Privacy policy

Who controls your data

UAB Prekursorius, Kelmijos Sodų 13-oji g. 4, LT-02214 Vilnius, Lithuania, company code 301501864, is the data controller. Contact: info@igloocandy.com

What we collect and why

• Name, email, delivery address and phone — to fulfil and deliver your order. Legal basis: performance of a contract. Kept for [7] years for accounting.
• Order history — customer service, returns and accounting. Legal basis: contract and legal obligation. Kept for [7] years.
• Your email address if you abandon a basket — to send you one reminder. Legal basis: legitimate interest. Kept for 30 days.
• Your email address if you subscribe — newsletter. Legal basis: consent. Kept until you unsubscribe.
• A gift message, if you add one — to write your card. Legal basis: performance of a contract. Kept until dispatch.

We do not see or store your card details. Payment data goes directly to Stripe.

Who we share it with

• Stripe — payment processing
• ACS Courier — delivery; they receive your name, address and phone
• Resend — transactional email
• Vercel — website hosting

Each acts as a processor under contract with us. We do not sell your data or share it for advertising.

Your rights

You may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interest. Email info@igloocandy.com and we will respond within one month.

You may complain to the Lithuanian State Data Protection Inspectorate at vdai.lrv.lt, or to the supervisory authority in your own country.

Cookies

We use only cookies that are necessary for the site to work — your basket, your language, and your session. We do not use advertising or tracking cookies.