Privacy Policy (GDPR Privacy Notice)

1. General Provisions
1.1. This Privacy Policy explains how Ecombridge UAB (“Company”, “we”, “our”) collects, uses, and protects personal data when you visit the website or place an order
1.2. The Company processes personal data in accordance with the General Data Protection Regulation (GDPR), applicable EU data protection laws, and mandatory national regulations in the customer’s country of residence.
1.3. By using the website, you confirm that you have read and understood this Privacy Policy.
2. Data Controller
2.1. Company name: Ecombridge UAB
2.2. Company registration number: 307300544
2.3. Legal address: J. Savickio g. 4-7, Vilnius, LT-01108, Lithuania
2.4. Warehouse address: Juglas Street 14C, Riga, LV-1024, Latvia
2.5. Contact e-mail for data protection and administrative matters: info@lokumdokya.eu
2.6. Customer support is provided exclusively via WhatsApp (+37120682590). Privacy-related requests may be submitted via e-mail.
3. Categories of Personal Data
3.1. Identification data (first name, last name).
3.2. Contact and delivery data (delivery and billing address, e-mail address, phone number).
3.3. Order and transaction data (products purchased, prices, discounts, delivery method, order history).
3.4. Payment data. Payments are processed by third-party payment providers. The Company does not store full payment card details.
3.5. Communication data. Messages, attachments, photos, videos, and other information provided by the customer, primarily via WhatsApp.
3.6. Technical data. IP address, device identifiers, browser type, operating system, cookie identifiers, and similar technical information.
4. Purposes of Processing
4.1. To process and fulfill customer orders and deliver goods.
4.2. To communicate with customers regarding orders, delivery, delays, compensation, and complaints.
4.3. To prevent fraud, ensure payment security, and protect legitimate business interests.
4.4. To comply with legal, accounting, and tax obligations.
4.5. To operate, maintain, and improve the website.
4.6. To send marketing communications, where permitted by law or based on consent.
5. Legal Basis for Processing
5.1. Performance of a contract (Article 6(1)(b) GDPR).
5.2. Compliance with legal obligations (Article 6(1)(c) GDPR).
5.3. Legitimate interests of the Company (Article 6(1)(f) GDPR).
5.4. Consent of the data subject, where required (Article 6(1)(a) GDPR).
6. Cookies and Similar Technologies
6.1. The website uses cookies and similar technologies.
6.2. Essential cookies are necessary for the operation of the website and do not require consent.
6.3. Non-essential cookies (including analytics and marketing cookies) are used only with explicit user consent.
6.4. Cookie preferences can be managed via the cookie banner and browser settings. Further details are provided in the Cookie Policy.
7. Data Retention
7.1. Personal data is retained only for as long as necessary for the purposes for which it was collected.
7.2. Order and transaction data is retained in accordance with applicable accounting and tax regulations.
7.3. Communication and complaint data is retained for the period necessary to resolve issues and defend legal claims.
8. Data Recipients
8.1. Personal data may be disclosed to delivery service providers, payment providers, IT service providers, and public authorities where required by law.
8.2. The Company does not sell or rent personal data to third parties.
9. International Data Transfers
9.1. If personal data is transferred outside the EU/EEA, appropriate safeguards are applied in accordance with GDPR requirements.
10. Rights of Data Subjects
10.1. The data subject has the right to access, rectify, and erase personal data.
10.2. The data subject has the right to restrict or object to processing, including direct marketing.
10.3. The data subject has the right to data portability.
10.4. The data subject has the right to withdraw consent at any time.
10.5. The data subject has the right to lodge a complaint with a supervisory authority.
11. Data Security
11.1. The Company implements appropriate technical and organizational measures to protect personal data.
12. Contact Information
12.1. Privacy-related inquiries may be submitted via e-mail: info@lokumdokya.eu

Last updated: 05.01.2026