Privacy Policy

This privacy policy explains how Royal MA, UAB collects, uses and protects your personal data when you visit royaltubs.lt, buy from us or get in touch.

Last updated: August 2026

1. Data controller

  • Royal MA, UAB
  • Legal entity code: 305790964
  • VAT number: LT100014129418
  • Registered address: Aušros g. 24-23, Utena, LT-28145, Republic of Lithuania
  • Shop and collection point: Užpalių g. 87, Utena
  • Email: info@royaltubs.lt
  • Tel.: +370 622 68022, +370 621 36971

2. What personal data we collect

2.1. Order data

When you buy from us we process: first name, surname, email address, telephone number, delivery and billing address, the contents and value of the order, payment confirmation data and order history. For business customers we also process the company name, company code and VAT number.

2.2. Contact data

When you email us, call us or fill in the contact form we process: your name, email address, telephone number and the content of your message.

2.3. Technical website data

When you visit the site, technical data is collected automatically: IP address, browser and device type, time of visit and pages viewed. This data is used to run the site, keep it secure and compile statistics.

3. Purposes and legal bases

PurposeLegal basis
Fulfilling the order, delivery, warranty servicePerformance of a contract (GDPR Art. 6(1)(b))
Accounting, issuing and retaining VAT invoicesLegal obligation (GDPR Art. 6(1)(c))
Answering enquiries, giving advicePerformance of a contract or legitimate interest (GDPR Art. 6(1)(b) or (f))
Website security, fixing faults, spam protectionLegitimate interest (GDPR Art. 6(1)(f))
Statistics and improving the websiteConsent or legitimate interest
Debt administration, defending legal claimsLegitimate interest (GDPR Art. 6(1)(f))

4. Recipients and processors

We share your data only as far as is necessary to fulfil an order or to meet legal requirements. Our main processors are:

  • Payment collection – Paysera LT, UAB (payment initiation and collection services). We never see or store payment card details; those are handled by the payment service provider.
  • Delivery – Venipak Lietuva, UAB (courier delivery and delivery to parcel lockers and pickup points). We pass on the recipient name, address, telephone number and email so the parcel can be delivered.
  • Website hosting – our web hosting provider.
  • Statistics and site features – Automattic Inc. (Jetpack, for site statistics and protection) and Automattic Inc. (Akismet, for spam protection).
  • Google Ireland Ltd. – product catalogue integration and advertising / analytics services where these are used.
  • Accounting and legal services – where necessary.

Where the law requires it, data may be provided to state authorities (for example the tax authority or law enforcement).

Some service providers may process data outside the European Economic Area. In those cases the safeguards required by the GDPR apply (for example standard contractual clauses).

5. Cookies and analytics

The website uses cookies – small files stored on your device.

  • Essential cookies – needed for the site to work: the shopping cart, logging in, security. They are used without separate consent.
  • Statistics cookies – help us understand how visitors use the site (Jetpack statistics).
  • Marketing / advertising cookies – used when Google advertising or product catalogue services are active.

A cookie notice is shown on your first visit. You can change your choice at any time in your browser settings, or delete cookies already stored. If you disable essential cookies, the site may not work properly.

6. Retention periods

  • Accounting documents (invoices, payments) – 10 years, as required by Lithuanian law.
  • Order and customer data – 10 years from the order where it forms part of accounting records; other order data up to 2 years after the warranty period ends.
  • Correspondence and enquiries – up to 1 year from the end of the correspondence, where no contract follows.
  • Technical website logs – up to 12 months.

Once the period ends, data is deleted or anonymised. Data may be kept longer where needed to bring, pursue or defend legal claims.

7. Your rights

Under the GDPR you have the right to:

  • access your personal data;
  • have inaccurate data corrected;
  • have data erased (the “right to be forgotten”);
  • restrict processing;
  • object to processing based on legitimate interest;
  • data portability;
  • withdraw consent at any time (this does not affect the lawfulness of processing before withdrawal).

To exercise your rights, email us at info@royaltubs.lt. We reply within 1 month at the latest. Some rights are not absolute – the law may set conditions on how they are exercised.

8. Complaints

If you believe your data is being handled improperly, please contact us first – we will do our best to resolve it.

You also have the right to lodge a complaint with the supervisory authority:

9. Changes to this policy

This privacy policy may be updated. The current version is always published on this page together with the date it was updated.

10. Contact

For questions about how we handle personal data, get in touch: