Politique de confidentialité

Last updated: 2 July 2026

1. WHO CONTROLS YOUR DATA

This online store is operated under the Buffer Lab brand by:

VPG Technicians, MB
Company code: 305946986
Registered office: Partizanų g. 216-77, Kaunas, Lithuania
Email: [CUSTOMER SERVICE EMAIL]

VPG Technicians, MB is the data controller for the personal data described in this Privacy Policy. Shopify provides the ecommerce platform and also processes certain data as explained in its own privacy information.

2. DATA WE COLLECT

Depending on how you interact with the store, we may process:

- your name, email address, telephone number, billing and delivery address;
- order details, purchased products, returns and customer-service history;
- payment status and limited transaction information supplied by payment providers;
- account and preference information, if customer accounts are enabled;
- messages, forms, reviews or other communications you send;
- device, browser, IP address, cookie identifiers and website-use information;
- marketing preferences and consent records;
- fraud-prevention and security information.

We do not receive or store complete payment-card details. They are processed by authorised payment providers.

3. HOW WE RECEIVE DATA

We receive information:

- directly from you when you order, create an account, subscribe or contact us;
- automatically when you use the website, through cookies and similar technologies;
- from Shopify, payment providers, fulfilment partners, carriers and other providers involved in completing your order;
- from marketing or analytics providers where permitted by your choices and applicable law.

4. WHY WE USE DATA

We process personal data to:

- operate the website and provide requested services;
- accept payment, fulfil, deliver and manage orders;
- handle returns, refunds, complaints and customer support;
- communicate about orders and service changes;
- prevent fraud, misuse and security incidents;
- maintain accounting, tax and legal records;
- improve store performance and customer experience;
- send optional marketing where you have consented or where otherwise permitted by law;
- establish, exercise or defend legal claims.

5. LEGAL BASES

Under the GDPR, our legal bases may include:

- performance of a contract or steps requested before a contract;
- compliance with legal obligations;
- our legitimate interests in operating, securing and improving the store, where those interests do not override your rights;
- your consent, particularly for non-essential cookies and optional email marketing;
- establishment, exercise or defence of legal claims.

You may withdraw consent at any time without affecting processing carried out before withdrawal.

6. WHO RECEIVES DATA

We share only the information reasonably necessary with service providers such as:

- Shopify, which hosts and operates the ecommerce platform;
- payment and fraud-prevention providers;
- Selfnamed and relevant manufacturing or fulfilment partners;
- delivery carriers and logistics providers;
- email, customer-support and communication providers;
- analytics, advertising and cookie providers used according to your consent choices;
- accountants, legal advisers, insurers and public authorities where necessary or legally required.

These recipients act under their own legal responsibilities or process data on our instructions, depending on the service.

We do not sell personal data for money.

7. SHOPIFY

The store is hosted by Shopify. Shopify processes information required to provide the store, checkout, security and related services. Shopify may also act as an independent controller for certain processing. More information is available in Shopify’s consumer privacy policy at https://privacy.shopify.com/

8. INTERNATIONAL TRANSFERS

Some service providers may process data outside Lithuania or the European Economic Area. Where required, transfers are protected by an adequacy decision, approved Standard Contractual Clauses or another legally recognised safeguard.

9. DATA RETENTION

We keep personal data only for as long as reasonably necessary for the purpose for which it was collected, including order fulfilment, customer support, accounting, tax, fraud prevention, dispute handling and legal compliance.

Retention periods depend on the type of record and applicable legal requirements. When data is no longer required, it is deleted, anonymised or securely restricted.

10. COOKIES

The website uses necessary cookies for functions such as cart, checkout, security and preferences. With your consent, it may also use analytics or advertising cookies.

You can accept, decline or manage non-essential cookies through the cookie-consent controls. You may also adjust browser settings, although blocking necessary cookies may prevent parts of the store from working.

11. MARKETING

We send promotional emails only where permitted by law. You can unsubscribe through the link in any marketing email or contact us.

Order confirmations, delivery updates and essential service messages are not marketing communications.

12. YOUR RIGHTS

Subject to applicable conditions and exceptions, you may have the right to:

- access your personal data;
- correct inaccurate or incomplete data;
- request deletion;
- restrict processing;
- object to processing based on legitimate interests or direct marketing;
- receive certain data in a portable format;
- withdraw consent;
- lodge a complaint with a data-protection authority.

To exercise a right, contact [CUSTOMER SERVICE EMAIL]. We may need information to verify your identity. We will respond within the period required by applicable law.

You may complain to the Lithuanian State Data Protection Inspectorate or the competent authority in your country of residence.

13. CHILDREN

The store is not intended for children to make purchases independently. We do not knowingly collect personal data from children contrary to applicable law. A parent or guardian may contact us if they believe a child has provided personal data improperly.

14. SECURITY

We and our service providers use reasonable technical and organisational measures to protect personal data. No system can guarantee absolute security, so customers should also protect account credentials and contact us if they suspect unauthorised activity.

15. THIRD-PARTY LINKS

The website may contain links to third-party services. Their processing is governed by their own privacy policies, which we recommend reviewing.

16. CHANGES

We may update this Privacy Policy to reflect legal, technical or operational changes. The latest version and update date will be published on this page.

17. CONTACT

For privacy questions or requests:

[CUSTOMER SERVICE EMAIL]

VPG Technicians, MB
Company code: 305946986
Partizanų g. 216-77, Kaunas, Lithuania