Privacy policy

1. Controller and scope

The controller of your personal data is Art creation, MB. Legal entity code: 306383640. For privacy questions, email [email protected].

This policy applies to website visitors, customers who check out as guests, and people who enquire about the “Personal Signature” or “Guidance” services. Personal data means information that can identify a person directly or indirectly.

2. Data we collect and why

To accept an order, confirm payment, deliver your items, and communicate with you about the order, we process your full name, email address, telephone number, delivery address, items ordered, payment status, delivery choice, and parcel tracking information.

Payment card details are handled directly by Stripe Checkout. AnetosArt does not receive or store full card numbers; we store transaction identifiers and payment status needed to administer the order, reconcile the payment, and handle possible refunds or disputes.

When you enquire about the “Personal Signature” service, we process your full name, date of birth, budget, occasion, email address, and telephone number so that we can understand your needs, prepare a personal proposal, and contact you about the service.

When you enquire about the “Guidance” service, we process the need you describe, your budget, occasion, email address, telephone number, free-text message, and any optional reference images you choose to add. Please upload only images you are entitled to share. We use this information only to assess the enquiry, prepare a proposal, and provide the service.

The website has no customer accounts, registration, or passwords. We send only emails related to an order or service enquiry you have submitted; we do not currently run a newsletter or direct marketing.

Only with your consent, we use Google Analytics to understand visits to public shop pages. This may involve page views, referral sources, browser and device information, and online identifiers. We do not send order or service enquiry details to analytics.

3. Processing principles and legal grounds

We collect personal data for clear and lawful purposes, use only what is necessary for those purposes, take steps to keep it accurate, and retain it no longer than needed. We keep data confidential and apply organisational and technical security measures appropriate to its nature and risks.

Depending on the purpose, we process data to enter into or perform a contract, comply with legal obligations, or pursue legitimate interests in protecting the store, preventing fraud, administering orders, and establishing, exercising, or defending legal claims. Where processing relies on your consent, you may withdraw it at any time; withdrawal does not affect processing carried out lawfully beforehand.

Please provide accurate information and tell us if it changes. We use your information only for the purposes described here or compatible purposes, unless the law permits or requires otherwise.

4. Recipients and service providers

We share data with service providers only to the extent needed to operate the store and provide the service you choose. We do not sell personal data or share it with partners for their marketing.

We use Stripe to process payments. Stripe processes transaction and personal data to complete payments, operate and improve its services, and prevent fraud. On its payment page, Stripe may also collect and analyse device, browser, IP address, and activity information to detect fraud. Stripe handles this data under its own privacy policy; we receive the transaction details and payment status needed to administer the order. Stripe privacy policy

Microsoft Azure services are used to host the website, store data, and send transactional emails. We provide delivery and logistics providers only with the data needed to deliver and track an order.

We may also disclose personal data to competent authorities when required by law or necessary to establish, exercise, or defend legal claims.

If you allow analytics, your browser contacts Google, which processes technical visit data under its privacy policy. Fonts are loaded from the shop itself. Google privacy policy

5. Retention

We retain order and payment data for as long as needed to fulfil the order, comply with accounting and other legal obligations, administer returns, and establish or defend possible claims. The specific period depends on the type of data and the legal time limits that apply.

We retain service enquiries, free-text messages, and optional reference images for as long as needed to assess the enquiry, communicate with you, provide the service, and resolve possible questions.

6. Your rights and contact details

Depending on the circumstances and the conditions set by law, you have the right to access your data, ask us to correct or erase it, restrict its processing, object to processing, and receive or transmit data you provided where the right to data portability applies.

To exercise your rights, email [email protected]. Requests are generally handled free of charge, and we will respond within one month; where the law allows an extension, we will tell you. We will request extra information to confirm your identity only if we have reasonable doubts about the identity of the person making the request.

If you believe your data is being handled improperly, we invite you to contact us first. You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate or another competent supervisory authority.

7. Cookies

Essential cookies and similar technologies help the website work. The cart cookie links your browser to a cart stored on our server, where its contents are retained for 14 days from your last activity. The language preference cookie remembers your chosen language for the current browser session. When you have not selected a language, we use an available language from your browser preferences, or the store’s default language.

Anti-forgery cookies help protect forms and actions you take on the website. A protected checkout cookie lasts up to 24 hours and lets you safely resume the same payment attempt. Once the completed payment is viewed or a new checkout begins, it is replaced by a protected receipt cookie, lasting up to 24 hours, so you can revisit the confirmation. These cookies are technically necessary for the website to operate securely.

You can delete or block essential cookies in your browser settings, but the cart, language selection, or forms may then work incorrectly. We do not use marketing cookies.

Analytics loads only when you allow it. The aa-analytics-consent cookie remembers your choice for up to 180 days; analytics cookies with the aa_ga prefix last up to 180 days. You can change your choice through Cookie settings. Withdrawing consent stops analytics and removes these analytics cookies.

This section describes cookies on the AnetosArt website. When you continue to Stripe Checkout, cookies and similar technologies on the payment page are covered by Stripe’s privacy policy.

8. Changes to this policy

We may update this privacy policy when the website, our services, or applicable requirements change. The new version is published on this website and applies from the date of publication.