Privacy policy

Last updated: 12 October 2026

This Privacy Policy explains how we collect, use, and protect your personal data when you visit spacestyleboutique.com (the “Site”) or buy from us. We process personal data in line with the EU General Data Protection Regulation (GDPR) and the laws of the Republic of Lithuania.

1. Who we are (data controller)
UAB “Fotono greitis”, trading as Space Style Boutique
Company code: 302806993
Address: Aušros g. 13, 62153 Alytus, Lithuania
Email: mzilinskiene@gmail.com
Phone / WhatsApp: +370 699 12244

2. What data we collect

  • Order data: name, shipping and billing address, email address, phone number, order details, and payment status. Card payments are processed by Shopify and our payment providers. We do not see or store your full card number.
  • Account data: if you create an account, your login details and order history.
  • Communication data: messages you send us by email, WhatsApp, social media, or the contact form.
  • Device and usage data: IP address, browser type, device information, time zone, pages viewed, how you arrived at the Site, and how you use it. This data is collected using cookies and similar technologies.
  • Newsletter data: your email address, if you subscribe to our newsletter.

3. Why we use your data and on what legal basis

  • To process and deliver orders, handle returns, and contact you about your order. Legal basis: performance of a contract.
  • To meet legal obligations, such as accounting and tax requirements. Legal basis: legal obligation.
  • To prevent fraud and keep the Site secure. Legal basis: our legitimate interest.
  • To improve the Site and understand how visitors use it (analytics). Legal basis: your consent, given through the cookie banner.
  • To send newsletters and marketing messages and to show personalised ads. Legal basis: your consent, which you can withdraw at any time.

4. Who we share your data with
We share data only as far as necessary, with:

  • Shopify (online store platform): https://www.shopify.com/legal/privacy
  • Payment providers: e.g. Shopify Payments, PayPal, Paysera
  • Delivery companies: Omniva and other carriers receive your name, address, and phone number to deliver your parcel
  • Google Analytics (Site analytics): https://policies.google.com/privacy
  • Meta (Facebook / Instagram) for advertising, if you have agreed to marketing cookies
  • Accountants and public authorities, when required by law

We do not sell your personal data.

5. Transfers outside the EU
Some of our service providers, such as Shopify, Google, and Meta, may process data outside the European Economic Area, including in Canada and the United States. In such cases, data is protected by appropriate safeguards, such as European Commission adequacy decisions (including the EU–US Data Privacy Framework) or Standard Contractual Clauses.

6. Cookies
We use necessary cookies to make the Site work, for example for the shopping cart and checkout. We use analytics and marketing cookies only with your consent, which you can give or withdraw through the cookie banner. You can also delete or block cookies in your browser settings. More information: http://www.allaboutcookies.org.

7. How long we keep your data

  • Order and accounting records: 10 years, as required by Lithuanian accounting law
  • Account data: until you delete your account
  • Communication data: up to 2 years after our last contact
  • Newsletter data: until you unsubscribe
  • Analytics data: according to the cookie and service settings, up to 26 months

8. Your rights
You have the right to:

  • access the personal data we hold about you
  • have inaccurate data corrected
  • have your data deleted, unless we are required by law to keep it
  • restrict or object to the processing of your data
  • receive your data in a portable format
  • withdraw your consent at any time. This does not affect processing carried out before you withdrew your consent.

To exercise these rights, contact us at mzilinskiene@gmail.com. We will respond within one month.

9. Marketing
You can unsubscribe from our newsletter at any time by clicking the link in any email or by contacting us. You can also manage personalised ads in your Facebook and Google ad settings.

10. Children
Our Site is not intended for children under 16.

11. Changes to this policy
We may update this Privacy Policy from time to time. The latest version is always published on this page, together with the date of the last update.

12. Contact us
If you have questions about your data or this policy, contact us: