Privacy policy

This policy explains how we process personal data when you visit yogastuff.shop, place an order, use a customer account, submit a return or withdrawal request, subscribe to news or contact us.

Data controller

Pagauk kampą, MB, company code 304398355, VAT number LT100010584919, Žalgirio g. 135, LT-08217 Vilnius, Lithuania. Email labas@aysv.lt, tel. +370 685 77722.

Personal data we process

Depending on your actions, we may process your first and last name, email address, telephone number, delivery and billing addresses, order, shipping, return and withdrawal information, payment status and transaction identifiers, customer service correspondence, account data, as well as technical data relating to website use, your device, IP address and cookie preferences.

We generally do not receive full payment card details ourselves — payments are processed by the payment service providers used during checkout under their own security and privacy rules.

Purposes and legal bases for processing

  • Performance of a contract: accepting orders, payment, delivery, customer accounts, returns, withdrawal and customer service.
  • Legal obligations: accounting, tax, consumer protection and other mandatory duties.
  • Legitimate interests: store and payment security, fraud prevention, service quality analysis and the establishment, exercise or defence of legal claims, where these interests are not overridden by your rights.
  • Consent: where required for non-essential cookies or direct marketing.

Who may receive the data

Data is shared only to the extent necessary with service providers that help us operate: Shopify and related e-commerce infrastructure providers, payment service providers, delivery and logistics partners including Omniva, and providers of accounting, IT, email, customer service, analytics and marketing services. Data may also be provided to public authorities where required by law.

Transfers outside the EEA

Where our service providers process data outside the European Economic Area, transfers are carried out using a lawful GDPR transfer mechanism and appropriate safeguards where required.

Retention periods

We retain data no longer than necessary for the purpose for which it was collected. Order and accounting documents are retained for the periods required by accounting and tax laws; customer service and dispute information for as long as needed to resolve the matter and defend legal claims; marketing data until consent is withdrawn or another lawful basis ends, subject to applicable retention requirements.

Your rights

Where provided by the GDPR, you have the right to receive information about processing, access your personal data, request its correction or erasure, restrict processing, object to certain processing, receive data in a portable format and withdraw consent. To exercise these rights, contact labas@aysv.lt. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (VDAI).

Cookies

We use necessary cookies required for the store to function, and analytics, personalisation or marketing cookies only in accordance with applicable requirements and your privacy choices. More information is available in our Cookie policy.

Changes to this policy

We may update this policy if our services, service providers or applicable laws change. The latest version is always published on this page.