Privacy Policy

Last updated: 15 August 2026

1. General provisions

This privacy policy explains how UAB „ALBRIKAI", operator of the website albrikai.cloudpepper.site (hereinafter – the Seller, we, or the Data Controller), collects, uses, stores and otherwise processes the data of website visitors, customers and other persons.

We respect your privacy and process personal data in accordance with:

• Regulation (EU) 2016/679 – the General Data Protection Regulation (GDPR);
• the Law on Legal Protection of Personal Data of the Republic of Lithuania;
• the Law on Electronic Communications of the Republic of Lithuania;
• other applicable data protection legislation.

By using our website, creating an account, placing an order or contacting us, you provide certain personal data. Please read this policy so you know what data we collect, why we use it and what rights you have.

2. Data controller

The controller of your personal data is:

Name: UAB „ALBRIKAI"

Legal entity code: 302595090

Registered office / business address: Beržų g. 1, Kuršėnai

Email: a.albrikas@gmail.com

Phone: +370 614 74185

Website: albrikai.cloudpepper.site

For any questions regarding this privacy policy, your personal data or the exercise of your rights, you may contact us at the email address indicated above.

3. What personal data do we collect?

Depending on how you use our website and services, we may process the following data:

3.1. Contact and identity data

• first name and surname;
• phone number;
• email address;
• delivery and billing address;
• company name, legal entity code and VAT number, if you purchase on behalf of a company.

3.2. Order data

• ordered goods or services;
• quantity and price of goods;
• order number, date and status;
• chosen delivery and payment method;
• delivery information;
• discounts granted;
• invoice and payment history;
• information on returns, exchanges, warranty service or complaints.

3.3. Payment data

We may receive information about the payment status, amount, date and payment identifier. Payment card or online banking data is normally processed by the chosen payment service provider, „Montonio Finance", UAB.

We normally do not receive or store your full payment card details or online banking login information.

3.4. Account data

If a customer account can be created on the website, we may process:

• username or email address;
• encrypted password;
• account settings;
• order history;
• saved delivery addresses;
• other information voluntarily provided in the account.

Please keep your login details safe and do not disclose them to third parties.

3.5. Communication data

When you contact us by phone, email, contact form or on social networks, we may process:

• your name;
• contact details;
• the content of your enquiry;
• correspondence history;
• information and documents you provide while the matter is being resolved.

Please do not send us excessive personal data or data unrelated to your enquiry.

3.6. Technical and website usage data

When you visit the website, the following information may be collected automatically:

• IP address;
• device and browser type;
• operating system;
• date and time of the visit;
• pages viewed;
• links clicked;
• duration of the visit;
• the website you came from;
• identifiers of cookies and similar technologies.

Some of this information is collected using cookies. More information is provided in the “Cookies” section of this policy.

4. For what purposes and on what grounds do we process data?

4.1. To accept and fulfil orders

We use your data so that we can:

• accept and confirm your order;
• prepare and hand over the goods;
• arrange delivery or collection;
• accept and administer payment;
• provide information on the progress of your order;
• issue an invoice;
• administer returns, exchanges, warranty claims or complaints.

The legal basis for this processing is the conclusion and performance of a contract with you, or steps taken at your request before entering into a contract.

If you do not provide the data necessary for an order, we will not be able to accept or properly fulfil it.

4.2. To comply with legal and accounting obligations

We may process order, invoice, payment and other mandatory data in order to comply with accounting, tax and other obligations laid down by law.

The legal basis is compliance with a legal obligation applicable to the Data Controller.

4.3. To administer customer accounts

If you create an account, we use your data to create the account, authenticate you, provide its features and display your order history.

The legal basis is the performance of a contract or our legitimate interest in offering customers a more convenient way to shop.

4.4. To handle enquiries and complaints

We use contact and communication data to answer questions, provide advice, solve problems, handle complaints and defend our own or other persons’ legitimate interests.

