Privacy Policy

Last updated: July 31, 2026

This Privacy Policy describes how kormcroft (kormcroft Limited) collects, uses, and protects your personal information when you visit our website and purchase our handmade ceramic vases and dried reed bundle decorative gifts. We are committed to protecting your privacy and handling your data responsibly and transparently.

Who We Are

We are an artisan business based in kormcroft, Lithuania, specializing in handmade ceramic bud vases and dried pampas reed decorative gift bundles. We operate our website to showcase our products, process orders, and communicate with our customers. As the data controller, we determine how and why we process your personal information.

Information We Collect

We collect different types of information depending on how you interact with our website:

• Contact Information: When you contact us through our contact form or email, we collect your name, email address, phone number, and message content.
• Order Information: When you make a purchase, we collect your name, address, email, phone number, and payment details through our secure payment processor.
• Usage Data: We collect information about how you interact with our website, including pages visited, time spent on pages, and links clicked, through cookies and analytics tools.
• Device Information: We automatically collect information about your device, browser type, operating system, and IP address.

Legal Basis for Processing

We process your personal information based on the following legal grounds:

• Consent: We process information when you explicitly consent, such as when you subscribe to our newsletter or contact us.
• Contract Performance: We process information necessary to fulfill your orders and provide customer support.
• Legitimate Interest: We process information to improve our website functionality, analyze user behavior, and enhance our products and services.
• Legal Obligation: We process information when required by Lithuanian or EU law.

How We Use Your Information

We use the information we collect for the following purposes:

• Processing and fulfilling your orders
• Sending order confirmations and delivery updates
• Responding to your inquiries and customer support requests
• Improving our website performance and user experience
• Analyzing website traffic and user behavior through analytics
• Sending marketing communications (only with your consent)
• Complying with legal obligations and protecting our rights

Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected:

• Order and Transaction Data: Retained for 5 years for accounting and legal compliance purposes.
• Contact Form Submissions: Retained for up to 24 months after your last interaction with us, unless you request deletion.
• Website Analytics and Cookie Data: Retained for up to 12 months from collection.
• Server Logs: Retained for up to 12 months for security and troubleshooting purposes.
• Marketing Communications: Retained until you unsubscribe from our mailing list.

Cookies and Tracking Technologies

Our website uses cookies and similar tracking technologies to enhance your browsing experience and analyze website usage. Cookies are small files stored on your device that help us remember your preferences and track your activity. We use both session cookies (which expire when you close your browser) and persistent cookies (which remain until you delete them). You can control cookie settings through your browser preferences, though disabling cookies may affect website functionality. For more detailed information about our cookie practices, please refer to our Cookie Policy.

Your Rights

Under the General Data Protection Regulation (GDPR) and Lithuanian data protection law, you have the following rights:

• Right of Access: You can request a copy of the personal information we hold about you.
• Right to Rectification: You can request correction of inaccurate or incomplete information.
• Right to Erasure: You can request deletion of your personal information under certain circumstances.
• Right to Restrict Processing: You can request limitation of how we use your information.
• Right to Data Portability: You can request your data in a structured, commonly used format.
• Right to Object: You can object to processing for direct marketing or legitimate interests.
• Right to Lodge a Complaint: You can file a complaint with the Lithuanian State Data Protection Inspectorate (VDAI).

Data Security

We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These include encryption of data in transit and at rest, secure server infrastructure, and regular security assessments. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security of your data.

Third-Party Sharing

We do not sell, trade, or rent your personal information to third parties. We may share your information with trusted service providers who assist us in operating our website and conducting our business, such as payment processors, shipping companies, and analytics providers. These third parties are contractually obligated to use your information only as necessary to provide services to us and must maintain appropriate data protection measures.

International Data Transfers

Your personal information is primarily stored and processed within the European Union. If we transfer data outside the EU, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions by the European Commission.

Children's Privacy

Our website and products are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child without parental consent, we will take steps to delete such information and terminate the child's account immediately.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last updated" date and posting the revised policy on our website. Your continued use of our website following the posting of changes constitutes your acceptance of the updated Privacy Policy.