Privacy Policy

Last updated: 2026-09-13

1. General Provisions

1.1. This Privacy Policy (hereinafter – the Policy) governs the processing and storage of personal data carried out through the website www.fjordsales.lt (hereinafter – the Website), operated by UAB “Fjord Sales”, legal entity code 300043773, registered address: Žvelsos g. 2-1, LT-93235 Klaipėda, Lithuania (hereinafter – the Company).

1.2. This Policy provides information about what personal data we collect, how we process it, what rights data subjects have, and how those rights may be exercised.

1.3. The Company ensures that personal data is processed in accordance with Regulation (EU) 2016/679, the General Data Protection Regulation (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legislation.

2. Purposes of Personal Data Processing

2.1. Personal data is collected and processed on the Website for the following purposes:

• 2.1.1. Processing and fulfilling orders, arranging delivery, issuing invoices and performing related actions, such as sending informational emails regarding order status;
• 2.1.2. Administration of customer accounts;
• 2.1.3. Customer service, complaints and enquiry management;
• 2.1.4. Direct marketing, only where the user has provided consent;
• 2.1.5. Website traffic analysis and user behaviour analysis using cookies and analytical tools;
• 2.1.6. Compliance with legal obligations, including tax accounting, consumer protection and other applicable requirements.

3. Personal Data We Process

3.1. Depending on the user's actions on the Website, the following personal data may be processed:

• 3.1.1. First name and surname;
• 3.1.2. Email address;
• 3.1.3. Telephone number;
• 3.1.4. Delivery address;
• 3.1.5. Payment-related data, such as payment method and banking information, which is not processed directly by the Company;
• 3.1.6. IP address, browser information, device type, date and time of visit, collected through cookies and analytical tools;
• 3.1.7. Information relating to orders, returns, enquiries and correspondence with customer service;
• 3.1.8. Information relating to consent for marketing communications and the use of cookies.

4. Legal Bases for Personal Data Processing

4.1. UAB “Fjord Sales” processes personal data in accordance with the General Data Protection Regulation (GDPR), the laws of the Republic of Lithuania and other applicable legislation.

4.2. Personal data processing is based on the following legal grounds:

• 4.2.1. Performance of a contract – where the data is necessary for the performance of a contract for the sale of goods, for example order processing, delivery, payment administration and returns;
• 4.2.2. Compliance with a legal obligation – where processing is necessary to comply with obligations imposed by law, for example accounting requirements under Lithuanian legislation;
• 4.2.3. Consent – where the data subject has clearly consented to the processing of personal data for a specific purpose, for example receiving marketing communications or the use of non-essential cookies;
• 4.2.4. Legitimate interests – where processing is necessary for the legitimate interests of the Company, such as ensuring Website functionality, data analysis, fraud prevention, dispute resolution or service improvement, except where such interests are overridden by the rights and freedoms of the data subject.

4.3. Where personal data is processed on the basis of consent, the data subject has the right to withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the consent was withdrawn.

5. Cookies and Tracking Technologies

5.1. What are cookies?

5.1.1. Cookies are small text files that are stored on a user's device when visiting the Website. Cookies allow the Website to remember user actions and preferences, such as language, shopping cart contents and login information, for a certain period of time.

5.2. What types of cookies are used?

5.2.1. The Website uses the following types of cookies:

• Essential cookies – necessary for the proper operation of the Website. Without them, certain functions would not operate correctly, for example the shopping cart and login functions;
• Analytics cookies – collect information about how users interact with the Website, for example through Google Analytics, in order to improve services and user experience;
• Advertising cookies – used to analyse user behaviour and provide personalised advertising, for example through Meta Pixel, TikTok Pixel and Google Ads;
• Functional cookies – allow the Website to remember user preferences, such as language and region, in order to provide a more personalised experience.

5.3. Third-Party Cookies and Tracking Tools

5.3.1. The Website uses the following third-party tools, which may also use cookies:

• Google Analytics – Website traffic analysis;
• Meta (Facebook) Pixel – conversion tracking and remarketing;
• Google Ads remarketing – personalised advertising through the Google network;
• TikTok Pixel – user behaviour analysis and advertising through the TikTok platform;
• Klaviyo – email analytics and personalisation;
• Judge.me – collection of customer reviews.

5.3.2. Where personal data is transferred outside the European Economic Area (EEA), an appropriate data transfer mechanism is applied in accordance with Chapter V of the GDPR, including, where applicable, an adequacy decision adopted by the European Commission, Standard Contractual Clauses (SCCs), or other safeguards permitted under the GDPR.

5.4. Cookie Management and Consent

5.4.1. Where consent is required under applicable law, the user's consent is requested for the use of cookies other than strictly necessary cookies. Consent is managed through the Consentmo GDPR cookie management tool, which allows users to choose which categories of cookies they agree to.

5.4.2. The user may withdraw or change their consent at any time by clicking the “Cookie Settings” button located at the bottom of the Website.

5.4.3. Users may also delete cookies through their browser settings or block their use in the future.

6. Automated Decision-Making and Profiling

6.1. UAB “Fjord Sales” may use automated data analysis and profiling in order to provide customers with more relevant information, advertising and offers.

