Privacy Policy

This Privacy Policy explains how ED Shop, MB, the operator of the online store Ember Spell (www.emberspell.lt) (hereinafter – “We”, “the Company”, “Data Controller”), collects, uses, stores, and otherwise processes your personal data as a website visitor or buyer, in accordance with the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legal acts.

1. Data Controller details

ED Shop, MB
Company code: 307161571
Email: info@emberspell.lt

2. Collected personal data

When you use our website or place an order, we may collect the following data:

• Name and surname

• Email address

• Phone number

• Order and delivery information

• Browsing data (IP address, browser information, cookies)

• Website behavior data (via Google Analytics, Meta Pixel)

Payment data (e.g., bank card information) are processed only by payment service providers – Paysera LT, UAB and Stripe Payments Europe Limited – and are not collected directly by the Company.

3. Purposes and legal bases for data processing

Your personal data are collected and processed only to the extent necessary and for legitimate, clearly defined purposes. Depending on the situation, your data may be processed for:

• Order processing and delivery – to conclude and perform the purchase–sale contract.

• Accounting and legal obligations – certain transaction data must be stored according to applicable laws.

• Website functionality and security – technical data (e.g., IP address) are collected to ensure website performance and protection against unauthorized access.

• Analytics and marketing – with your consent, cookies and tracking tools (e.g., Google Analytics, Meta Pixel) are used to improve the website and show relevant ads.

• Newsletter distribution – with your explicit consent, we may send updates and promotional offers.

4. Third parties and data transfers

Your data may be shared only with trusted data processors providing services on our behalf:

• Paysera LT, UAB and Stripe Payments Europe Limited – for payment processing

• Lietuvos paštas, AB – for order delivery

• Hostinger, UAB – for website hosting

• Google Ireland Limited and Meta Platforms Ireland Limited – for analytics and marketing (with consent)

We do not transfer your data outside the European Economic Area (EEA) unless necessary and only with adequate safeguards (e.g., standard contractual clauses).

5. Cookies

Our website uses cookies to ensure proper functionality, collect statistical data, and deliver personalized advertising. You can choose which types of cookies you consent to.

6. Data retention periods

Personal data are retained only as long as necessary:

• For order and accounting records – 10 years from the date of transaction

• For marketing (newsletters) – until consent is withdrawn

• For analytics (cookies) – according to cookie validity periods

7. Your rights

Under the GDPR, you have the right to:

• Receive information about how your data are processed

• Request correction or deletion of your data

• Restrict or object to data processing

• Receive your data in a structured, commonly used format

• Withdraw consent (when processing is based on consent)

8. Contact

For any questions regarding this Privacy Policy or the exercise of your rights, please contact us:
📧 info@emberspell.lt