Last updated: 2026
This Privacy Policy explains how Cozy Cuts collects, uses, stores, and protects your personal data when you visit or make a purchase from www.gifts.cozycuts.lt.
We are committed to protecting your privacy and processing your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
1. Data Controller
If you have any questions regarding this Privacy Policy or the processing of your personal data, please contact us using the email address above.
2. Personal Data We Collect
Depending on how you use our Website, we may collect the following categories of personal data:
Information You Provide to Us
When you place an order, create an account, contact us, subscribe to marketing communications, or otherwise interact with our Website, we may collect:
- Full name;
- Billing address;
- Shipping address;
- Email address;
- Telephone number;
- Order and purchase information;
- Account information, if customer accounts are available;
- Information contained in messages or enquiries sent to us;
- Other information you voluntarily provide.
Payment Information
Payments may be processed by third-party payment service providers. Depending on the payment method selected, the payment provider may collect and process payment details such as card information or bank account information.
We generally do not directly store complete payment card details.
Information Collected Automatically
When you visit our Website, certain technical information may be collected automatically, including:
- IP address;
- Browser type and version;
- Device type;
- Operating system;
- Website usage information;
- Pages visited;
- Date and time of visits;
- Referring website or source;
- Cookie identifiers and similar technologies.
For further information about cookies, please see Section 10 of this Privacy Policy and, where applicable, our separate Cookie Policy.
3. How We Use Your Personal Data
We may process your personal data for the following purposes:
- To process, confirm, fulfil, and deliver your orders;
- To process payments and refunds;
- To communicate with you regarding your orders;
- To provide customer support;
- To manage returns, complaints, warranties, or other customer requests;
- To create and manage customer accounts;
- To prevent fraud, misuse, and security incidents;
- To maintain and improve our Website and services;
- To comply with accounting, tax, consumer protection, and other legal obligations;
- To establish, exercise, or defend legal claims;
- To send marketing communications where permitted by law and, where required, with your consent;
- To analyse Website performance and customer interactions where permitted by applicable law.
4. Legal Bases for Processing
Under the GDPR, we process personal data only where we have an appropriate legal basis.
Depending on the circumstances, we may rely on:
Performance of a contract – where processing is necessary to process and fulfil your order, provide requested services, manage returns, or otherwise perform our contractual obligations.
Legal obligation – where we are required to process or retain information to comply with applicable laws, including tax, accounting, and regulatory requirements.
Legitimate interests – where processing is necessary for our legitimate business interests, provided that those interests do not override your rights and freedoms. This may include protecting our Website, preventing fraud, improving our services, and establishing or defending legal claims.
Consent – where you have given us permission to process your data for a particular purpose, such as certain marketing communications or non-essential cookies. Where processing is based on consent, you may withdraw your consent at any time.
5. Order Processing and Delivery
When you place an order, we process the personal information necessary to complete the transaction and deliver your purchase.
We may share relevant information with service providers involved in fulfilling your order, including:
- Payment service providers;
- Banks and financial institutions;
- Delivery and courier companies;
- Warehousing and fulfilment providers;
- E-commerce and website hosting providers;
- Customer support providers;
- Accounting and professional service providers.
These parties receive personal data only where necessary for the relevant service or where otherwise permitted or required by law.
6. Sharing Your Personal Data
We do not sell your personal data.
We may disclose personal data to trusted third parties where necessary to operate our business, fulfil orders, provide services, comply with legal obligations, or protect our legitimate interests.
Third parties may include:
- Website and hosting providers;
- E-commerce platform providers;
- Payment processors;
- Shipping and logistics providers;
- Email and communication providers;
- Analytics providers;
- Advertising and marketing providers, where permitted;
- IT and cybersecurity providers;
- Accountants, lawyers, auditors, and other professional advisers;
- Government authorities, regulators, courts, or law enforcement agencies where disclosure is legally required.
Where third parties process personal data on our behalf, we take appropriate steps to ensure that such processing is subject to suitable data protection obligations.
7. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, we take appropriate safeguards as required by applicable data protection law.
Such safeguards may include the European Commission’s Standard Contractual Clauses or another legally recognised transfer mechanism.
8. Data Retention
We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal, accounting, tax, contractual, and regulatory requirements.
The applicable retention period may depend on:
- The type of personal data;
- The purpose for which it was collected;
- Legal retention requirements;
- The need to resolve disputes;
- The need to establish, exercise, or defend legal claims.
Once personal data is no longer required, we will delete or anonymise it where appropriate.
9. Marketing Communications
Where permitted by applicable law, we may send you information about our products, promotions, offers, or other commercial communications.
Where your consent is required, we will send such communications only after receiving your consent.
You can unsubscribe from marketing emails at any time by using the unsubscribe link included in the email or by contacting us at [Contact Email].
Withdrawing consent to marketing does not affect the processing of personal data necessary to fulfil your orders or comply with our legal obligations.
10. Cookies and Similar Technologies
Our Website may use cookies and similar technologies to operate the Website, remember preferences, understand how visitors use the Website, and, where applicable, provide personalised advertising.
Cookies may include:
- Strictly necessary cookies – required for the Website and shopping functionality to operate;
- Preference cookies – used to remember choices and settings;
- Analytics cookies – used to understand Website usage and performance;
- Marketing cookies – used for advertising, measurement, and personalisation.
Where required by applicable law, non-essential cookies will only be used after you have provided consent.
You can manage or withdraw your cookie consent through the cookie settings available on our Website.
More detailed information about the cookies and technologies we use should be provided in our Cookie Policy or cookie consent management tool.
11. Your Rights Under the GDPR
Subject to the conditions and limitations provided by applicable law, you may have the right to:
- Request access to your personal data;
- Request correction of inaccurate or incomplete personal data;
- Request deletion of your personal data;
- Request restriction of processing;
- Object to certain processing of your personal data;
- Request data portability;
- Withdraw your consent at any time where processing is based on consent;
- Lodge a complaint with the competent data protection supervisory authority.
Where processing is based on legitimate interests, you may have the right to object to that processing based on your particular situation.
Where personal data is processed for direct marketing purposes, you have the right to object to such processing at any time.
To exercise your rights, please contact us at info@cozycuts.lt
We may need to verify your identity before fulfilling certain requests.
12. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access, or other unlawful processing.
However, no method of electronic transmission or storage can be guaranteed to be completely secure.
13. Children’s Privacy
Our Website and products are not intended for children under the age at which they may independently consent to the processing of their personal data under applicable law.
We do not knowingly collect personal data from children in circumstances where parental or guardian consent is legally required.
If you believe that a child has provided personal data to us unlawfully, please contact us so that we can take appropriate action.
14. Third-Party Websites
Our Website may contain links to third-party websites or services.
We are not responsible for the privacy practices, content, or security of third-party websites. We encourage you to review the privacy policies of third-party services before providing them with personal information.
15. Automated Decision-Making
Unless otherwise stated on the Website, we do not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
If this changes, we will provide the information required by applicable data protection law.
16. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our business, Website, services, legal requirements, or data processing practices.
The latest version will be published on this page and the “Last updated” date will be revised accordingly.
We encourage you to review this Privacy Policy periodically.
17. Complaints
If you have concerns about how we process your personal data, please contact us first at [Contact Email] so that we can investigate your concerns.
You also have the right to lodge a complaint with the competent data protection supervisory authority in your country of residence, place of work, or the place where you believe an infringement of data protection law has occurred.
18. Contact Us
For questions about this Privacy Policy, your personal data, or your privacy rights, please contact:
Email: info@cozycuts.lt