Privacy policy

MB „Mirelle Rituals“ respects your privacy and protects your personal data. This privacy policy explains what data we collect, why and on what legal basis we process it, who we share it with, how long we keep it and what rights you have.

I. Data controller

MB „Mirelle Rituals“
Company code: 308093753
Address: Giedraičių g. 39-R53, LT-09302 Vilnius, Lithuania
Email: care@mirellerituals.com

II. What data we collect

When you browse our website, some information about your device and visit may be collected automatically:

• IP address;
• browser type and version;
• device information;
• time zone;
• cookie data;
• pages visited and products viewed.

When you place an order, subscribe to our newsletter, write a review or contact us, we may collect:

• your name and surname;
• email address;
• phone number;
• delivery and billing address;
• order information;
• review text and rating;
• the content of your correspondence with us.

Payments are processed by payment service providers. We do not see or store your card details.

We do not knowingly collect personal data of children under 14. Only adults can shop in our store.

III. Why we use your data and our legal basis

For each purpose we state the legal basis under Article 6 of the General Data Protection Regulation (GDPR):

• accepting, processing payment for and delivering orders: performance of a contract;
• customer service, answering enquiries, returns: performance of a contract and legitimate interest;
• accounting and taxes: legal obligation;
• website operation and security: legitimate interest;
• visitor statistics and improving the website: your consent (in the cookie banner);
• advertising on social media (Meta): your consent (in the cookie banner);
• newsletters and offers: your consent;
• asking you to review a purchase and publishing reviews: legitimate interest; we only publish reviews you have written.

The data needed to fulfil an order is required: without it we could not ship your products. We do not make automated decisions that have legal effects on you.

IV. Who we share data with

We share data only as far as needed to provide the service:

• Shopify (e-commerce platform): running the store, orders, statistics;
• payment service providers (Shopify Payments): processing payments;
• couriers Omniva, LP EXPRESS, Venipak: delivering parcels (name, address, phone, email);
• Judge.me: review requests and publishing reviews (name, email, products ordered, review);
• Seal Subscriptions: managing subscriptions, if you subscribe (name, email, address, subscription and payment information);
• Meta Platforms (Facebook, Instagram): visitor statistics and advertising, only with your consent;
• other analytics and marketing tools connected through Shopify: visitor statistics and marketing, only with your consent;
• accounting service provider: accounting;
• public authorities: only when required by law.

Shopify and Meta may also process data outside the European Economic Area. In that case the standard contractual clauses approved by the European Commission or other safeguards provided by the GDPR apply.

V. Cookies

Cookies are small files that the website stores in your browser.

• Necessary cookies keep the website working: the cart, language choice and security. They are always on.
• Statistics cookies (Shopify, Judge.me) help us understand how visitors use the website.
• Marketing cookies (Meta pixel) let us show more relevant ads on Facebook and Instagram.

Statistics and marketing cookies are only turned on when you agree in the cookie banner. You can change your choice at any time in the cookie settings at the bottom of the website or in your browser.

VI. How long we keep data

• Order and accounting documents: 10 years, as required by the Law on Accounting.
• Newsletter subscription: until you unsubscribe.
• Correspondence with us: 2 years from the last contact.
• Reviews: as long as the review is published on the website or until you ask us to delete it.
• Cookie data: according to each cookie's lifetime, no longer than 2 years.

When the period ends, we delete or anonymise the data.

VII. Your rights

Under the GDPR you have the right to:

• know what data of yours is processed and access it;
• have inaccurate data corrected;
• have your data deleted;
• restrict processing;
• object to processing based on our legitimate interest;
• transfer your data to another controller;
• withdraw your consent at any time. Withdrawing consent does not affect what was lawfully done before.

You can unsubscribe from the newsletter by clicking the link at the bottom of every email. For your other rights, write to care@mirellerituals.com. We will reply within 1 month.

If you believe your data is not processed properly, you can lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

VIII. Changes to this privacy policy

We may update this privacy policy, for example when we start using a new service. The latest version is always published on this website, with the date of the update at the top. We will let the people we are in contact with know about significant changes by email.

IX. Contact

If you have questions about this privacy policy or want to exercise your rights, write to:

MB „Mirelle Rituals“
Email: care@mirellerituals.com