Privacy policy

Last updated: August 27, 2026

This Privacy Policy explains how LINA SNARA collects, uses, stores and shares personal data when you visit or use our online store, place an order, contact us, subscribe to marketing communications or otherwise interact with us, including through our social media profiles.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"), applicable Lithuanian data protection legislation and other applicable privacy and electronic communications laws.

Data Controller

The controller responsible for the processing of your personal data is:

MB "Šviesios istorijos"
Trade name: LINA SNARA
Company code: 304918973
VAT code: LT100011900212
Fabijoniškių g. 96
LT-07100 Vilnius
Lithuania
Email: info@linasnara.com
Phone: +370 616 20674

Scope of This Privacy Policy

This Privacy Policy applies to personal data processed when you:

visit or use our online store;
purchase or attempt to purchase our products;
request a return, exchange, refund or other customer service;
contact us by email, telephone, website form or other communication channel;
subscribe to our newsletters or other marketing communications;
interact with our Facebook, Instagram or other social media profiles; or
otherwise interact with LINA SNARA.

Third-party websites and social media platforms may process personal data independently in accordance with their own privacy policies. This Privacy Policy does not govern processing carried out independently by those third parties.

Personal Data We Collect

The personal data we collect depends on how you interact with us.

Identification and Contact Information

We may collect information such as:

first and last name;
email address;
telephone number;
billing address;
shipping address; and
other contact information you choose to provide.

Order and Transaction Information

When you place or attempt to place an order, we may collect:

products ordered;
order value and currency;
billing and delivery information;
payment status and transaction-related information;
shipping and tracking information;
returns, exchanges, refunds and warranty-related information; and
other information required to process and fulfil your order.

Payment transactions are processed through Shopify and/or the payment service providers available at checkout. We do not independently store your complete credit or debit card number.

Communications and Customer Service Information

If you contact us, we may process your name, contact details, order information, the content of your message and our correspondence with you.

Marketing Information

If you subscribe to marketing communications, we may process:

your name and contact details;
your marketing preferences;
information about the products you have purchased or shown an interest in;
information about marketing communications sent to you; and
information about your interaction with those communications, where permitted by applicable law.

Technical and Usage Information

When you use our online store, we and our service providers may automatically collect certain technical information, including:

IP address;
browser type and version;
device type and operating system;
language and general location information;
date and time of visits;
pages and products viewed;
referring websites or sources;
information about how you interact with the website; and
cookie identifiers and similar technical information.

Social Media Information

If you interact with our social media profiles, we may receive information that you make available through the relevant platform, such as your profile information, comments, messages and other interactions with our content.

How We Collect Personal Data

We may collect personal data:

directly from you, when you place an order, subscribe to marketing, contact us or otherwise provide information;
automatically, when you use our website, through cookies and similar technologies;
from service providers, such as payment processors, shipping providers or ecommerce service providers, where necessary to provide our services; and
from social media platforms, where you interact with our profiles or content.

Why We Process Personal Data and Our Legal Bases

Under the GDPR, we must have a valid legal basis for each purpose for which we process personal data.

Processing and Fulfilling Orders

We process identification, contact, order, payment-related and delivery information to accept and administer your order, process payment, arrange delivery and communicate with you about your purchase.

Legal basis: processing is necessary for the performance of a contract with you or to take steps at your request before entering into a contract.

Returns, Exchanges, Refunds and Customer Support

We process relevant order and communication information to respond to enquiries, administer returns, exchanges, refunds, warranty matters and other customer service requests.

Legal basis: performance of our contract with you, compliance with applicable legal obligations and, where appropriate, our legitimate interest in providing effective customer service and managing our business relationships.

Accounting, Tax and Legal Compliance

We may process and retain transaction, invoice, payment and other information where required to comply with accounting, tax, consumer protection or other legal obligations.

Legal basis: compliance with our legal obligations.

Fraud Prevention, Security and Protection of Our Services

We may process technical, transaction and other relevant information to protect our website, customers and business against fraud, misuse, security incidents and unlawful activity.

