Reset Done
×

Privacy policy

PRIVACY POLICY

(Effective from November 1, 2025)

 

  1. GENERAL INFORMATION

This Privacy Policy sets out the principles governing the processing of personal data by Rewelly, UAB (hereinafter – the Company, we), when you use the website www.rewelly.com, purchase our products, create an account, or subscribe to our newsletters.

We ensure that all personal data are processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legislation.

 

  1. DATA CONTROLLER

Company name:

UAB „Rewelly“

Company code:

306194814

Address:

Savanoriu pr. 124B-104, LT-03153, Vilnius, Lithuania

Tel. numeris:

+370 614 00417

El. paštas:

info@rewelly.com

Svetainė:

www.rewelly.com 

 

  1. SCOPE OF APPLICATION 

This Privacy Policy applies to all natural and legal persons who use the website www.rewelly.com, contact the Company by email, phone, social media, or subscribe to newsletters.

The Company processes personal data only to the extent necessary to provide services, fulfil contractual obligations, and improve the user experience.

 

  1. PURPOSES AND LEGAL BASES FOR PERSONAL DATA PROCESSING

The Company processes personal data for the following purposes and on the following legal bases:

Purpose

Processed Data

Legal Basis

Order fulfilment and product delivery

Name, surname, email, phone number, address, company name, company code

Performance of a contract (GDPR Art. 6(1)(b))

Account management

Email, password, account details

Performance of a contract

Price list assignment for corporate clients

Client account details, company name

Legitimate interest

Customer service (inquiries, contact forms)

Name, email, phone number, inquiry text

Performance of a contract

Marketing (newsletters, SMS, offers)

Email, phone number

Consent (GDPR Art. 6(1)(a))

Website performance and analytics improvement

IP address, browser data, device information

Legitimate interest (GDPR Art. 6(1)(f))

Compliance with legal obligations (accounting, payments)

Financial data, invoices

Legal obligation (GDPR Art. 6(1)(c))

 

  1. SOURCES OF DATA

Personal data are collected from the following sources:

  • Directly from you: when you register, fill in order forms, subscribe to newsletters, or contact us.

  • Automatically: through cookies and analytical tools.

  • From third parties: partners such as payment or delivery service providers.

 

  1. NAUDOJAMI ĮRANKIAI IR TREČIOSIOS ŠALYS

The website uses the following tools and service providers:

Tool / Provider

Purpose

Data Location

Google Analytics 4 (GA4)

Website traffic and performance analytics 

ES/JAV

Google Tag Manager (GTM)

Tag management and tracking

ES/JAV

Google Search Console (GSC)

Search analytics

ES/JAV

Meta Pixel + CAPI

Marketing and advertising campaign analytics

ES/JAV

Omnisend

Email and SMS newsletters

ES

Prestashop

E-commerce platform

ES

Consent Mode V2

Cookie and consent management

ES

Some data may be transferred outside the European Economic Area (EEA) in accordance with the EU Standard Contractual Clauses (SCCs).




  1. COOKIES

We use essential, analytical, and marketing cookies. User can manage their cookie preferences via the cookie consent banner or through browser settings. Cookies can be declined using Consent Mode V2.

List of cookies used:

Cookie namie

Purpose

Expiration period

Type

_ga

Google Analytics – website traffic analysis

2 years

Analytical

_gat

Limits request rate (Google)

1 minute

Essential

_gid

Distinguishes website visitors (Google Analytics)

24 hours

Analytical

_fbp

Meta Pixel – ad personalization

3 months

Marketing

omnisendID

Identifies newsletter subscribers

1 years

Marketing

PrestaShopSessionID

Identifies user shopping cart

Session

Essential

 

  1. DATA RETENTION PERIODS

Data Type

Retention period

Order data

5 years after the last purchase

Account data

As long as the account remains active

Marketing data

Until consent is withdrawn

Analytical data

According to the cookie lifetime

Financial data

In accordance with accounting laws (10 years)

 

  1. DATA PROCESSING FOR CORPORATE CLIENTS

When a legal entity (company) registers, the following additional data are processed:

  • Company name,

  • Company code,

  • VAT payer code,

  • Contact details of the responsible person.

These data are used for assigning price lists, issuing invoices, and fulfilling contractual obligations.

The contact person’s data of a legal entity (name, email, phone number) are considered personal data and are processed in accordance with this Privacy Policy.

 

  1. DATA SECURITY

The Company applies technical and organizational measures to protect personal data, including:

  • SSL certificates,

  • Access control,

  • Regular data backups,

  • Data encryption and protection against unauthorized access.

Only authorized employees and service providers have access to personal data.

 

  1. DATA SUBJECT RIGHTS

The data subject has the right to:

  • Receive information about the processing of their personal data.

  • Request the correction or deletion of their data.

  • Withdraw consent for marketing communications.

  • Restrict the processing of their personal data.

  • Lodge a complaint with the State Data Protection Inspectorate (www.vdai.lrv.lt)

Requests regarding the processing of personal data can be submitted by email: duomenuapsauga@rewelly.com

 

  1. CHANGE OF POLICY

This Privacy Policy may be updated to reflect technological or legal developments. The latest version will always be available on the website www.rewelly.com