Privacy policy

Last updated: April 17, 2026

The security of your personal data is a priority for us. This Privacy Policy explains how we collect, use and protect the personal data of visitors and customers of www.magiskaspastas.lt.

When processing your personal data, we comply with the requirements of the European Union General Data Protection Regulation (GDPR) and the applicable laws of the Republic of Lithuania.

1. DATA CONTROLLER

Data Controller: Magiškas Paštas
Email: labas@magiskaspastas.lt

2. WHAT DATA DO WE COLLECT?

We may collect the following personal data:

2.1. Data Collected Automatically

When you visit our website, certain technical information is collected automatically, including:

  • IP address
  • browser type and version
  • date and time of your visit
  • pages viewed

This data is used for statistical purposes, security and to ensure the proper functioning of the website.

Legal basis: Legitimate interest

2.2. Cookie Data

We use cookies to:

  • ensure the proper functioning of the website
  • analyse website traffic
  • display relevant offers

Legal basis:

  • essential cookies – legitimate interest
  • analytics and marketing cookies – your consent

2.3. Data Provided When Making a Purchase

When you make a purchase, we collect:

  • first and last name
  • email address
  • phone number
  • delivery address
  • order information
  • payment information

We may also collect additional information where relevant to your order, for example:

  • child's name and age

Legal basis: Performance of a contract

2.4. Personalised Content Data

When ordering personalised services (e.g. personalised Santa Claus videos), we may collect:

  • photographs
  • videos
  • other information provided by you

Legal basis: Performance of a contract

2.5. Direct Marketing

If you consent to receiving our newsletters, we collect:

  • email address

Legal basis: Your consent

2.6. Communication Data

When you contact us, we may collect:

  • email address
  • name
  • content of your correspondence

Legal basis: Legitimate interest

2.7. Competitions and Giveaways

When participating in promotions, competitions or giveaways, we may collect:

  • first and last name
  • contact details
  • photographs or videos

Legal basis: Consent

3. HOW DO WE USE YOUR DATA?

We use your personal data for:

  • processing and fulfilling orders
  • providing customer service
  • ensuring the proper functioning of our website
  • marketing purposes (only with your consent)
  • complying with legal obligations

4. WHO DO WE SHARE YOUR DATA WITH?

We may share your personal data with:

  • Payments in our online store are processed using the makecommerce.lt platform, operated by Maksekeskus AS (Liivalaia 45, 10145 Tallinn, Estonia, registration no. 12268475). Therefore, personal data required to process and confirm your payment will be transferred to Maksekeskus AS.
  • couriers and delivery partners
  • IT service providers

We also use the following systems and services:

  • Shopify (e-commerce platform)
  • Google Analytics (website traffic analytics)
  • Meta Pixel (advertising optimisation)

Personal data may be transferred outside the European Economic Area (EEA), but only in compliance with GDPR requirements and with appropriate safeguards in place.

5. DATA RETENTION PERIODS

  • Purchase data – 1 year (for operational purposes)
  • Invoices – 10 years (as required by law)
  • Marketing data – until consent is withdrawn
  • Customer communications – 1 year
  • Competition and giveaway data – up to 10 days after the end of the competition or giveaway

After the applicable retention period expires, personal data is deleted or anonymised.

6. YOUR RIGHTS

You have the right to:

  • access information about your personal data
  • correct your personal data
  • request deletion of your personal data (“right to be forgotten”)
  • restrict the processing of your personal data
  • object to the processing of your personal data
  • request data portability
  • withdraw your consent at any time

To exercise any of these rights, please contact us at: labas@magiskaspastas.lt

We will respond within 30 days.

7. COOKIES

We use the following types of cookies:

  • essential cookies
  • analytics cookies
  • marketing cookies

You can:

  • choose which cookies you accept
  • change your cookie preferences at any time
  • delete cookies through your browser settings

8. DATA RELATING TO MINORS

Persons under the age of 16 should not provide personal data without the consent of a parent or legal guardian.

Parents or legal guardians may contact us to request the removal of their child's personal data.

9. DATA SECURITY

We implement appropriate technical and organisational measures to protect personal data against:

  • loss
  • unauthorised access
  • alteration

10. COMPLAINTS

If you believe that your rights have been violated, you may contact:

11. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time. The latest version will always be available on our website.