Privacy policy

Your privacy matters to us. In this policy we explain in plain words what personal data we collect, what we use it for, to whom we pass it, how long we keep it and how you can exercise your rights. The policy applies to the online store intymipagunda.lt, regardless of the device you use.

1. Who processes your data

The data controller is the company operating the online store Intymi pagunda (intymipagunda.lt):

We process data in accordance with the General Data Protection Regulation (GDPR, Regulation (EU) 2016/679) and the laws of the Republic of Lithuania. Our store is intended for adults – we do not knowingly collect data of persons under 18.

2. What data we collect

Data you provide

• Order data: first name, surname, e-mail, phone number, delivery address or chosen parcel locker, details needed for the invoice (if you buy on behalf of a company – company name, code, VAT number).
• Account data (if you create one): e-mail, first name, surname, order history, saved addresses.
• Communication data: your enquiries by e-mail or phone, information on returns and complaints.
• Reviews of products and the information in them (name, rating, text, photos).
• Subscription data: e-mail for the newsletter, e-mail for a back-in-stock notification.
• Gift card recipient data (if you send a gift card as a present): recipient's name, e-mail and your message.

Data collected automatically

• IP address, browser and device information, time of visit, pages and products viewed, cart contents;
• wishlist contents;
• loyalty programme “Seduction Points” information: points collected and used, level, use of the referral link.

Payment data

We do not see or store payment card or online banking login details – they are processed directly by payment service providers (see section 4). We only receive information on whether the payment was made, the payment method and the amount.

3. What we use data for and how long we keep it

For each purpose we state the legal basis under Article 6 GDPR and the retention period. After the period ends, the data is deleted or anonymised.

Order fulfilment

Restricting payment on delivery

Account

Loyalty programme “Seduction Points”

Customer service

Product reviews

Newsletters, product notifications and offers

Website operation, security and statistics

Compliance with legal obligations

We also process data where required by law (e.g. accounting, tax, consumer protection) and where needed to defend our legitimate interests in a dispute.

4. Who we share data with

We do not sell your data. We share it only with partners without whom we could not fulfil the order or provide our services, and only to the extent necessary:

• E-commerce platform: Shopify – hosting of the website, order and customer data, card, Apple Pay and Google Pay payments (Shopify Payments).
• Payment services: OPAY (online banking payments), PayPal, the instalment providers ESTO and General Financing (via OPAY) – when you choose this method.
• Delivery services: Unisend (LP Express), Omniva, DPD, Venipak, Lietuvos paštas (international shipments) – recipient's name, surname, phone number, e-mail and address or parcel locker.
• Newsletters and notifications: Omnisend, Shopify Messaging – e-mail, name, purchase information.
• Reviews: Judge.me – name, e-mail, review content.
• Loyalty programme: Essential Loyalty – account and order information for calculating points.
• Other store features: wishlist (Swish), back-in-stock notifications (Kbite), gift cards (Unlimity).
• Accounting: accounting system Finvalda – invoice data.
• Statistics and advertising: Google (Google Analytics, Google tag), Meta (Facebook and Instagram advertising pixel), GLAMI (GLAMI piXel) – only if you have consented to the relevant cookies.
• Public authorities – where required by law.

These partners process data under contracts with us or as independent controllers (e.g. payment and delivery companies) under their own privacy policies.

5. Transfers outside the EU

Some partners (e.g. Shopify, PayPal, Google, Meta) may also process data outside the European Economic Area, for example in Canada or the USA. In such cases the safeguards provided by the GDPR apply: European Commission adequacy decisions (e.g. for Canada and the EU-US Data Privacy Framework) or standard contractual clauses approved by the European Commission.

6. Newsletters and marketing

• We send newsletters only if you subscribe on the website, in your account or when placing an order.
• You can unsubscribe at any time by clicking “Unsubscribe” at the bottom of each e-mail or by writing to info@intymipagunda.lt.
• We may tailor offers to your purchases and browsing in our store (e.g. reminding you of products left in the cart). Such tailoring has no legal or similarly significant effect on you, and you can opt out of it together with the newsletter.
• Order, delivery and return notifications are not advertising – you will always receive them when you place an order.

7. Cookies

Cookies are small files saved on your device while you browse the website. We use the following types of cookies:

We use statistics and marketing cookies only with your consent, which you give in the cookie banner shown on your first visit. You can change your choice at any time in the cookie settings or delete cookies in your browser.

The website also shows third-party content (e.g. Instagram posts). Such services may use their own cookies under their own privacy policies.

8. Your rights and how to exercise them

You have the right to:

• access your data and receive a copy of it;
• rectify incorrect or complete incomplete data;
• erase data (“right to be forgotten”) when it is no longer needed or you have withdrawn consent;
• restrict the processing of data;
• data portability to another controller;
• object to processing based on our legitimate interest or for direct marketing;
• withdraw consent at any time – this does not affect processing carried out before the withdrawal.

If you believe your data is being processed improperly, please contact us first – we will try to resolve the situation quickly. You also have the right to lodge a complaint with the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija): L. Sapiegos g. 17, 10312 Vilnius, Lithuania, ada@ada.lt, vdai.lrv.lt.

9. Data security

We apply technical and organisational measures to protect your data against loss, unauthorised access or alteration: the website uses a secure HTTPS connection, payments are processed in the systems of certified payment service providers, and access to data is granted only to employees who need it for their work. You log in to your account with a one-time code sent by e-mail, so we recommend not sharing it with anyone and keeping access to your e-mail secure.

10. Changes to this policy

We update the policy when our activities, the services we use or the law change. The current version is always published on this page.

Any questions? Write to info@intymipagunda.lt or call +370 674 52797 – we will be happy to help.

Updated 2026-10-30