Privacy policy

This Privacy Policy (hereinafter – Policy) explains how UAB "Eusova Cosmetics" (hereinafter – We or the Data Controller) collects, uses, and protects Your (hereinafter – Buyer, Visitor, or You) personal data on the online store www.luxeolshop.com.

We respect your privacy and are committed to protecting your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (hereinafter – GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable laws.

1. Data Controller

The controller of your personal data is:

  • Company Name: UAB "Eusova Cosmetics"

  • Company Code: 306628794

  • Registered Address: Antano Tumėno g. 4, LT-01110 Vilnius, Lithuania

  • Email: info@luxeolshop.com

2. What Data Do We Collect and on What Basis?

We process your personal data only when there is a lawful basis (performance of a contract, consent, legal obligation, or legitimate interest).

2.1. E-commerce (Order Fulfillment)
To accept, administer, and deliver your order, as well as to issue invoices, we collect the following data:

  • Name, surname;

  • Phone number;

  • Email address;

  • Delivery address;

  • Payment information (payment method, bank details).

  • Legal Basis: Performance of the purchase-sale contract (GDPR Art. 6(1)(b)) and legal obligation (accounting) (GDPR Art. 6(1)(c)).

2.2. Direct Marketing (Newsletters)
Only with your explicit consent (e.g., by ticking a checkbox or entering your email in the newsletter section), we use your email address to send offers and news.

  • Legal Basis: Your consent (GDPR Art. 6(1)(a)). You may withdraw your consent at any time by clicking the unsubscribe link at the bottom of the newsletter or by contacting us via email.

2.3. Inquiry Administration
When you contact us via email, phone, or social media, we process your contact details and message content to respond to your inquiry.

  • Legal Basis: Our legitimate interest to serve customers (GDPR Art. 6(1)(f)).

2.4. Browsing (Cookies)
We collect technical data (IP address, browser type, browsing history) to ensure the website functions properly and to improve user experience.

  • Legal Basis: Essential cookies – legitimate interest; Analytical and marketing cookies – Your consent (cookie banner).

3. How Long Do We Keep Your Data?

Your data is stored no longer than required by the purposes of processing or by law:

  • Order data and invoices: 10 years from the date of the invoice (in accordance with the Law on Accounting of the Republic of Lithuania).

  • Direct marketing data: 3 years from the date of consent or until you withdraw consent.

  • Inquiry data: 1 year after the last communication.

4. Who Do We Share Your Data With (Third Parties)?

We do not sell your data. We may transfer your data only to trusted partners (Data Processors) who help us operate our business:

4.1. E-commerce Platform ("Shopify")
Our store is hosted on Shopify. Shopify collects and processes personal data about your access to and use of the Services to provide and improve them. Information you provide to us will be transferred to and shared with Shopify, as well as third parties located in countries other than your country of residence (e.g., Canada or the US).
Additionally, in certain circumstances, Shopify acts as a data controller to improve its functions (e.g., fraud prevention). To learn more about how Shopify uses your personal data and what rights you have, please review the Shopify Privacy Policy.

4.2. Payment Processing ("MakeCommerce")
Payments in the online store are processed using the makecommerce.lt platform, managed by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no.: 12268475), therefore your personal information necessary for payment execution and confirmation will be transferred to Maksekeskus AS.

4.3. Marketing and Newsletters ("Klaviyo")
For newsletters and automated marketing, we use the "Klaviyo" platform (Klaviyo Inc., USA). If you have consented to receive news, your email address and purchase information may be transferred to Klaviyo servers. Klaviyo ensures data security in accordance with Standard Contractual Clauses (SCC) and data protection agreements. More information: Klaviyo Privacy Policy.

4.4. Other Service Providers

  • Courier Services: (e.g., LP Express, Omniva, DPD, Venipak) to deliver goods.

  • Accounting Firms: to handle bookkeeping.

  • Analytics and Advertising: "Google", "Meta" (Facebook/Instagram) – only if you have consented to cookies.

5. Your Rights

As a data subject, you have the following rights:

  1. To know about the processing of your data.

  2. To access your processed data.

  3. To request rectification of inaccurate data.

  4. To request erasure of data ("right to be forgotten") when it is no longer needed for the purposes for which it was collected, or upon withdrawal of consent.

  5. To restrict data processing.

  6. To object to data processing for direct marketing purposes.

  7. Right to data portability.

  8. Right to contact Shopify directly if related to data processed by them as a data controller (as stated in section 4.1).

To exercise these rights, please contact us at: info@luxeolshop.com. We respond to requests within 30 days.

6. Cookies

Our website uses cookies – small text files saved on your device.

  • Essential Cookies: Necessary for the proper functioning of the website. Consent is not required.

  • Analytical and Marketing Cookies: Used for statistics and advertising. Saved only with your consent.

You can change your browser settings and delete cookies at any time. More information: www.AllAboutCookies.org.

7. Third-Party Links

The website may contain links to other websites. We are not responsible for third-party privacy policies, so we recommend reviewing them separately.

8. Complaint Handling

If you believe your rights have been violated, please contact us first at info@luxeolshop.com. If the solution does not satisfy you, you have the right to file a complaint with the State Data Protection Inspectorate (VDAI) (L. Sapiegos g. 17, Vilnius, Lithuania, www.vdai.lrv.lt).

9. Changes to the Policy

We have the right to amend this Privacy Policy. Amendments take effect from the day they are published on the website.
Last updated: December 9, 2025