This privacy policy explains what personal data we collect in the tahiti.lt online store, what we use it for, how long we keep it and what rights you have. It has been prepared in line with the General Data Protection Regulation (GDPR) and the laws of the Republic of Lithuania.
Policy last updated on 3 September 2026.
1. Who processes your data
The data controller is:
MB “Kvapo magija”
Company code: 305677518
Address: Raudondvario pl. 76, Kaunas, Lithuania
Email: info@tahiti.lt
Phone: +370 603 88460
For any questions about personal data, write to info@tahiti.lt. We reply within one month at the latest.
2. What data we collect and why
2.1. Fulfilling your order. When you buy from us, we collect your first name, last name, email address, phone number, delivery address or chosen pickup point, and the contents of your order. We need this data to perform the contract: to pack your parcel, deliver it, issue a VAT invoice and contact you about the order.
Legal basis: performance of a contract (GDPR Article 6(1)(b)) and the legal obligation to keep accounting records (Article 6(1)(c)).
Retention period: the accounting documents containing this data are kept for 10 years from the order, as required by accounting legislation.
2.2. Store account. You can also buy without an account. If you create one, we store your email address, order history and delivery details, so that you do not have to enter them again on your next purchase. Your password is stored encrypted and we cannot see it.
Legal basis: performance of a contract. The data is kept for as long as the account exists. You can have your account deleted at any time by writing to us.
2.3. Correspondence. When you write to us by email or through the contact form, we store your name, email address, phone number if you provide it, and the content of your message, so that we can reply and return to the matter later if needed.
Legal basis: our legitimate interest in communicating with customers (Article 6(1)(f)). We keep correspondence for no longer than 12 months after the conversation ends. Correspondence related to an order, a warranty or a complaint is kept for as long as it takes to resolve the matter.
2.4. Marketing messages. We send news and offers only when you have given separate consent. You can withdraw your consent at any time by clicking the unsubscribe link at the bottom of the email or by writing to info@tahiti.lt. Once consent is withdrawn we stop sending emails and remove your address from the subscriber list.
Legal basis: consent (Article 6(1)(a)).
2.5. Cookies and website statistics. Our website uses cookies: essential ones, without which the store would not work, as well as statistics and marketing cookies, which we switch on only after you consent in the cookie banner. Which cookies these are, what they are for and how to switch them off is described in the cookie policy.
Legal basis: legitimate interest for essential cookies, consent for all the others.
3. Who we share data with
We do not sell your data and we do not pass it on to third parties at our own discretion. We share it only as far as it is needed to fulfil your order and run the store, and only with these partners:
- Hostinger International Ltd. (Lithuania), website and email servers.
- Montonio Finance UAB (Estonia, Lithuania), payment collection. We never see or store your card or online banking details, they stay with the payment service provider.
- DPD Lietuva UAB , parcel delivery. We share your first name, last name, phone number, email address and delivery address or pickup point.
- Google Ireland Ltd. , website traffic statistics (Google Analytics).
- Meta Platforms Ireland Ltd. , measuring advertising performance on Facebook and Instagram, only if you have accepted marketing cookies.
- Public authorities, where the law requires us to provide data.
Google and Meta may process part of the data in the United States. These transfers are based on the European Commission decision on the EU-US Data Privacy Framework or on standard contractual clauses.
4. Your rights
In relation to your personal data you have the right to:
- know what data of yours we process and receive a copy of it;
- have incorrect or inaccurate data corrected;
- have your data erased when it is no longer needed for the purpose it was collected for, or when you withdraw your consent;
- restrict the processing while we look into your request;
- receive the data you provided in a commonly used machine-readable format and transfer it to another controller;
- object to processing that is based on legitimate interest;
- withdraw your consent at any time, without affecting processing carried out before the withdrawal.
Please note that we cannot always erase everything: the law requires us to keep the accounting documents relating to your order for 10 years.
To exercise these rights, write to info@tahiti.lt. To protect your data, we may ask you to confirm your identity.
If you believe we are handling your data improperly, please write to us first and we will gladly look into it. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, email ada@ada.lt, phone +370 5 271 2804).
5. Data security
The website connection is encrypted with an SSL certificate. Access to order data is limited to the people who need it for their work. We use trusted service providers with whom data processing agreements are in place.
6. Children's data
The store is intended for adults. We do not knowingly collect data of persons under 16. If we learn that such data has been provided without the consent of a parent or guardian, we delete it.
7. Changes to this policy
We may update this policy, for example when we start using a new service or when the law changes. The latest version is always published on this page and its date is shown at the top. If the changes are significant, we will announce them on the website or by email.
8. Get in touch
Questions about your data? Write to info@tahiti.lt or call +370 603 88460.