Privacy policy
1. General provisions
1.1. This privacy policy sets out the principles for the collection, processing and storage of personal data. Personal data is processed and stored by MB BIG BOI (company code 307476275), registered at M. K. Čiurlionio g. 19, 03101 Vilnius, Lithuania, which is the controller of the personal data (hereinafter "the controller").
1.2. A data subject means the customer or any other natural person whose personal data is processed by the controller.
1.3. A customer means anyone who purchases goods on the controller's website, skudraclothing.eu.
1.4. The controller observes the principles of personal data processing laid down in legislation and processes personal data lawfully, fairly and securely.
1.5. Questions about this policy, or requests to exercise the rights in section 5, should be sent to help@skudraclothing.eu.
2. Collection, processing and storage of personal data
2.1. The personal data collected, processed and stored by the controller is collected electronically, via the website and by e-mail.
2.2. By sharing their personal data, the data subject grants the controller the right to collect, organise, use and administer that data for the purposes defined in this privacy policy.
2.3. The data subject is responsible for the accuracy and completeness of the data they submit, and must notify the controller of any changes. Knowingly submitting false data is a breach of this policy.
2.4. The controller is not liable for damage caused to the data subject or a third party as a result of the submission of false data by the data subject.
3. What personal data is processed
3.1. The controller may process the following personal data:
- Given name and surname
- E-mail address
- Telephone number
- Delivery address and billing address
- Order history and order contents
- Correspondence with customer support
- IP address, device and browser information collected via cookies
3.2. The controller does not collect or store payment card numbers or bank account credentials. Card and bank details are entered directly into the secure payment environment of Maksekeskus AS and are never accessible to the controller.
3.3. In addition, the controller has the right to collect data about a customer that is available in public registers.
4. Legal basis, purpose and retention
4.1. The legal bases for processing are points (a), (b), (c) and (f) of Article 6(1) of the General Data Protection Regulation:
- (a) the data subject has given consent for one or more specific purposes;
- (b) processing is necessary for the performance of a contract to which the data subject is a party;
- (c) processing is necessary for compliance with a legal obligation;
- (f) processing is necessary for the purposes of the legitimate interests pursued by the controller, except where overridden by the interests or fundamental rights of the data subject.
4.2. Personal data is processed for the following purposes and retained for the following periods:
| Purpose | Legal basis | Retention period |
|---|---|---|
| Processing and delivering orders | (b) contract | 3 years from the date of the order |
| Financial activities and accounting | (c) legal obligation | 10 years, as required by Lithuanian accounting legislation |
| Handling returns and warranty claims | (b), (c) | 3 years from the date of the order |
| Customer management and support | (b), (f) | 3 years from last contact |
| Security and fraud prevention | (f) legitimate interest | 1 year |
| Direct marketing / newsletter | (a) consent | Until consent is withdrawn |
4.3. In no case does the controller store personal data for longer than is necessary for the purpose for which it was collected, or longer than required by law.
5. Rights of the data subject
The data subject has the right to:
5.1. Access their personal data and obtain a copy of it.
5.2. Obtain information about how their personal data is processed.
5.3. Have inaccurate personal data corrected.
5.4. Request erasure of their personal data ("right to be forgotten"). To request deletion, e-mail help@skudraclothing.eu from the address used to place the order. Data will be deleted within one month, except where the controller is required by law to retain it — in particular accounting records, which must be kept for 10 years.
5.5. Request restriction of processing, and object to processing carried out on the basis of legitimate interest.
5.6. Receive their personal data in a structured, commonly used, machine-readable format (data portability).
5.7. Withdraw consent at any time, where processing is based on consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.
5.8. To exercise any of these rights, contact help@skudraclothing.eu. The controller will respond within one month.
5.9. To protect their rights, the data subject may lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, 10312 Vilnius — vdai.lrv.lt.
6. Sharing personal data with third parties
6.1. The controller has the right to share personal data with third parties who process data on the controller's behalf, namely:
- Maksekeskus AS — payments in this online store are processed using the makecommerce.lt platform, operated by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, reg. no. 12268475). Your personal information necessary for executing and confirming the payment will therefore be transferred to Maksekeskus AS.
- Shopify International Ltd. — the e-commerce platform hosting and operating the online store.
- Transport and courier companies — LP Express, Omniva, Venipak and DPD — in order to deliver the goods.
- Our accounting service provider — for bookkeeping and tax purposes.
6.2. The controller remains responsible for the processing of personal data.
6.3. Personal data is not sold, rented or otherwise transferred to third parties for their own marketing purposes.
6.4. International transfers. Where goods are shipped outside the European Economic Area, the delivery address and recipient details are transferred to the carrier and, where required, to the customs authorities of the destination country, in order to perform the contract of sale. Where personal data is transferred outside the EEA by our service providers, such transfers rely on recognised safeguards including the European Commission's Standard Contractual Clauses.
7. Security
7.1. The controller implements appropriate organisational and technical measures to protect personal data against accidental or unlawful destruction, alteration, disclosure and any other unlawful processing.
7.2. The online store operates over an encrypted HTTPS connection.
8. Cookies
8.1. The online store uses cookies to ensure the functioning of the site, remember the contents of the shopping cart, and analyse traffic.
8.2. The data subject may block or delete cookies via their browser settings. Blocking essential cookies may prevent parts of the store — including checkout — from working.
9. Final provisions
9.1. These data protection terms have been prepared in compliance with Regulation (EU) 2016/679 (General Data Protection Regulation), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable legislation of the Republic of Lithuania and the European Union.
9.2. The controller has the right to amend this privacy policy in part or in full. Data subjects will be notified of amendments via skudraclothing.eu.
Last updated: 1 August 2026