Privacy Policy

This privacy policy explains what personal data besino.lt collects, what it is used for, who it is shared with and what rights you have. Last updated 16 September 2026.

Data controller

  • Name: Gloriaway, MB
  • Company code: 306213225
  • VAT number: LT100015632314
  • Registered address: Sedos g. 34A-B209, LT-87101 Telšiai, Lithuania
  • Email: info@besino.lt

For any data protection matter write to info@besino.lt. We answer requests within 30 days.

What data we collect

We collect only the data a particular purpose requires. You are the source of it — we do not gather or buy your data anywhere else.

  • When you order: first and last name, email address, phone number, delivery address or the parcel locker you chose. When buying on behalf of a company — also the company name, company code and VAT number. Alongside this we keep the order itself: products, quantities, amounts, payment method and order status.
  • When you create an account: email address, name, a cryptographic hash of your password (we never see the password itself), saved addresses and your wishlist.
  • When you sign in with Google: Google gives us your email address, name and account identifier. Google does not pass us your password.
  • When you leave a review: name, email address, the review text and your IP address. Only the name and the text are shown publicly.
  • When you use the contact form: name, email address and your message. This never reaches the website database — the message is forwarded to info@besino.lt.
  • Technical data: server logs record the IP address, request time and browser type. This is done by the hosting provider for security purposes.

We never see or store card details. Payment happens inside the Paysera environment; we only receive confirmation that the order has been paid.

Why we collect it and on what legal basis

  • To fulfil and deliver your order — performance of a contract (GDPR Article 6(1)(b)).
  • To issue invoices and keep accounts — legal obligation (GDPR Article 6(1)(c)).
  • For your account and wishlist — your consent, given by creating the account.
  • To publish your review — your consent.
  • To answer your question — legitimate interest in serving customers (GDPR Article 6(1)(f)).
  • For site security — legitimate interest in protecting the system from abuse.

We send no marketing email and have no newsletter. Should we ever start, we will ask for separate consent and update this policy.

Who we share data with

We do not sell your data and share it with no one who is not involved in fulfilling your order. We use these service providers:

  • Paysera LT, UAB — payment collection.
  • MultiParcels and the carrier you choose through it — LP Express or Venipak. They receive the recipient’s name, phone number and delivery address or parcel locker.
  • Hostinger — website hosting and outgoing email. Technically all site data lives on its servers.
  • Google — only if you choose to sign in with a Google account.

Data may also be given to public authorities where the law requires it.

On transfers outside the European Economic Area. Only signing in with Google can cause such a transfer, as Google LLC is a United States company; the transfer relies on the EU–US Data Privacy Framework. The other providers listed above are European Union companies.

Cookies

We use no analytics or advertising cookies. There is no Google Analytics, no Facebook pixel and no other visitor tracking on this site. That is also why you see no consent banner — consent is required only for cookies a site could work without.

Simply browsing sets no cookie at all. They appear only once you do something:

  • woocommerce_items_in_cart and woocommerce_cart_hash — set when you add an item to the basket, so the basket survives as you move around the site. They last until you close the browser.
  • wp_woocommerce_session_… — links your browser to the basket held on the server. Lasts one day.
  • wordpress_logged_in_… and related — set only when you log in, so you are not asked to log in on every page.
  • comment_author_… — set only when you leave a review, and only if you tick the box asking the browser to remember your name.

You can delete or block all cookies in your browser settings. Blocking them stops the basket and login from working.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to:

  • access your data and receive a copy of it;
  • have inaccurate data corrected;
  • have data erased once it is no longer needed for the purpose it was collected for;
  • restrict or object to processing;
  • receive your data in a common format and port it to another controller;
  • withdraw consent at any time.

The right to erasure is not absolute. We cannot delete issued invoices and the order data attached to them until the retention period set by accounting law has passed.

If you believe your data is handled improperly, you have the right to complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

How long we keep data

  • Orders and invoices — 10 years, as accounting law requires.
  • Account data — for as long as you have an account. Delete it and the data is removed, except what we must keep for accounting.
  • Reviews — for as long as they are published on the site.
  • Contact form correspondence — for as long as the matter is relevant.

Once the retention period ends, data is destroyed or anonymised.

Automated decisions

We do not carry out automated decision-making or profiling that would have a legal or similarly significant effect on you.

Changes to this policy

If we change this policy we will state a new update date here. This version applies from 16 September 2026.