Legal basis: our legitimate interests in maintaining the security and integrity of our business and services and, where applicable, compliance with legal obligations.

Website Operation and Improvement

We may use information about website use to maintain, analyse and improve the performance, usability and customer experience of our online store.

Where this processing relies on non-essential cookies or similar tracking technologies, we will obtain your consent where required by applicable law.

Legal basis: our legitimate interests for processing that does not require consent, and consent where required for cookies, analytics or similar technologies.

Direct Marketing

If you have agreed to receive marketing communications, we may send you information about LINA SNARA products, new jewellery, collections, offers and other relevant news.

Legal basis: your consent.

You may withdraw your consent at any time by using the unsubscribe option provided in our marketing emails or by contacting us at info@linasnara.com.

Withdrawing your consent does not affect the lawfulness of processing carried out before your consent was withdrawn and does not affect your ability to purchase from us.

Legal Claims and Protection of Rights

Where necessary, we may process personal data to establish, exercise or defend legal claims and to protect our rights, property, customers or business.

Legal basis: our legitimate interests in protecting and enforcing our legal rights and, where applicable, compliance with legal obligations.

When Providing Personal Data Is Required

Certain personal data is necessary for us to enter into and perform a contract with you. For example, we need sufficient identification, contact, payment and delivery information to process and deliver an order.

If you do not provide information that is necessary to complete an order or fulfil a legal requirement, we may be unable to provide the relevant product or service.

Providing personal data for marketing purposes is optional. Refusing or withdrawing marketing consent does not prevent you from using our store or purchasing our products.

Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the online store, maintain security, remember preferences, understand website performance and, where you allow it, support analytics, personalisation and marketing.

Strictly Necessary Cookies

Certain cookies and similar technologies are necessary for essential website functions, such as maintaining the shopping cart, enabling checkout, protecting the website against fraud and remembering privacy preferences.

Where permitted by applicable law, these strictly necessary technologies may be used without your consent because the website cannot provide the requested functionality without them.

Analytics, Personalisation and Marketing Cookies

Non-essential cookies and similar technologies used for analytics, personalisation, advertising or marketing are used only after obtaining your consent where required by applicable law.

You may accept, refuse or manage available cookie categories using the cookie and privacy preference controls provided on our website.

You may change or withdraw your consent at any time. Withdrawing consent will not affect the lawfulness of processing that took place before withdrawal.

Who We Share Personal Data With

We disclose personal data only where reasonably necessary for the purposes described in this Privacy Policy or where required by law.

Depending on the services you use, recipients may include:

Shopify, which provides the ecommerce platform, hosting, checkout and related infrastructure used by our online store;
payment service providers, for processing and administering payments;
courier, postal and delivery providers, for delivering and tracking orders;
email and marketing service providers, where we use them to deliver communications you have requested or consented to;
analytics, advertising and technology providers, where their services are used and applicable consent requirements have been satisfied;
IT, hosting, security and other technical service providers that support the operation and security of our business;
accountants, legal advisers, auditors and other professional advisers where their services require access to relevant information; and
courts, regulators, tax authorities, law enforcement bodies or other public authorities where disclosure is required or permitted by applicable law.

We require service providers processing personal data on our behalf to process it only for authorised purposes and subject to appropriate contractual, confidentiality and data protection obligations.

Shopify

Our online store is operated using the Shopify ecommerce platform. Shopify processes certain personal data in order to provide ecommerce infrastructure, hosting, checkout, security, fraud prevention and related services.

Depending on the particular processing activity, Shopify may process personal data on our behalf as a service provider or may process certain information for its own purposes in accordance with its applicable privacy terms.

International Transfers of Personal Data

Some of our service providers may process or store personal data outside Lithuania or outside the European Economic Area ("EEA").

Where personal data is transferred outside the EEA to a country that has not been recognised as providing an adequate level of data protection, we use or require appropriate safeguards where required by law. These may include European Commission Standard Contractual Clauses or another legally recognised transfer mechanism.

