Privacy Policy

Introduction

DÉVOILÉ ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you visit our website or make a purchase, in accordance with the EU General Data Protection Regulation (GDPR) and Lithuanian data protection laws.

Data Controller

Personal Data We Collect

We may collect the following categories of personal data:

• Identity data: name, surname
• Contact data: email address, phone number, delivery address
• Transaction data: payment details, order history, purchase amounts
• Technical data: IP address, browser type, device information, cookies
• Communication data: your correspondence with us, preferences

How We Use Your Data

We use your personal data for the following purposes:

• To process and fulfill your orders, including delivery and payment
• To communicate with you about your orders and respond to inquiries
• To send marketing communications (with your consent)
• To improve our website, products, and services
• To comply with legal obligations and protect our rights

Legal Basis for Processing

We process your personal data based on the following legal grounds under GDPR Article 6:

• Contract performance: Processing necessary to fulfill our contract with you (e.g., processing orders)
• Consent: Where you have given consent for specific purposes (e.g., marketing emails)
• Legitimate interests: For our legitimate business interests (e.g., fraud prevention, improving services)
• Legal obligation: Where we must comply with legal requirements (e.g., tax records)

Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements. Order data is retained for 10 years as required by Lithuanian tax law. Marketing consent records are kept until you withdraw consent.

Your Rights Under GDPR

Under GDPR and Lithuanian law, you have the following rights:

• Right of access: Request a copy of your personal data
• Right to rectification: Request correction of inaccurate data
• Right to erasure: Request deletion of your data ("right to be forgotten")
• Right to restriction: Request limitation of processing
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interests or for marketing
• Right to withdraw consent: Withdraw consent at any time where processing is based on consent

You have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) at ada.lt.

Cookies

We use cookies to enhance your experience. Types of cookies we use:

• Essential cookies: Required for website functionality (shopping cart, login)
• Analytics cookies: Help us understand how visitors use our site
• Marketing cookies: Used to deliver relevant advertisements (with consent)

Data Sharing

We may share your data with trusted third parties:

• Payment processors to securely process transactions
• Delivery partners to ship your orders (LP EXPRESS, Omniva, DPD)
• Service providers who assist with our operations (hosting, analytics)

Data Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. This includes SSL encryption, secure payment processing, and access controls.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated date.