hoppiez

Privacy policy

Last updated: 3 July 2026

This policy explains how we handle your personal data when you visit this site or place an order, in line with the EU General Data Protection Regulation (GDPR).

Who is responsible (controller)

What data we collect

• Order data: name, shipping and billing address, email, phone number.
• Payment data: handled directly by Stripe. We receive confirmation of payment and limited details (such as the last 4 digits and card type), never your full card number.
• Technical data: basic server logs (IP address, browser type, time of request) created automatically by our hosting provider for security and to deliver the site.
• Cart data: the items in your cart are stored locally in your own browser (localStorage), not sent to us until you check out.

Why we use it and the legal basis

• To process and ship your order, and to contact you about it — performance of a contract (Art. 6(1)(b) GDPR).
• To meet tax and accounting obligations — legal obligation (Art. 6(1)(c) GDPR).
• To keep the site secure and working — our legitimate interest (Art. 6(1)(f) GDPR).

Who we share it with (processors)

• Stripe — payment processing. See Stripe's privacy policy at stripe.com/privacy.
• Vercel — website hosting and delivery. See vercel.com/legal/privacy-policy.
• Google Fonts — fonts are loaded from Google servers, which may receive your IP address. See the Cookies notice.
• Shipping carrier — our courier (e.g. Lithuania Post or a comparable EU carrier, confirmed in your shipping confirmation email) receives the address needed to deliver your parcel.

Some of these providers may process data outside the EU. Where they do, they rely on appropriate safeguards such as the EU Standard Contractual Clauses.

How long we keep it

Order and invoice data is kept for as long as required by tax law (typically up to 10 years). Other data is kept only as long as needed for the purpose it was collected.

Your rights

Under the GDPR you have the right to access, correct, delete or restrict your data, to object to certain processing, and to data portability. To exercise any of these, email liudvikas.liubobestas@gmail.com. You also have the right to complain to your local data protection authority — for Lithuania this is the State Data Protection Inspectorate (vdai.lrv.lt).

Cookies

See our separate Cookies notice.