Privacy Policy
1. Data Controller
Your personal data is processed by:
Uždaroji akcinė bendrovė "KENTAURO ŽOLELĖ"
Company code: 123581829
Address: Architektų g. 5-21, LT-04118 Vilnius, Lithuania
Email: info@kezo.lt
Website: www.kezo.lt
2. What Data We Collect and Why
We collect and process the following personal data:
- name, surname, phone number (to process and deliver your order);
- email address (to send order confirmations and delivery updates);
- delivery address (to ship your order via LP Express);
- payment information (processed securely by Stripe - we do not store card details).
Legal Basis:
- GDPR Article 6(1)(b) - processing necessary to fulfill the sales contract;
- GDPR Article 6(1)(c) - legal obligation (accounting, tax, consumer protection laws).
3. How We Use Your Data
We use your data to:
- process and fulfill your order;
- communicate about your order status (transactional emails only);
- comply with legal obligations (accounting, tax records);
- handle returns, refunds, and customer service requests.
We do NOT:
- send marketing emails (unless you explicitly provide consent in the future);
- sell or rent your data to third parties;
- use your data for profiling or automated decision-making;
- track your activity with analytics tools (no Google Analytics, Facebook Pixel, etc.).
4. Who We Share Data With
Your data is shared only with:
- Stripe (payment processing) - EU-approved payment processor with adequate safeguards;
- LP Express (shipping) - to deliver your order to parcel terminal.
We never sell your data to anyone.
5. Data Retention
We retain your personal data for 6 years after your purchase to comply with the Republic of Lithuania accounting and tax laws (Law on Accounting, Tax Administration Law).
After 6 years, your data is securely deleted unless we have a legal obligation to retain it longer (e.g., ongoing dispute).
6. Your Rights (GDPR)
You have the right to:
- access your personal data and obtain a copy;
- correct inaccurate or incomplete data;
- delete your personal data (after the legal retention period expires);
- restrict the processing of your data under certain circumstances;
- receive your data in a portable format (machine-readable form);
- object to processing if it is based on legitimate interest;
- withdraw consent if processing is based on your consent.
To exercise your rights, email: info@kezo.lt
We will respond within 30 days.
7. Complaints
If you believe we are not handling your data properly, you have the right to lodge a complaint with:
State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija)
Email: ada@ada.lt
Website: www.ada.lt
Address: L. Sapiegos g. 17, Vilnius, Lithuania
8. Data Security
We use industry-standard security practices:
- SSL encryption for all data transmission;
- secure payment processing via PCI-DSS compliant Stripe (Stripe handles all card security);
- access controls (only authorized personnel access customer data).
In case of a data breach that may affect your rights, we will notify you within 72 hours as required by GDPR.
9. International Data Transfers
Your data is primarily stored in EU servers. Stripe (payment processor) may transfer data to the USA under EU-approved Standard Contractual Clauses and adequacy decisions.
10. Cookies and Tracking
We do not use analytics cookies or tracking pixels. We only use essential cookies necessary for the website to function (shopping cart, language preference).
11. Minors and Parental Supervision
This equipment, for users under 18 years old, requires adult supervision. Parents and guardians are responsible for supervising minors' use of our products and ensuring proper safety measures.
12. Changes to This Policy
We may update this Privacy Policy to reflect legal changes or business practices. The latest version is always available on our website. Last updated: November 2025.
13. Contact Us
Questions about how we handle your data?
Email: info@kezo.lt
Company details: www.kezo.lt/contacts