Privacy Policy.

Who Is Responsible for Your Data?

MB “Supk Kurk” is the data controller for personal data processed in connection with our customer service and business activities.

Legal entity

MB “Supk Kurk”

Company code

306493155

Email

supkkurk@gmail.com

Location

Vilnius, Lithuania

When you use Etsy, Etsy also processes personal data under its own privacy policy and may act as a separate data controller for its marketplace, account and payment services.

Personal Data We Collect

Depending on how you interact with us, we may collect:

• Your name and contact details, including email address and telephone number when provided
• Billing and delivery details
• Order, payment-status and delivery information
• Product preferences and customisation details you choose to provide
• Messages, enquiries, feedback and other communications with us
• Information needed to handle returns, complaints or legal claims
• Limited technical information, such as IP address, browser information and security logs, processed by our website hosting and security providers

We receive this information directly from you or, when you place an order through a marketplace, from that marketplace to the extent necessary to fulfil and support your order. We do not receive your full payment-card details from Etsy or other payment providers.

How and Why We Use Your Data

We process personal data only when we have a lawful basis. We may use it to:

• Respond to enquiries and take steps requested by you before a purchase
• Process, prepare, deliver and support an order under our contract with you
• Manage returns, refunds, complaints and customer service
• Comply with accounting, tax, consumer-protection and other legal obligations
• Prevent fraud, protect our website and defend legal claims where this is necessary for our legitimate interests
• Send marketing communications only where you have given valid consent or where otherwise permitted by law; you may opt out at any time

We do not sell or rent personal data, and we do not share it with third parties for their own marketing purposes.

Who We Share Data With

We disclose only the information reasonably necessary for the relevant service. Recipients may include:

• Etsy and other sales or payment platforms used to place and process an order
• Delivery companies and fulfilment service providers
• Website hosting, security, email and technical service providers
• Professional advisers, accountants or insurers where necessary
• Public authorities or courts where disclosure is required by law

These providers must handle personal data securely and in accordance with applicable data-protection law.

International Data Transfers

Some service providers, including online marketplaces and hosting providers, may process data outside the European Economic Area. Where required, such transfers must be protected by a lawful transfer mechanism, such as an adequacy decision or approved standard contractual clauses.

Cookies and Website Data

Supkkurk.lt does not currently use advertising cookies, marketing pixels or visitor analytics. Essential technical data may still be processed by our hosting and security providers to deliver the website, maintain security and prevent abuse. If we introduce non-essential cookies or analytics in the future, we will update this policy and request consent where required.

Links to Etsy, Facebook or other external services lead to websites with their own privacy and cookie practices. Their policies apply when you use those services.

How Long We Keep Data

We retain personal data only for as long as necessary for the purpose for which it was collected. Order and transaction records may be retained for the period required by accounting, tax and consumer-protection law. Customer-service correspondence is kept only as long as reasonably necessary to resolve the matter or establish, exercise or defend legal claims. When data is no longer required, it is deleted or anonymised.

Your Rights

Subject to the conditions set by applicable law, you may have the right to:

• Request access to your personal data
• Request correction of inaccurate or incomplete data
• Request deletion of your data
• Request restriction of processing
• Object to processing based on legitimate interests or to direct marketing
• Receive certain data in a portable format
• Withdraw consent at any time where processing is based on consent
• Lodge a complaint with a data-protection supervisory authority

To exercise your rights, email supkkurk@gmail.com. We may need to verify your identity before responding. Withdrawing consent does not affect processing carried out lawfully before withdrawal.

In Lithuania, you may also contact the State Data Protection Inspectorate at vdai.lrv.lt.

Data Security

We use reasonable organisational and technical measures to protect personal data against unauthorised access, accidental loss, alteration or disclosure. No online system is completely secure, but we limit access to personal data and use service providers appropriate to the nature of our business.

Children’s Privacy

Our website and products are not directed to children, and we do not knowingly collect personal data from children through this website.

Changes to This Policy

We may update this Privacy Policy when our services, technology or legal obligations change. The latest version will always be published on this page with its update date.

Contact Us

If you have a privacy question or wish to exercise a data-protection right, contact us at supkkurk@gmail.com.