Privacy strategy

Last updated: September 4, 2026

This Privacy Policy describes how UAB "Hetora" (hereinafter referred to as "We", "the Company" or "the Data Controller") collects, uses, stores and processes your personal data when you visit and use the martlet.lt website and online store, purchase our products, use our services or otherwise contact us.

The Martlet online store operates on the Shopify platform. Shopify provides the technological infrastructure that enables us to offer e-commerce services.

By using our website and services, you acknowledge that you have read and understood this Privacy Policy. If you do not agree with this Privacy Policy, please refrain from using our website or services.

Data Controller

The controller of your personal data is:

UAB "Hetora" Jurgio Dobkevičiaus g. 8, LT-11342 Vilnius, Lithuania Email: info@martlet.lt Phone: +370 601 09995

We process your personal data in accordance with applicable European Union and Republic of Lithuania laws, including the General Data Protection Regulation (EU) 2016/679 (GDPR).

What Personal Data Do We Collect?

Depending on how you use our services, we may collect and process the following categories of personal data:

Contact information: first name, last name, delivery and billing addresses, telephone number and email address;

Payment and financial information: payment method, payment transaction details, payment confirmation and other payment-related information;

Order and transaction information: information about purchased, returned, exchanged or cancelled products and order history;

Account information: username, password and account settings, if you create an account;

Communication information: information you provide when contacting our customer service team;

Device information: IP address, information about the device you use, your browser and network connection;

Usage information: information about how you use our website and services, including pages visited and interactions with the website;

Other information that you voluntarily provide to us when using our services.

Payment card details are processed by the relevant payment service providers during payment transactions. We do not store your full payment card number unless such storage is necessary to provide our services.

Where Do We Obtain Your Personal Data?

We may obtain your personal data from the following sources:

Directly from you, when you place an order, create an account, complete a contact form, contact us or otherwise provide information;

Automatically, when you use our website, including through cookies and similar technologies;

From our service providers, who process data on our behalf;

From payment, delivery or other service partners, where necessary to fulfil your order;

From other lawful sources, where permitted by applicable law.

For What Purposes Do We Use Your Personal Data?

We use your personal data for the following purposes:

Order Fulfilment

We use your data to:

Accept and manage your orders;
Process payments;
Deliver products;
Contact you regarding your order;
Manage product returns and exchanges;
Issue accounting documents;
Resolve order-related enquiries.

In this case, the legal basis for processing your personal data is the performance of a contract or taking steps at your request prior to entering into a contract (Article 6(1)(b) of the GDPR).

Customer Service

We use your data to respond to your enquiries, provide customer support and resolve issues related to our products or services.

The legal basis for this processing is the performance of a contract or our legitimate interest in properly managing customer service.

Website Operation and Improvement

We may use your data to ensure the security and technical operation of our website, analyse website usage and improve its functionality and user experience.

Where personal data is processed using non-essential cookies or similar technologies, such processing is based on your consent when such consent is required.

Marketing and Advertising

Where you have given your consent or in other circumstances permitted by law, we may use your data to send newsletters, offers, promotional information and other direct marketing communications.

You may opt out of receiving marketing communications at any time by clicking the unsubscribe link in our newsletter or by contacting us at info@martlet.lt.

Security and Fraud Prevention

We may use your data to detect and prevent fraud, unlawful activities, misuse of our services and other threats to our website, customers or the Company.

Compliance with Legal Obligations

We may process your data where necessary to comply with legal and accounting requirements, respond to lawful requests from public authorities, protect our rights or participate in legal proceedings.

Who May We Share Your Personal Data With?

Your personal data may only be shared to the extent necessary to achieve the relevant purpose.

We may share your data with:

Shopify, which provides the technological platform for our online store;
Payment service providers, including Montonio;
Courier and delivery service providers, to enable us to deliver your orders;
IT, cloud hosting, website maintenance and technical service providers;
Accounting, legal and other professional service providers, where necessary;
Marketing and analytics service providers, where their use is lawful and, where required, your consent has been obtained;
Public authorities and law enforcement agencies, where such disclosure is required or provided for by law.

Recipients of your data may process your personal data only to the extent necessary to provide the relevant services or achieve lawful purposes.

Shopify Platform

Our online store operates on the Shopify platform. Shopify collects and processes certain data related to your use of our online store in order to provide and improve its services.

