Privacy policy

1. Controller

Linenlumas UAB, Vilnius, trading as Linenlumas, runs this storefront and decides what happens to the data described below. Questions and requests go to hello@linenlumas.com.

2. What, why, on what basis, for how long

Data	Purpose	Legal basis	Retention
Name, delivery address, email, phone	Fulfilling and delivering an order	Contract	10 years (Lithuanian accounting law)
What you ordered and paid	Order handling, returns, the 60-wash promise	Contract	10 years, then anonymised
Payment confirmation (never card numbers)	Knowing the order is paid	Contract	10 years
Email address on its own	The newsletter, if you asked for it	Consent	Until you unsubscribe
Basket, saved items, discount code	Keeping your basket between visits	Strictly necessary	In your browser only; never sent to us
Aggregate page views	Seeing which pages are read	Consent	13 months, aggregated

Card details are entered directly with the payment provider. They never reach us.

3. The basket stays on your device

Your basket, saved items and any discount code are held in your browser's local storage. Nothing about them is transmitted to us and we cannot see them. Clear your site data and they are gone.

4. Cookies

• Strictly necessary. The basket, your cookie choice and session security. Always set, because the shop does not function without them.
• Measurement. Aggregate counts of pages and products viewed. Set only if you press “Fine” on the cookie bar, and dropped if you choose “Basket only”.

No advertising cookies, no cross-site pixels, no sale of data.

5. Who else sees it

Only the processors we need to run the shop, each under a data processing agreement and each receiving only what its job needs:

• The payment provider — name, email, amount
• The carrier — name, delivery address, phone
• The email service — email address, for order mail and the newsletter
• The hosting provider — server logs including IP addresses, kept 30 days

6. Transfers outside the EEA

Our processors are within the EEA where we have a choice. Where one is not, the transfer is made under the European Commission's Standard Contractual Clauses.

7. Your rights

Under the GDPR you may ask for a copy of your data, have it corrected or erased, restrict its processing, receive it in a portable format, object to processing based on legitimate interests, and withdraw consent at any time. Write to hello@linenlumas.com; we reply within 30 days and usually within a few. Where accounting law obliges us to keep something, we will tell you so and delete it when the period ends.

8. Complaints

You may complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) in Vilnius. We would be grateful for the chance to put it right first.

9. Changes

If this policy changes in a way that matters, the date at the top changes and a note here says what moved. Earlier versions are available on request.

Terms & conditions