Privacy

UAB “Rugpjūtė” (trading as Love and Confuse) is the data controller.

• Address: Balbieriškio gatvė 14, Kaunas, LT-46412, Lithuania
• Email: [email protected]

We comply with the General Data Protection Regulation (GDPR) and applicable data protection laws.

When you order, create an account, or contact us:

• Contact details: Name, email, phone number
• Shipping address: Where to send your order
• Billing address: For payment processing
• Order details: What you purchased, customizations, preferences
• Communications: Emails and messages you send us

We don’t store your full card details. Payments are processed securely by our payment providers (Stripe, PayPal).

We only keep a reference to your transaction for order management and refunds.

When you visit our website, we automatically collect:

• Device info: Browser type, operating system, screen size
• Usage data: Pages visited, time on site, clicks
• Technical data: IP address, approximate location (country/city level)

This helps us improve the website and fix problems.

We use your contact and shipping details to:

• Process and ship your order
• Send order confirmations and shipping updates
• Handle returns and refunds

Legal basis: Contract performance

We use your information to:

• Respond to your questions
• Resolve issues with orders
• Help with sizing and product questions

Legal basis: Contract performance, legitimate interest

If you opt in, we’ll send:

• New collection announcements
• Sales and promotions
• Style inspiration

You can unsubscribe anytime via the link in every email.

Legal basis: Consent

We analyze usage data to:

• Understand what products interest you
• Fix bugs and improve performance
• Make the shopping experience better

Legal basis: Legitimate interest

We keep certain records for tax, accounting, and legal requirements.

Legal basis: Legal obligation

We share only what’s necessary with:

• Payment processors: Stripe, PayPal (to process payments)
• Shipping carriers: DHL, local postal services (to deliver orders)
• Email service: To send order updates and newsletters
• Hosting provider: To run our website

All providers are required to protect your data and only use it for the specific service.

We use analytics tools to understand website usage. These may collect anonymized or pseudonymized data.

You can control this via the cookie banner when you first visit.

We may share data if required by law, court order, or to protect our legal rights.

We don’t sell, rent, or trade your personal information to third parties for marketing.

Cookies are small files stored on your device. They help the website work properly and remember your preferences.

Essential cookies: Required for the site to function (cart, checkout, login). Always active.

Analytics cookies: Help us understand how people use the site. Optional—you can decline these.

Marketing cookies: Used to show relevant ads. Optional—you can decline these.

You can manage cookie preferences:

• Via the cookie banner when you first visit
• In your browser settings

Blocking essential cookies may prevent the site from working properly.

You can request a copy of the personal data we hold about you.

If your information is wrong or incomplete, you can ask us to correct it.

You can ask us to delete your personal data. We’ll do so unless we need to keep it for legal reasons (like tax records).

You can ask us to limit how we use your data in certain situations.

You can request your data in a machine-readable format to transfer to another service.

You can object to processing based on legitimate interest, including direct marketing.

If you gave consent for something (like marketing emails), you can withdraw it anytime.

Email us at [email protected] with your request.

We’ll respond within 30 days. We may ask for verification to protect your data.

If you’re unhappy with how we handle your data, you can complain to your local data protection authority.

In Lithuania: State Data Protection Inspectorate (vdai.lrv.lt)

We use industry-standard security measures:

• HTTPS encryption on all pages
• Secure payment processing (PCI compliant)
• Access controls and monitoring
• Regular security updates

• Order records: 7 years (tax and legal requirements)
• Account data: Until you delete your account
• Marketing consent: Until you unsubscribe
• Analytics data: 26 months (anonymized)

Your data is primarily stored in the EU. Some service providers may process data outside the EU.

When this happens, we ensure appropriate safeguards (like Standard Contractual Clauses) are in place.

For privacy questions or to exercise your rights:

Email: [email protected]

Address: UAB “Rugpjūtė”, Balbieriškio gatvė 14, Kaunas, LT-46412, Lithuania

We may update this policy. Significant changes will be communicated via email or website notice.

The current version is always available on this page.