Shopify may also process data for its own lawful purposes in accordance with its Privacy Policy.

For more information about Shopify's privacy practices, please refer to Shopify's Privacy Policy:

https://www.shopify.com/legal/privacy

If Shopify processes your personal data as an independent data controller for its own purposes, you may exercise your rights regarding such data processing directly with Shopify.

Cookies

Our website uses cookies and similar technologies.

A cookie is a small text file stored on your device when you visit a website.

Cookies may be used to:

Ensure the functionality of the website;
Enable the shopping cart and other essential features to function;
Remember your preferences;
Analyse website traffic and usage;
Improve website performance;
Support marketing and personalised advertising purposes, where your consent is required.

Essential cookies may be used without separate consent where they are necessary for the operation of the website. Other cookies are used in accordance with applicable laws and, where required, only after obtaining your consent.

You can manage your cookie preferences using the cookie preference tool available on our website or through your browser settings.

Security of Your Personal Data

We implement appropriate technical and organisational measures to protect your personal data against unlawful use, loss, destruction, alteration or unauthorised disclosure.

However, no information transmission or storage system can be considered completely secure. Therefore, we cannot guarantee the absolute security of your data.

How Long Do We Retain Your Personal Data?

We retain your personal data for no longer than is necessary to fulfil the purposes for which it was collected, or for as long as required by applicable law.

The retention period depends on the nature of the data, the purpose of its processing and applicable legal requirements.

Data relating to orders, payments and accounting documents is retained for as long as required by applicable law.

Where personal data is processed on the basis of your consent, we may continue processing it until you withdraw your consent, unless another lawful basis for processing exists.

Your Rights

Under the GDPR, depending on the specific circumstances, you have the right to:

Receive information about the processing of your personal data;
Access your personal data;
Request the correction of inaccurate data or completion of incomplete data;
Request the erasure of your personal data where the conditions set out in the GDPR are met;
Request the restriction of the processing of your personal data;
Object to certain types of personal data processing;
Data portability, where the conditions set out in the GDPR are met;
Withdraw your consent at any time where processing is based on consent.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Certain rights are not absolute and may be restricted in circumstances provided for by the GDPR or other applicable laws.

How Can You Exercise Your Rights?

To exercise your rights or obtain further information about the processing of your personal data, please contact us:

Email: info@martlet.lt Address: Jurgio Dobkevičiaus g. 8, LT-11342 Vilnius, Lithuania

We will respond to your request without undue delay and, as provided for by the GDPR, generally no later than one month after receiving your request.

If your request is complex or we receive a large number of requests, this period may be extended by a further two months. We will inform you of any such extension.

To protect your data, we may request additional information necessary to verify your identity before fulfilling certain requests.

Complaints

If you believe that your personal data is being processed improperly or that your rights have been violated, you may first contact us at info@martlet.lt so that we can investigate the matter.

You also have the right to lodge a complaint with a supervisory authority.

In Lithuania, the authority responsible for supervising personal data protection is:

Valstybinė duomenų apsaugos inspekcija (VDAI) (State Data Protection Inspectorate of Lithuania)

L. Sapiegos g. 17, LT-10312 Vilnius Phone: +370 5 271 2804 Email: ada@ada.lt https://vdai.lrv.lt/

International Transfers of Personal Data

As we use international service providers, including Shopify, your personal data may, in certain circumstances, be transferred, stored or processed outside the Republic of Lithuania or the European Economic Area.

Where such transfers take place, we take measures to ensure that they comply with the requirements of Chapter V of the GDPR and, where necessary, that lawful data transfer mechanisms are applied.

Third-Party Websites

Our website may contain links to third-party websites or services.

We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the privacy policy of each third party before providing them with your personal data.

Children's Data

Our services are not intended for children, and we do not knowingly collect children's personal data without a lawful basis for doing so.

If you believe that a child has provided us with their personal data, please contact us at info@martlet.lt. We will assess the situation and, where applicable, take steps to delete the data.

Changes to This Privacy Policy

We may periodically update this Privacy Policy to reflect changes in our business operations, technologies, services, legal requirements or data processing practices.

The updated version of this Privacy Policy will be published on our website, together with the date of its latest revision.

Last updated: September 4, 2026

Contact Information

If you have any questions about this Privacy Policy, our privacy practices or wish to exercise your rights as a data subject, please contact us: