GDPR.
Who we are
The data controller for this store is buitekas.lt (info@buitekas.lt).
What we collect
When you order: your name, email, shipping address, phone number (if you give one) and what you bought. Payments are handled by our payment provider; we never receive your full card number.
When you browse: your cart is saved in your own browser so it isn't lost. We don't use advertising or tracking cookies unless you agree to them.
Why we use it, and on what legal basis
To process, deliver and support your order (performance of a contract).
To keep accounting and tax records (legal obligation).
To send newsletters, only if you subscribed (consent, which you can withdraw at any time).
To prevent fraud and keep the store secure (legitimate interests).
Who we share it with
Our payment provider, our e-commerce and hosting providers, and the fulfillment partner and carriers that pack and deliver your order. Some of these companies are outside the EU (for example, fulfillment warehouses in Asia and hosting providers in the United States). Where data leaves the EU, we rely on safeguards such as the European Commission's standard contractual clauses or adequacy decisions.
How long we keep it
Order data is kept for as long as accounting and tax laws require (typically up to 10 years). Newsletter data is kept until you unsubscribe.
Your rights
You can ask to access, correct, delete or export your data, to restrict or object to how we use it, and to withdraw consent at any time. Email info@buitekas.lt. You can also complain to your data protection authority; in Lithuania, that is the State Data Protection Inspectorate.