Privacy Policy

This Privacy Policy explains how we collect, use, and protect your personal data when you use our services, purchase our products, or visit our website and social media channels.

By using our website, continuing to browse, or purchasing products, you confirm that you have read, understood, and agree to this Privacy Policy.

1. Data Controller

The data controller is:

“ŠALNASA” MB
Company code: 305221500
Email: info@poppingboba.eu
(hereinafter – the “Company”, “we”, “us”)

2. Legal Basis for Data Processing

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and applicable Lithuanian and EU laws.

Personal data is processed only when at least one of the following legal bases applies:

  • performance of a contract (order processing, delivery, invoicing);

  • your consent;

  • compliance with legal obligations;

  • legitimate interests of the Company (service improvement, fraud prevention, customer communication).

3. Sources of Personal Data

We process personal data that:

  • you provide directly when placing orders, registering an account, or contacting us;

  • is generated automatically when you browse our website (cookies, analytics);

  • is provided via communication channels (email, phone, social media).

Providing personal data is voluntary; however, failure to provide required information may prevent us from fulfilling orders or providing certain services.

4. Categories and Purposes of Data Processing

We process personal data for the following purposes:

a) Website analytics and service improvement

Processed data (anonymised or aggregated):

  • IP address

  • device and browser information

  • visit date, duration, pages viewed

  • approximate location

  • language preferences and usage patterns

b) User account registration

  • name

  • email address

  • login credentials (encrypted)

c) Direct marketing (only with consent)

  • name

  • email address

  • phone number

d) Accounting and invoicing

  • name and surname

  • billing address

  • email address

  • order and payment details
    (Personal identification numbers are processed only where required by law.)

e) Customer inquiries and feedback

  • name

  • city

  • phone number

  • email address

f) Recruitment

  • name and surname

  • contact details

  • CV and related information

5. Data Retention Period

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected, but no longer than 5 years, unless longer retention is required by law.

Data processed for direct marketing purposes is stored for up to 5 years or until consent is withdrawn.

6. Data Sharing and Transfers

We do not disclose personal data to third parties without your consent, except when required by law or for legitimate business purposes.

Personal data may be shared with:

  • payment service providers;

  • logistics and courier companies;

  • IT, hosting, and data storage providers;

  • marketing and customer communication platforms.

All data processors act on our behalf and are bound by confidentiality and data protection obligations.

Some data processors may be located outside the European Union. In such cases, appropriate safeguards are applied in accordance with GDPR.

7. Data Security

We implement appropriate technical and organisational measures to protect personal data against:

  • unauthorised access

  • loss or destruction

  • alteration or disclosure

8. Cookies

We use cookies to improve website functionality, user experience, and analytics.

Cookies help us:

  • ensure proper website operation;

  • analyse traffic and user behaviour;

  • improve content and services.

You can manage or disable cookies via your browser settings. Please note that disabling cookies may affect website functionality.

More information:

9. Website Analytics and Third Parties

We may receive anonymised statistical data from third-party services such as Google or Meta (Facebook, Instagram) to analyse website and social media performance.

10. Links to Third-Party Websites

Our website may contain links to external websites. We are not responsible for the privacy practices or content of third-party websites. We recommend reviewing their privacy policies separately.

11. Your Rights as a Data Subject

You have the right to:

  • be informed about the processing of your personal data;

  • access your personal data;

  • request correction or deletion of your data;

  • restrict or object to data processing;

  • withdraw consent at any time;

  • request data portability (where applicable);

  • lodge a complaint with the State Data Protection Inspectorate.

12. Exercising Your Rights

To exercise your rights, please submit a written request by email or other communication means that allow us to verify your identity.

We will respond within 20 calendar days from receipt of your request.

13. Contact Information

For privacy-related inquiries, please contact us:

📧 info@poppingboba.eu