This policy explains what personal data we collect when you use hilasti.com, why we collect it, and what rights you have. We keep it to the minimum we need to run a small online shop.
Who is responsible for your data
The controller of your personal data is MB Stiega Bros.
- Company number: 306147152
- Address: Gedimino g. 22A-14, LT-44319 Kaunas, Lithuania
- Email: info@hilasti.com
For any question about your data, email us and we’ll reply as soon as we can.
What we collect and why
When you place an order
Checkout is handled by Stripe. When you order, we receive:
- your name, email address and phone number
- your shipping and billing address
- what you ordered, the price and the payment status
We use this to process your order, deliver it, answer questions about it, handle returns and keep the records the law requires.
Your card or other payment details are entered on Stripe’s page and handled only by Stripe. We never see or store your full card number.
Legal basis: performing our contract with you, and complying with legal obligations such as tax and accounting rules.
When you join our email list
If you sign up, we store your email address in Mailchimp and send you news and offers. We only do this with your consent. Every email has an unsubscribe link, and you can also email us to be removed at any time.
Legal basis: your consent.
When you email us
If you contact us, we keep your message, your email address and anything else you choose to share, so we can reply and keep a record of the conversation.
Legal basis: our legitimate interest in answering your questions, or taking steps towards a contract if you ask about an order.
Website analytics
We use Umami, a privacy-friendly analytics tool that we host ourselves. It counts page views, referring sites, browser type and country. It sets no cookies, doesn’t track you across other websites and doesn’t build personal profiles.
Legal basis: our legitimate interest in understanding how the site is used so we can improve it.
Server logs
Like most websites, our server records basic technical data when you visit, such as your IP address, the page requested and the time. We use these logs only to keep the site secure and working, and we keep them for a short time before they are deleted.
Legal basis: our legitimate interest in running a secure website.
Cookies
hilasti.com sets no tracking or advertising cookies, so you won’t see a cookie banner here. When you go to checkout, Stripe sets its own cookies on its checkout page, which are needed for secure payment and fraud prevention. See Stripe’s privacy policy for details.
Who we share your data with
We never sell your data. We share it only with service providers who help us run the shop, and only as much as they need:
- Stripe for payments and checkout
- Mailchimp (owned by Intuit) for our email list, if you sign up
- Our hosting provider, which runs the website and server
- Courier and postal services, which receive your name, address and contact details to deliver your parcel
Each of these processes data under a contract with us or under its own privacy terms. We may also share data where the law requires it, for example with tax authorities.
International transfers
Stripe and Mailchimp may process data in the United States. These transfers are protected by the EU-US Data Privacy Framework, where the company is certified, or by the European Commission’s Standard Contractual Clauses.
How long we keep your data
- Order records: as long as Lithuanian accounting law requires.
- Email list: until you unsubscribe or ask us to remove you.
- Emails with us: as long as needed to deal with your question, and then for a reasonable period in case it comes up again.
- Server logs: a short time only, then deleted.
Your rights
Under the GDPR (and the UK GDPR if you live in the UK) you have the right to:
- ask for a copy of the data we hold about you
- ask us to correct data that is wrong
- ask us to delete your data, where we don’t need to keep it by law
- ask us to limit how we use your data
- object to us using your data based on legitimate interest
- receive your data in a portable format
- withdraw your consent at any time, for example by unsubscribing
To use any of these rights, email info@hilasti.com. We’ll respond within one month.
Complaints
If you’re unhappy with how we handle your data, please tell us first so we can try to fix it. You also have the right to complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) at www.ada.lt, or to the data protection authority in your own country.
Changes to this policy
We may update this policy when our services or the law change. The date of the latest update is shown at the top of this page.