6.2. Profiling means automated processing of personal data used to evaluate certain personal aspects, such as user behaviour, browsing history or purchasing habits.

6.3. The Website may use the following automated profiling tools:

• 6.3.1. Meta (Facebook) Pixel – tracks user activity on the Website, such as products viewed and purchases, and allows personalised advertising to be displayed on Facebook and Instagram;
• 6.3.2. Google Ads (Remarketing) – allows personalised advertisements to be displayed on the Google network based on users' visits to the Website;
• 6.3.3. TikTok Pixel – analyses user behaviour and helps provide relevant advertising on the TikTok platform;
• 6.3.4. Klaviyo – may send personalised emails based on user activity, such as abandoned carts or product views.

6.4. This profiling is not used to make decisions that produce legal effects concerning the user or similarly significantly affect the user. It is used for marketing, analytics and communication purposes.

6.5. The user has the right to:

• 6.5.1. Object to the use of their personal data for direct marketing or profiling related to such marketing;
• 6.5.2. Manage consent through the cookie management tool (Consentmo) or through email communications, for example by using the unsubscribe link;
• 6.5.3. Contact us regarding profiling or the processing of personal data by email at: labas@fjord.lt.

7. Data Recipients and Disclosure to Third Parties

7.1. UAB “Fjord Sales” ensures that personal data is not disclosed to third parties without a lawful basis and that such disclosure is limited to what is necessary for the provision of services, fulfilment of orders or compliance with legal obligations.

7.2. Payment Service Providers

7.2.1. Personal data, such as name, surname, email address, IP address and other information required for a payment transaction, may be provided to the following payment service providers:

• Paysera LT, UAB;
• OPAY Solutions, UAB;
• PayPal (Europe) S.à r.l. et Cie;
• Shopify Payments and payment processing partners used by Shopify Payments.

7.2.2. Personal data is disclosed only to the extent necessary to initiate, process, authenticate and confirm the payment transaction.

7.2.3. Where the Customer chooses Shop Pay, certain contact, delivery and payment information may be stored and processed within the Shopify / Shop Pay system in accordance with Shopify's applicable terms and privacy notices. UAB “Fjord Sales” does not have access to the Customer's full payment card details.

7.3. Logistics and Courier Service Providers

7.3.1. For the purpose of delivering goods, personal data such as name, surname, address, telephone number and shipment information may be provided to the following logistics partners:

• LP Express (Lietuvos paštas);
• Omniva LT;
• Venipak Lietuva;
• Hegelmann Logistics;
• NNL LT, UAB.

7.4. IT and Marketing Service Providers

7.4.1. Personal data may be processed using the following platforms and service providers where an appropriate legal basis exists:

• Meta (Facebook, Instagram);
• Google (Google Analytics, Google Ads);
• TikTok;
• Klaviyo (email marketing and automation);
• Judge.me (customer review system).

7.5. Website Hosting and Maintenance

7.5.1. The Website operates on the Shopify platform. Personal data may be stored and processed within Shopify's infrastructure in accordance with the security and privacy requirements applicable to Shopify.

7.6. Disclosure Required by Law

7.6.1. Personal data may also be disclosed to public authorities, law enforcement authorities, supervisory authorities or other entities where such disclosure is required under applicable law.

7.7. Transfers Outside the European Economic Area

7.7.1. Some service providers used by the Company, or their infrastructure, may be located outside the European Economic Area. In such cases, personal data is transferred in accordance with Chapter V of the GDPR using an appropriate lawful transfer mechanism, such as an adequacy decision adopted by the European Commission, Standard Contractual Clauses (SCCs), or other safeguards permitted under the GDPR.

8. Company Details

8.1. This Privacy Policy applies when using the Website www.fjordsales.lt, which is owned and administered by:

• Company name: UAB “Fjord Sales”;
• Legal entity code: 300043773;
• Registered address: Žvelsos g. 2-1, LT-93235 Klaipėda, Lithuania;
• Email address: labas@fjord.lt;
• Telephone number: +370 646 03273.

9. Card Payments and Chargebacks

9.1. Customers may use the following payment methods on www.fjordsales.lt:

• 9.1.1. Payment cards, including Visa, Mastercard and other supported cards;
• 9.1.2. Paysera payment services;
• 9.1.3. OPAY payment services;
• 9.1.4. PayPal account or card payments;
• 9.1.5. Shopify Payments and, where available, Shop Pay.

9.2. Card payments are processed by third-party payment service providers that apply appropriate security measures. Where applicable, 3D Secure or another form of additional customer authentication may be used for the payment transaction.

9.3. Once the Customer has successfully completed the payment, the selected payment system sends information regarding the transaction status to our Website. The order status is determined based on the payment confirmation received and the Company's applicable order fulfilment procedures.

9.4. If the payment is not confirmed or is interrupted, the order may be regarded as unpaid and may not be processed until payment has been successfully confirmed.

9.5. UAB “Fjord Sales” does not store and does not have access to the full payment card number, CVV/CVC code or other authentication data.