The legal basis depends on the nature of the enquiry and may be:

• performance of a contract;
• compliance with a legal obligation;
• our legitimate interest in serving customers properly and resolving disputes.

4.5. Direct marketing

If we offer a newsletter subscription and you agree to receive it, we may send you:

• news;
• offers;
• information about goods, services and promotions;
• other marketing information.

The legal basis is your consent or another basis permitted by law.

You may withdraw your consent at any time:

• by clicking the unsubscribe link in the newsletter;
• by emailing us at a.albrikas@gmail.com.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

4.6. Website operation, security and improvement

We may use technical data in order to:

• ensure the proper and secure operation of the website;
• prevent fraud and unlawful activity;
• identify technical errors;
• analyse website traffic;
• improve the website content and usability.

The legal basis is our legitimate interest in ensuring the security and quality of the website. Where non-essential analytics or advertising cookies are used, data is processed only with your consent.

5. Where do we obtain your data from?

We obtain most data directly from you, when you:

• place an order;
• register on the website;
• fill in the contact form;
• contact us by phone, email or on social networks;
• subscribe to the newsletter;
• use the website and choose your cookie settings.

We may also receive certain data from payment, delivery, IT or other service providers where this is necessary to fulfil your order or provide services.

6. To whom may we disclose your data?

Your personal data may be disclosed only where this is necessary and lawful. We may disclose data to:

• payment service providers and banks;
• courier, parcel locker and other delivery companies;
• Odoo or another provider of website, e-commerce and information system services;
• website hosting, maintenance and security service providers;
• accounting and financial service providers;
• legal, audit and insurance service providers;
• marketing, newsletter or analytics service providers, if you use these services;
• state institutions, courts or law enforcement authorities, where required by law;
• other persons, where we have your consent or another lawful basis.

We disclose to service providers only as much data as is necessary to provide the specific service. Where service providers act as data processors, they must process data according to our instructions, keep it confidential and apply appropriate safeguards.

The main service providers we use:

• e-commerce platform – Odoo;
• payments – „Montonio Finance", UAB;
• delivery – Omniva, DPD, Venipak;
• analytics – we currently do not use analytics tools;
• newsletters – Odoo.

7. Data transfers outside the European Economic Area

We aim first of all to use service providers that store data in the European Union or the European Economic Area.

However, some of our service providers or their partners may operate outside the European Economic Area. In such cases, personal data is transferred only in compliance with GDPR requirements and with appropriate safeguards, such as:

• a European Commission adequacy decision;
• standard contractual clauses approved by the European Commission;
• other safeguards provided for by law.

For more information about the safeguards applied to a specific data transfer, you may contact us at the email address indicated in this policy.

8. How long do we keep your data?

We keep personal data no longer than necessary for the purposes for which it was collected, or for as long as its retention is required by law.

The applicable retention periods depend on the nature of the data:

• order, invoice and accounting data is kept for the period laid down by law;
• account data is kept while the account is active and for a reasonable period after its deletion, if the data is needed to comply with legal obligations or claims;
• correspondence and enquiries are kept for as long as necessary to resolve the matter and defend legitimate interests;
• complaint, warranty service and return data is kept during their handling and for the applicable limitation period;
• direct marketing data is kept until consent is withdrawn or for a reasonable period set by us;
• cookie data is kept for the period indicated in the cookie table.

At the end of the retention period, data is deleted, destroyed or anonymised, unless the law requires it to be kept longer.

9. Cookies

Cookies are small text files stored on your device when you visit a website. They help the website function, remember your choices, analyse traffic and, where applicable, show more relevant advertising.

The website may use the following categories of cookies:

Essential cookies

These cookies are required for core website functions such as logging in, the shopping cart, placing orders, security and saving your cookie preferences.

Consent is normally not required for their use, as the website could not function properly without them.

Functional cookies

These cookies help remember your choices, such as your selected language, region or other settings.

