Privacy Policy
1. Who we are
This Privacy Policy explains how UAB Jusmila ("Jusmila", "we") processes your personal data when you use the online store jusmila.lt, buy products, or contact our team.
Data controller — UAB Jusmila, code 305847291, registered office Vytauto g. 50, LT-71121 Šakiai, email info@jusmila.lt. Processing is carried out in accordance with the EU General Data Protection Regulation (GDPR) and the Lithuanian Law on Legal Protection of Personal Data.
2. What data we collect
We collect the following types of data: contact information (name, surname, email, phone, address), order data (purchased items, prices, payment method), technical information (IP address, browser type, cookie data), and communications (content of email or contact-form correspondence). We do not store payment-card data ourselves — it is handled by our PCI-DSS-certified payment provider Stripe.
3. Why we collect it
Main processing purposes: order fulfilment (contract performance — GDPR Art. 6(1)(b)), customer service (our legitimate interest — Art. 6(1)(f)), legal obligations (accounting, warranty — Art. 6(1)(c)).
With your consent (Art. 6(1)(a)) we process data for direct-marketing purposes — newsletters, promo notifications. You can withdraw consent at any time by clicking the "unsubscribe" link in the email or writing to info@jusmila.lt.
Cookie and analytics data are processed to ensure website operation and analyse usage. See the Cookies section below for detail.
4. Who we share with
Your data may be shared with trusted service providers under data-processing agreements: DPD Lietuva and Omniva (delivery), Stripe (payments), Brevo (email, newsletters), Hetzner (hosting).
Data may be disclosed to law-enforcement authorities where required by Lithuanian law. We never sell or share your data with third parties for marketing without your consent.
5. How long we keep it
Order and accounting data — 10 years under the Lithuanian Accounting Law. Account data — until account deletion or 3 years after last activity. Newsletter data — until consent is withdrawn. Correspondence — 2 years. Cookie data — by cookie type (see below).
6. Your rights
Under GDPR you have the right to access processed data, request correction of inaccurate data, request erasure ("right to be forgotten"), restrict processing, request data portability, object to processing, and withdraw consent.
You can exercise these rights by writing to info@jusmila.lt. We respond within 30 calendar days. If you believe your rights have been violated, you have the right to file a complaint with the State Data Protection Inspectorate (vdai.lrv.lt).
7. Cookies
Cookies are small text files stored on your device when you visit the site. We use: strictly necessary cookies (cart, sessions — no consent needed), functional cookies (language selection, button states — no consent needed), analytics cookies (Plausible Analytics — anonymised traffic, consent-based), marketing cookies (Meta Pixel, Google Ads — consent only). You can manage cookie preferences through the consent banner or your browser settings.
8. Security
We apply technical and organisational measures — TLS encryption for all traffic, encrypted databases, role-based access for staff, regular security updates. Payment data is processed by PCI-DSS-compliant Stripe, so we never see it.
9. Contact us
All privacy-related questions: email info@jusmila.lt, phone +370 685 777 56, postal address UAB Jusmila, Vytauto g. 50, LT-71112 Šakiai.
10. Changes
We may update this Privacy Policy — material changes are posted on the website and, if we have your email, notified by email. The latest version applies from its publication date.
11. Children's privacy
Our site is not directed at persons under 16. We do not knowingly collect or process data of minors. If we discover such data has been collected without parental consent, it is removed immediately.