Last updated: 2025.11.24

This Privacy Policy explains how MB Dramistės (“Website”, “we”, “us”, “our”) collects, uses, and discloses your personal information when you visit our website, use our services, or purchase our products (collectively – the Services).
“You” refers to any user of the Services (customer, visitor, or any other individual).

By accessing or using the Services, you confirm that you have read and understood this Policy.

1. Changes to This Policy

We may update this Policy from time to time due to operational, legal, or regulatory reasons.
We will publish the updated version on the Website, update the “Last updated” date, and, where required by law, take additional steps to notify you.

2. Information We Collect

2.1. Information You Provide Directly

• Contact details – name, surname, email address, phone number, address.

• Order information – billing/shipping address, order details, payment confirmation.

• Account details – username, encrypted password, security settings.

• Customer support messages – inquiries, emails, chat messages, feedback.

Some data is required to use certain Services (e.g., placing an order, creating an account).

2.2. Information Collected Automatically

We automatically collect certain usage data, such as:

• IP address

• Browser type

• Device type

• Session identifiers

• Referring URLs

• Page views and interactions

• Errors or performance events

We use cookies, pixels, local storage, and similar technologies.
(See our Cookie Policy for details.)

2.3. Information from Third Parties

We may receive information from:

• Payment processors (WooPayments / Stripe) – for secure payment processing.

• Shipping and e-commerce partners – to fulfill and deliver orders.

• Analytics and advertising tools – for audience measurement and (with consent) personalization.

• Platforms and plugins (e.g., WooCommerce, WordPress extensions) that support website functionality.

All third-party data is processed according to this Policy and applicable privacy rules of the providers.

3. How We Use Your Data & Legal Basis

Service delivery & contract performance – GDPR Art. 6(1)(b)

Order processing, shipping, returns, account management, order updates.

Legitimate interests – GDPR Art. 6(1)(f)

Website security, fraud prevention, service improvement, analytics, customer support.

Legal obligations – GDPR Art. 6(1)(c)

Accounting, taxation, consumer protection, regulatory requirements.

Consent – GDPR Art. 6(1)(a)

Marketing emails, personalized ads, non-essential cookies.

Vital interests – GDPR Art. 6(1)(d)

Rare situations where processing protects someone’s physical safety.

4. Cookies, Consent & Preferences

We use essential cookies and, with your consent, preference, analytics, and marketing cookies.

You can manage your cookie preferences at any time through our cookie consent banner or settings panel.

If your browser sends a GPC (Global Privacy Control) signal and it applies to your jurisdiction, we will treat it as a request to opt out of “selling” or “sharing” data for targeted advertising (where legally relevant).

Note: essential cookies are required for website functionality (e.g., cart, checkout, login).

5. Who We Share Data With

We only disclose personal information to the extent necessary:

• Service providers – hosting, IT, payment processing (WooPayments/Stripe), shipping partners, support, email services, analytics.

• Marketing/advertising partners – only with your consent to marketing cookies.

• Business affiliates – for internal administrative purposes.

• Authorities – when required by law or during legal disputes.

• Business transfers – in case of merger, acquisition, or sale of assets.

We do not sell personal data.
We do not knowingly “share” or “sell” data of minors under 16.

6. Children’s Privacy

Our Services are not intended for children.
We do not knowingly collect children’s personal data.
If you believe a child’s information was processed, contact us to request deletion.

7. Data Security & Retention

We use technical and organizational safeguards (encryption, restricted access, backups).
However, no system is 100% secure.

We retain data only as long as necessary for:

• account functionality,

• order fulfillment,

• legal obligations,

• dispute resolution.

8. International Data Transfers

Your data may be processed outside the EEA.
In such cases, we use GDPR-compliant transfer mechanisms (e.g., Standard Contractual Clauses) unless the destination country has an adequacy decision.

9. Your Rights

Depending on your location, you may have:

• Right to access your data

• Right to rectification

• Right to erasure (“right to be forgotten”)

• Right to restrict processing

• Right to data portability

• Right to object to processing based on legitimate interest

• Right to opt out of targeted advertising

• Right to withdraw consent

• Right to lodge a complaint with a supervisory authority

We may require proof of identity.
Authorized agents may act on your behalf with valid authorization.

Supervisory authority in Lithuania:
State Data Protection Inspectorate – ada.lt

10. Third-Party Links

Our Website may contain links to external sites.
We are not responsible for their content, privacy practices, or security.
Review their policies before providing any data.

11. Contact Information & Data Controller

Data Controller:
MB Dramistės
Address: Jakšto g. 9, Vilnius, Lithuania
Email: info@harmonestudio.com

If you have questions or want to exercise your rights, contact us via email.