How Long We Keep Personal Data

We retain personal data only for as long as necessary for the purposes for which it was collected and to comply with applicable legal requirements.

The retention period depends on the type of information and the purpose for which it is processed. In particular:

order, payment, invoice and transaction information may be retained for periods required by accounting, tax, consumer protection and other applicable laws;
customer service, return, warranty and correspondence information may be retained for as long as necessary to resolve the matter and manage possible legal claims;
marketing information is generally retained until you withdraw your consent, unsubscribe or the information is otherwise no longer required for the relevant marketing purpose; and
technical and cookie-related information is retained according to the relevant technology, purpose and applicable consent settings.

When personal data is no longer required, we delete or anonymise it where appropriate, unless continued retention is required or permitted by law.

Your Rights Under the GDPR

If the GDPR applies to the processing of your personal data, you may have the following rights, subject to the conditions and limitations provided by law:

Right to be informed about how your personal data is processed;
Right of access to personal data we hold about you;
Right to rectification of inaccurate or incomplete personal data;
Right to erasure of personal data in circumstances provided by law;
Right to restriction of processing in certain circumstances;
Right to data portability for certain personal data processed by automated means on the basis of consent or a contract;
Right to object to processing based on our legitimate interests in circumstances provided by law;
Right to object to direct marketing at any time;
Right to withdraw consent at any time where processing is based on your consent; and
Rights relating to certain solely automated decisions that produce legal effects or similarly significantly affect you, where applicable.

If you object to the processing of your personal data for direct marketing purposes, we will stop processing your personal data for that purpose.

How to Exercise Your Rights

You can exercise your data protection rights by contacting us at info@linasnara.com or by writing to:

MB "Šviesios istorijos"
Fabijoniškių g. 96
LT-07100 Vilnius
Lithuania

To protect your personal data, we may request additional information where reasonably necessary to verify your identity before acting on your request.

We will respond to valid requests without undue delay and, in principle, within one month of receiving the request.

Where permitted by the GDPR, this period may be extended by up to two additional months where necessary due to the complexity or number of requests. If an extension is necessary, we will inform you within the initial one-month period.

Data protection requests are generally handled free of charge. Where a request is manifestly unfounded or excessive, particularly because of its repetitive character, applicable law may allow us to charge a reasonable fee or refuse to act on the request.

Right to Lodge a Complaint

If you believe that your personal data has been processed in violation of applicable data protection law, you have the right to lodge a complaint with a competent data protection supervisory authority.

In Lithuania, the competent supervisory authority is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija).

We encourage you to contact us first if you have a concern so that we have an opportunity to review and address the matter.

Data Security

We use reasonable technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure, access or other misuse.

These measures may include encrypted transmission, access controls, secure service providers and organisational procedures appropriate to the nature of the information being processed.

However, no method of transmitting or storing information electronically can be guaranteed to be completely secure.

Automated Processing and Fraud Prevention

We and our service providers may use automated tools to assist with fraud prevention, security and risk detection.

If we use solely automated decision-making that produces legal effects or similarly significantly affects you in circumstances governed by the GDPR, we will provide any additional information and safeguards required by applicable law.

Children's Privacy

Our online store is intended for a general audience and is not specifically directed at children.

We do not knowingly seek to collect personal data from children in circumstances where such processing would be prohibited by applicable law. If you believe that a child has provided personal data to us unlawfully, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, services, technologies, legal requirements or data processing practices.

The date shown at the beginning of this Privacy Policy indicates when it was last updated. Where required by applicable law, we will provide additional notice of material changes.

Contact Us

If you have any questions about this Privacy Policy, how we process personal data or how to exercise your privacy rights, please contact us:

MB "Šviesios istorijos"
Trade name: LINA SNARA
Company code: 304918973
VAT code: LT100011900212
Fabijoniškių g. 96
LT-07100 Vilnius
Lithuania
Email: info@linasnara.com
Phone: +370 616 20674