9.6. Chargebacks

9.6.1. If the Customer disputes a payment, they may contact their bank or payment service provider regarding a chargeback. In such cases:

• 9.6.1.1. UAB “Fjord Sales” may provide the bank and payment platform with information and evidence relating to the order, payment, delivery or other actions connected with the disputed transaction;
• 9.6.1.2. The duration of the chargeback procedure depends on the rules applied by the bank, card network and payment service provider;
• 9.6.1.3. Payment service providers may charge the Company administrative fees for handling chargebacks in accordance with their applicable terms.

9.7. If the Customer wishes to initiate a product return or refund, or has any questions regarding a payment, we recommend first contacting UAB “Fjord Sales” by email at: labas@fjord.lt.

10. Availability and Application of the Privacy Policy

10.1. This Privacy Policy is made available to Website users so that they can understand how UAB “Fjord Sales” processes personal data, including the purposes of processing, legal bases, data recipients and the rights available to data subjects.

10.2. Use of the Website itself does not constitute general consent to the processing of personal data. Personal data is processed only on the basis of an appropriate legal basis specified in Section 4 of this Policy.

10.3. Separate user consent is requested only where specific personal data processing is based on consent, for example for direct marketing or the use of non-essential cookies.

10.4. Before placing an order, the Customer has the opportunity to review the current Privacy Policy. During the purchasing process, the Customer may be required to confirm acceptance of the Website's Terms and Conditions. Such confirmation does not constitute general consent to the processing of personal data.

10.5. The Customer has the right at any time to:

• 10.5.1. Review the current version of the Privacy Policy;
• 10.5.2. Submit questions or enquiries regarding the Privacy Policy by email to labas@fjord.lt;
• 10.5.3. Withdraw their consent where personal data processing is based on consent, for example in relation to newsletters or non-essential cookies.

11. Data Retention Periods

11.1. UAB “Fjord Sales” retains personal data only for as long as necessary to achieve the relevant processing purpose or for the period required by applicable law. Applicable retention periods may include the following:

• 11.1.1. Accounting documents and related order data – data that the Company is required to retain for accounting, taxation or other legal obligations is retained for the period prescribed by applicable law, which in certain cases may be up to 10 years;
• 11.1.2. Electronic correspondence – generally retained for up to 1 year unless the correspondence is required for complaints, disputes, contractual obligations or the protection of other legal interests. In such cases, it may be retained for longer where reasonably necessary;
• 11.1.3. Contact details collected for marketing purposes – email address, telephone number and consent information are retained for as long as the user's consent remains valid or until it is withdrawn, unless applicable law permits or requires certain information to be retained for longer;
• 11.1.4. Cookie data – retained in accordance with the expiry period applicable to the specific cookie. Users may delete cookies through their browser or change their preferences through the cookie management tool at any time;
• 11.1.5. Account data – where a user has a registered account, account information is retained for as long as the account remains active or for as long as retention is required for the provision of services, compliance with legal obligations or protection of the Company's legitimate interests.

11.2. Once the applicable retention period has expired, personal data is deleted or anonymised unless further retention is necessary or permitted under applicable law.

12. Rights of Data Subjects

12.1. Every person whose personal data is processed by UAB “Fjord Sales” has the following rights under the General Data Protection Regulation (GDPR), where the applicable conditions are met:

• 12.1.1. Right of access – you have the right to obtain information about what personal data we process, for what purposes and for how long;
• 12.1.2. Right to rectification – you may request the correction of inaccurate or incomplete personal data;
• 12.1.3. Right to erasure (“right to be forgotten”) – in certain circumstances provided by law, you may request the deletion of your personal data, except where the Company is required or permitted to retain it;
• 12.1.4. Right to restriction of processing – in certain circumstances, you may request that the processing of your personal data be restricted;
• 12.1.5. Right to object – you have the right to object to processing based on legitimate interests and, in the case of direct marketing, to object at any time to such processing, including profiling related to direct marketing;
• 12.1.6. Right to data portability – where the conditions established by law are met, you may receive the personal data you have provided in a structured, commonly used and machine-readable format and transmit it to another data controller;
• 12.1.7. Right to withdraw consent – where processing is based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out before its withdrawal;
• 12.1.8. Right to lodge a complaint with a supervisory authority – if you believe that your personal data is being processed in violation of applicable law, you may contact the Lithuanian State Data Protection Inspectorate.

12.2. Requests relating to your rights may be submitted by email to: labas@fjord.lt. We respond to such requests within the time limits established by the GDPR and other applicable legislation.

13. Amendments and Validity of the Policy

13.1. UAB “Fjord Sales” may update or amend this Privacy Policy where necessary due to changes in legislation, the Company's activities, services, technologies used or personal data processing practices.

13.2. An updated version of the Privacy Policy becomes effective from the date it is published on the Website, unless a different effective date is expressly stated.

13.3. If the Privacy Policy is materially changed and applicable law requires additional notification to users, the Company will take appropriate measures to inform them.

13.4. We recommend reviewing this Privacy Policy periodically in order to remain informed of any changes.

13.5. This version of the Privacy Policy was last updated on 13 September 2026.