Analytics cookies

They allow us to learn how visitors use the website, which pages they visit and what problems they encounter. This information helps improve the website.

Marketing cookies

These cookies may be used to measure advertising effectiveness and to present more relevant content or advertising.

Non-essential cookies are stored on your device only with your consent. You may change or withdraw your consent at any time using the website cookie settings.

You can also delete or block cookies in your browser settings. Disabling essential cookies may prevent parts of the website from working properly.

The main cookies used on the website:

More detailed information about the cookies used is provided in our Cookie Policy.

10. Social networks

Our website may contain links to Facebook, Instagram or other social network accounts.

When you visit our social network accounts, your data may also be processed by the operator of the relevant social network. Such processing is governed by the privacy policy of that social network.

If you contact us on a social network, we process the information you provide in order to respond to your enquiry. When posting comments or other information publicly, please do not include sensitive or unnecessary personal data.

11. Data security

We apply reasonable technical and organisational measures to protect your personal data against:

• unauthorised access;
• unlawful disclosure or use;
• alteration;
• accidental loss;
• destruction or damage.

Access to data is granted only to those persons and service providers who need it to perform their functions.

Although we take appropriate security measures, no method of transmitting or storing data online can guarantee absolute security. If you notice suspicious activity in your account, please contact us immediately.

12. Your rights

In the cases provided for by the GDPR, you have the right to:

• receive information about the processing of your data;
• access the personal data we process about you;
• request rectification of inaccurate data or completion of incomplete data;
• request erasure of data where there is a legal basis for this;
• request restriction of data processing;
• object to processing based on legitimate interest;
• receive the data you have provided in a structured, commonly used and machine-readable format and, where possible, have it transmitted to another controller;
• withdraw your consent at any time;
• lodge a complaint with a supervisory authority;
• in certain cases, request not to be subject to a decision based solely on automated processing which produces legal or similarly significant effects concerning you.

These rights are not absolute. In certain cases their exercise may be limited by law, the rights of other persons or our legal obligations.

13. How can you exercise your rights?

To exercise your rights, please submit a request by email to a.albrikas@gmail.com or in another way indicated in this policy.

In your request, please indicate:

• your first name and surname;
• the right you wish to exercise;
• information that helps us understand and fulfil your request.

To protect your data, we may ask you to provide additional information to confirm your identity. We will ask only for as much information as is necessary to verify your identity.

We will respond to your request without undue delay and no later than within one month of receiving it. Depending on the complexity and number of requests, this period may be extended by a further two months in the cases provided for by law. We will inform you of any extension and its reasons.

14. Right to lodge a complaint

If you believe that your personal data is being processed unlawfully or that your rights have been violated, we invite you to contact us first – we will do our best to resolve the matter.

You also have the right to lodge a complaint with:

The State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija)

Website: vdai.lrv.lt

The address and other relevant contact details are published on the Inspectorate’s website.

You may also contact the competent supervisory authority of the EU Member State of your habitual residence or place of work.

15. Data of minors

Our online store is not intended for minors to independently purchase goods or provide us with their data in cases where parental or guardian consent is required by law.

If we learn that a minor’s data has been collected improperly, we will take reasonable steps to delete it.

16. External links

The website may contain links to third-party websites, social networks or services. We do not control these websites and are not responsible for their privacy practices.

Before providing your data to a third party, we recommend reading its privacy policy.

17. Automated decision-making

We currently do not make decisions based solely on automated processing of personal data which would produce legal or similarly significant effects concerning you.

If we start such processing in the future, we will separately inform you of its logic, significance and possible consequences.

18. Changes to this privacy policy

We may update this privacy policy from time to time, for example when there are changes to:

• our services or website features;
• the service providers we use;
• the ways in which personal data is processed;
• legislation or supervisory authority practice.

The current version of the policy is always published on this website. The date of the last update is indicated at the beginning of the policy. If the changes are substantial, we may additionally inform you about them.