Privacy policy
Last updated: January 22, 2026
This Privacy Policy describes how SUNBEE collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from our website.
1. Data Controller
The controller of your personal data is:
Name: Vilija Golubevaitė
Individual Activity Certificate No.: 1484704
Email: info@sunbee.lt
Country of operation: Lithuania, Vilnius
2. Personal Data We Collect
When you use our website, we may collect the following personal data:
a) Information you provide directly
-
Name and surname
-
Email address
-
Phone number
-
Shipping and billing address
-
Order details and correspondence
b) Automatically collected information
-
IP address
-
Device and browser information
-
Pages visited and actions taken on the website
-
Cookies and similar technologies
c) Payment information
Payments are processed by Paysera.
We do not store or have access to your full payment card or bank details.
3. Purposes of Data Processing
We process your personal data for the following purposes:
-
to process and fulfill orders;
-
to deliver goods and manage returns;
-
to communicate with you regarding your order;
-
to comply with legal obligations;
-
to improve our website and services;
-
to conduct analytics and statistics;
-
to display personalized advertising (with your consent);
-
to send marketing communications (only with your consent).
4. Legal Basis for Processing (GDPR)
Your personal data is processed based on:
-
performance of a contract (order fulfillment);
-
legal obligation (accounting, tax);
-
legitimate interest (website improvement, fraud prevention);
-
your consent (marketing, cookies, analytics, advertising).
5. Third-Party Service Providers
We may share your personal data with trusted third parties only to the extent necessary:
-
Shopify – e-commerce platform
-
Paysera – payment processing
-
NOparcels – shipping and logistics integration
-
Courier companies (Omniva, DPD, LP Express, Venipak, etc.)
-
Google Analytics – website analytics
-
Meta Platforms (Facebook & Instagram) – advertising and remarketing
Advertising and Tracking Technologies (Meta)
We use Meta Pixel and Meta Conversions API provided by Meta Platforms Ireland Ltd. to analyze website usage, measure advertising performance, and display personalized advertisements.
When users consent to marketing cookies, certain data such as IP address, device information, browsing behavior, and hashed identifiers (e.g., email address or phone number) may be shared with Meta.
Meta may combine this information with data associated with users’ Facebook or Instagram accounts.
For certain advertising measurement activities, SUNBEE and Meta Platforms Ireland Ltd. may act as joint controllers under Article 26 GDPR.
Some of these providers may process data outside the EU. In such cases, data transfers are protected using appropriate safeguards in accordance with GDPR (e.g., Standard Contractual Clauses).
6. Cookies Policy
Our website uses cookies and similar technologies to ensure proper functionality, improve user experience, analyze traffic, and deliver personalized ads.
Types of cookies used:
-
Necessary cookies – required for website functionality
-
Analytics cookies – used to analyze website usage (Google Analytics)
-
Marketing cookies – used for advertising and remarketing (Meta)
Marketing and analytics cookies are activated only after the user provides consent through the cookie banner.
You can manage or withdraw your cookie consent at any time through the cookie banner or your browser settings.
7. Marketing Communications
We may send you marketing emails only if you have given explicit consent (e.g., newsletter subscription).
You may withdraw your consent at any time by:
-
clicking the “unsubscribe” link in any email;
-
contacting us at info@sunbee.lt.
8. Data Retention
We retain personal data only as long as necessary:
-
for order processing and customer support;
-
as required by accounting and tax laws;
-
until consent is withdrawn (for marketing purposes).
9. Your Rights Under GDPR
You have the right to:
-
access your personal data;
-
request correction of inaccurate data;
-
request deletion (“right to be forgotten”);
-
restrict or object to data processing;
-
data portability;
-
withdraw consent at any time;
-
lodge a complaint with the supervisory authority.
In Lithuania, the supervisory authority is:
State Data Protection Inspectorate (VDAI)
10. Data Security
We apply appropriate technical and organizational measures to protect your personal data from unauthorized access, loss, or misuse.
11. Children’s Data
Our services are not intended for children under 14 years of age.
We do not knowingly collect personal data from children.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
The latest version will always be available on our website.
13. Contact Us
If you have questions about this Privacy Policy or your personal data, contact us: