Last updated: [11/13/2026]
1. Who processes your data
Data controller: Flufki, MB, code 308146266, address Ateities pl. 34C, LT-52165 Kaunas. Email: info@flufki.com. Phone: +370 686 95123.
2. What data we collect
- Order data: name, delivery and billing address, email, phone number, items ordered, any comment you leave for our team.
- Account data, if you create an account.
- Payment data: payments are handled by our payment partner. We do not receive or store full card details.
- Correspondence with us by email, phone or through the website.
- Technical data: IP address, browser and device information, cookies.
- Newsletter data: your email and the date of consent, if you agree to receive messages.
3. What we use it for and on what basis
- Processing and delivering orders, returns (performance of a contract, GDPR Art. 6(1)(b)).
- Accounting and legal obligations (legal obligation, (c)).
- Answering your questions and complaints (contract or legitimate interest, (b) / (f)).
- Website security, fraud prevention and improving the site (legitimate interest, (f)).
- Emails about discounts, news and offers (only with your separate consent, (a)). You can withdraw consent at any time with the “Unsubscribe” link in every email. This does not affect earlier processing.
- Non-essential cookies (analytics, marketing) only with your consent.
4. Who we share data with
Only those who need it, and only for our purposes:
- website hosting provider (Hostinger) and website platform (WordPress, WooCommerce);
- payment partner (WooPayments);
- couriers and delivery providers (to deliver your parcel);
- email and newsletter provider (Brevo);
- accountants and accounting service providers.
If data is transferred outside the European Economic Area, we use the safeguards required by the GDPR (such as the European Commission’s standard contractual clauses). We do not sell your data.
5. How long we keep it
- Order and accounting documents: 10 years (under Lithuanian accounting rules).
- Account data: while the account exists, or until you ask us to delete it.
- Newsletter data: until you withdraw consent.
- Correspondence about questions and complaints: [12 months] after resolution, or longer if needed for legal reasons.
6. Cookies
The website uses necessary cookies (cart, checkout, security). We use analytics and marketing cookies only with your consent. You can delete or block cookies in your browser settings; some site features may then stop working.
7. Your rights
You have the right to access your data, correct it, delete it, restrict processing, receive a copy in a portable format, object to processing based on legitimate interest, and withdraw consent at any time. Write to info@flufki.com. We will reply within 1 month at the latest.
If you think your data is being handled improperly, you can complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).
8. Security
We use reasonable technical and organisational measures: encrypted connection (HTTPS), restricted access to data and trusted service providers.
9. Children
The website is intended for adults. We do not knowingly collect data from people under 14.
10. Changes
We may update this policy. The latest version is always published on this page with its update date.
