Privacy Policy

1. Who we are (data controller)

Example Sports, Sporto g. 1, Vilnius, Lithuania, is the controller of the personal data processed through this store. For any privacy question contact us at privacy@example.com or via our contact page.

2. What personal data we collect

We collect the data you give us when you order or create an account — name, email, phone number, delivery and billing address — together with order history, and technical data such as IP address and device/browser information gathered automatically.

3. How and why we use it

We use your data to process and deliver orders, handle returns and warranty claims, provide customer support, send order updates, and — where you have opted in — send news about new gear and offers. We also use aggregated data to improve the store.

4. Legal bases for processing

We process your data to perform our contract with you (fulfilling orders), to comply with legal obligations (accounting and tax records), on the basis of your consent (marketing, non-essential cookies), and for our legitimate interests (securing the site and preventing fraud).

5. Sharing with third parties and processors

We share data only as needed: with payment providers to take payment, with delivery carriers to ship your order, and with analytics and email providers acting as our processors under contract. We never sell your personal data.

6. Cookies and tracking

We use essential cookies to run the basket and checkout, and — with your consent — analytics cookies to understand how the store is used. You can manage non-essential cookies through the cookie banner at any time.

7. International transfers

Your data is processed within the EU/EEA wherever possible. Where a processor operates outside the EEA, we rely on appropriate safeguards such as the European Commission Standard Contractual Clauses.

8. Data retention

We keep order and accounting records for the period required by law (generally up to ten years for tax purposes) and delete or anonymise marketing and account data once it is no longer needed or when you ask us to.

9. Your rights under the GDPR

You have the right to access your data, to have it corrected or erased, to restrict or object to processing, and to data portability. You may also withdraw consent for marketing at any time without affecting prior processing.

10. How to exercise your rights and complain

To exercise any right, email privacy@example.com or use our contact page. If you are unhappy with our response you may complain to the State Data Protection Inspectorate of the Republic of Lithuania.

11. Data security

We protect your data with encryption in transit (HTTPS), access controls and trusted payment providers, so card details are never stored on our servers.

12. Changes to this policy

We may update this policy from time to time. The current version is always published here, with the date of the latest revision.