PRIVACY & COOKIE POLICY
Last updated: 2025-11-27

1. Introduction

This Privacy & Cookie Policy explains how EKVINTA (“we”, “us”, “our”) collects, uses, and protects your personal data when you visit our website ekvinta.com, make a purchase, or interact with our services.

We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (GDPR) and applicable Lithuanian and EU laws.

2. Data Controller & Data Processing Responsibility

Depending on the activity, we may act as a Data Controller, a Joint Controller, or a Data Processor.

  • We act as a Data Controller for data you provide directly to us (e.g., orders, inquiries, account details).
  • We may act as a Joint Controller when your data is processed together with certain service providers (e.g., payment providers, analytics tools), under terms they determine.
  • In some cases, we may act as a Data Processor following the instructions of third-party platforms (e.g., WooCommerce extensions, payment gateways).

We ensure that any processing of your data is lawful, transparent, and limited to what is necessary for the intended purpose.

If you have questions about how your data is processed or who the Data Controller is for a specific activity, you can contact us at:
info@ekvinta.com

3. What Personal Data We Collect

We collect the following categories of data:

A. Data you provide directly

  • Name and surname
  • Shipping and billing address
  • Email address
  • Phone number (if provided)
  • Order information
  • Returns/refund information
  • Messages you send us (contact forms, email inquiries)

B. Automatically collected data

Through cookies, pixels, and analytics tools:

  • IP address
  • Device type
  • Browser information
  • Pages visited
  • Time spent on the website
  • Purchase behavior
  • cookie preferences

C. Payment Information

Processed securely by third-party providers (Stripe, PayPal, WooCommerce Payments, Klarna).
We do not store or access your full card details.

D. Marketing & Communication Data

  • Newsletter sign-up
  • Marketing preferences
  • Email engagement (open rate, clicks)

4. Tools & Services We Use

To operate our store, we use:

Analytics & Advertising

  • Google Analytics
  • Google Ads Conversion Tracking
  • Meta/Facebook Pixel
  • TikTok Pixel
  • Hotjar (heatmaps & behavior analytics)

E-commerce & Payments

  • Standard WooCommerce
  • WooCommerce Payments
  • Stripe
  • PayPal
  • Klarna

Email Marketing

We may use a general email marketing tool (e.g., Mailchimp, Klaviyo, Brevo or similar) for sending newsletters and promotional emails.
The tool may vary depending on availability.

Shipping & Logistics

  • Lithuanian Post / API-based shipping plugins
  • Fulfillment-related WooCommerce plugins

Cookie Management

  • Cookie banner plugin for consent management (GDPR compliant)

These service providers may collect personal data under their own privacy policies.

5. Why We Process Your Data

We process personal data for:

Order Processing

  • Payment processing
  • Shipping and delivery
  • Order confirmation and updates
  • Returns and refunds

Customer Support

  • Responding to questions
  • Solving delivery issues
  • Helping with returns and exchanges

Marketing & Personalization

  • Showing relevant ads
  • Sending newsletters (only with your consent)
  • Analyzing trends and website performance

Legal Obligations

  • Accounting requirements
  • Tax records
  • Fraud prevention

6. Legal Basis for Processing (GDPR)

We process your personal data under these legal bases:

  • Contract performance – To process your order or provide a service
  • Legal obligation – Accounting, tax, and consumer protection laws
  • Legitimate interest – Website security, analytics, improving services
  • Consent – Marketing emails, cookies, analytics, advertising tracking

You can withdraw consent at any time.

7. How Long We Keep Your Data

We retain personal data only as long as necessary:

  • Order & accounting data → 5–10 years (legal requirement)
  • Customer service messages → up to 24 months
  • Marketing data → until you unsubscribe
  • Cookies → according to their expiration period

We delete or anonymize data when it is no longer needed.

8. Sharing Your Data

We do not sell your data.

We share it only with essential service providers:

  • Payment processors (Stripe, PayPal, Klarna)
  • WooCommerce plugins
  • Shipping carriers (Lithuanian Post and API integrations)
  • Email marketing platforms
  • Analytics & advertising tools (Google, Meta, TikTok, Hotjar)
  • IT hosting and security services

All partners comply with GDPR or equivalent safeguards.

9. International Data Transfers

Some service providers may store data outside the EU (e.g., U.S.-based platforms).

We ensure safeguards such as:

  • Standard Contractual Clauses (SCC)
  • Data Processing Agreements (DPA)
  • GDPR-compliant mechanisms

10. Your Rights Under GDPR

You have the right to:

  • Access your data
  • Request correction
  • Request deletion (“right to be forgotten”)
  • Object to processing (marketing included)
  • Withdraw consent
  • Request data portability
  • File a complaint with the Lithuanian Data Protection Authority (VDAI)

To exercise your rights, email us at:
📩 info@ekvinta.com

11. Marketing Emails & Newsletters

You will receive marketing emails only if you have given explicit consent.

You may unsubscribe at any time through:

  • The “unsubscribe” link inside emails
  • Contacting us directly

We do not send newsletters without consent.

12. Cookies & Tracking Technologies

Our website uses cookies, pixels, and similar technologies.

We use:

  • Necessary cookies (site functionality)
  • Analytics cookies (Google Analytics, Hotjar)
  • Marketing/advertising cookies (Meta Pixel, TikTok Pixel, Google Ads)
  • Preference cookies

You can manage cookie preferences at any time via our cookie banner.

13. Security Measures

We use technical and organizational measures to protect your data:

  • SSL encryption
  • Secure servers
  • Access restriction
  • Secure payment gateways
  • Regular updates of plugins & systems

However, no system can guarantee absolute security.

14. Children’s Privacy

We do not knowingly collect personal data from individuals under 16 years old.

15. Changes to This Policy

We may update this Privacy & Cookie Policy from time to time.

Updates will be published on this page with a new “Last updated” date.

16. Contact Information

If you have any questions about this Policy or your data rights, contact us:
Email: info@ekvinta.com