Privacy Policy
This Privacy Policy explains how UAB “BALTIC CONSULTANCY AND TRADING” collects, uses, stores and protects personal data when you visit www.curtaincat.com, contact us or purchase products from our online store.
We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.
1. Data Controller
The controller of your personal data is:
UAB “BALTIC CONSULTANCY AND TRADING”
Company registration number: 302224530
VAT number: LT100007657316
Registered address: Taikos pr. 80-11, LT-51297 Kaunas, Lithuania
Email: info@curtaincat.com
For any questions concerning this Privacy Policy or the processing of your personal data, please contact us at the email address above.
2. What Personal Data We Collect
Depending on how you use curtaincat.com, we may collect the following categories of personal data:
Order and customer data
When you place an order, we may collect:
- your name and surname;
- email address;
- telephone number, where required for delivery;
- billing and delivery address;
- country;
- order details;
- payment status and transaction information;
- delivery information;
- information relating to returns, refunds, complaints or warranty claims.
Payment card or other payment credentials are generally processed directly by the relevant payment service provider and are not stored by CurtainCat unless otherwise specifically indicated.
Communications
If you contact us by email or through the Website, we may process:
- your name;
- email address;
- the content of your message;
- order details, where relevant;
- any other information you choose to provide.
Website and technical data
When you visit curtaincat.com, certain technical information may be processed, including:
- IP address;
- browser type and version;
- device type;
- operating system;
- pages visited;
- date and time of visits;
- referring website;
- interactions with the Website;
- cookie and similar technology identifiers.
Non-essential analytics or advertising technologies are activated only where required consent has been obtained.
3. Why We Process Your Personal Data
We process personal data only where there is a valid legal basis.
To process and fulfil your order
We use your personal data to:
- accept and process orders;
- receive and confirm payment;
- deliver products;
- communicate with you regarding your order;
- manage returns and refunds;
- handle product complaints and warranty matters.
Legal basis: processing is necessary for the performance of a contract or to take steps at your request before entering into a contract.
To comply with legal obligations
Certain information relating to orders, payments, invoices and accounting records must be retained to comply with applicable tax, accounting and consumer protection laws.
Legal basis: compliance with a legal obligation.
To respond to enquiries
We process information provided when you contact us in order to answer questions, provide customer support and resolve issues.
Legal basis: performance of a contract, steps taken before entering into a contract, or our legitimate interest in providing effective customer service, depending on the nature of the enquiry.
To maintain security and prevent misuse
Technical data may be processed to protect the Website, prevent fraud, identify security incidents and maintain the proper functioning of our systems.
Legal basis: our legitimate interest in ensuring the security and reliability of our Website and business.
Analytics and advertising
Where you give consent, we may use analytics and advertising technologies to understand how visitors use the Website, measure advertising performance and improve our services and marketing.
Legal basis: your consent.
You may withdraw your consent at any time through the cookie settings available on the Website. Withdrawal of consent does not affect processing carried out before consent was withdrawn.
4. Cookies and Similar Technologies
Curtaincat.com uses cookies and similar technologies.
Cookies are small files stored on your device that help websites function, remember preferences, analyse usage or support advertising.
We may use the following categories of cookies:
Strictly Necessary Cookies
These cookies are required for the operation of the online store, shopping cart, checkout, security and cookie preference management.
They do not require consent where they are strictly necessary to provide the service requested by the user.
Analytics Cookies
With your consent, analytics technologies may be used to understand how visitors use curtaincat.com, for example which pages are visited and how users interact with the Website.
The Website may use services such as Google Analytics 4, managed through Google Tag Manager.
Analytics tools may process information such as IP address, device information, website interactions and cookie identifiers.
Marketing Cookies
With your consent, marketing technologies may be used to measure advertising performance and, where applicable, show more relevant advertising.
Such technologies may include services provided by Meta Platforms or other advertising providers used by CurtainCat.
Managing Cookie Preferences
Non-essential analytics and marketing technologies will only be activated where required consent has been given.
You can accept, refuse or change your cookie preferences through the cookie settings available on curtaincat.com.
You may also delete cookies through your browser settings. Blocking strictly necessary cookies may affect the operation of certain Website functions, including the shopping cart or checkout.
The current cookies used, their purposes and applicable storage periods should be available through the Website's cookie preference tool.
5. Who We Share Personal Data With
We do not sell personal data.
Personal data may be shared only where necessary with trusted service providers and other recipients, including:
- payment service providers;
- banks and financial institutions involved in processing payments;
- courier and delivery companies;
- website hosting and IT service providers;
- website maintenance and security providers;
- accounting and professional service providers;
- analytics and advertising providers, where the required consent has been given;
- public authorities, courts or law enforcement bodies where disclosure is required by law.
Service providers may process personal data only to the extent necessary to provide their services and must protect personal data in accordance with applicable law.
6. International Data Transfers
Some technology providers used by curtaincat.com may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we seek to ensure that an appropriate legal mechanism is used, such as:
- an adequacy decision adopted by the European Commission;
- the EU–US Data Privacy Framework, where applicable;
- Standard Contractual Clauses approved by the European Commission; or
- another lawful transfer mechanism recognised under the GDPR.
Additional safeguards may be applied where necessary.
7. How Long We Keep Personal Data
We retain personal data only for as long as necessary for the purpose for which it was collected and as required by law.
In particular:
Order, invoice and accounting information is retained for the period required by applicable Lithuanian tax and accounting law. Certain accounting and VAT documentation may be required to be retained for up to 10 years.
Customer correspondence and enquiries are generally retained for up to 2 years after the matter has been resolved, unless a longer period is necessary for a legal claim, complaint or contractual matter.
Returns, complaints and warranty information may be retained for the period necessary to administer the matter and protect the legal rights of both the Customer and the Seller.
Cookie and analytics data is retained according to the relevant cookie or service settings. Where Google Analytics 4 is used, user-level and event-level data is retained according to the retention period configured for the service.
Consent records may be retained for as long as reasonably necessary to demonstrate that valid consent was obtained.
Data may be retained for a longer period where this is required by law or necessary for the establishment, exercise or defence of legal claims.
8. Your Rights
Under the GDPR, you may have the right to:
Right of access
You may request confirmation as to whether we process your personal data and obtain a copy of the data we hold about you.
Right to rectification
You may ask us to correct inaccurate or incomplete personal data.
Right to erasure
You may request deletion of your personal data where the conditions established by law are met.
This right is not absolute. For example, we may be required to retain certain information for tax, accounting, consumer protection or legal purposes.
Right to restriction of processing
In certain circumstances, you may request that the processing of your personal data be restricted.
Right to data portability
Where applicable, you may request personal data that you provided to us in a structured, commonly used and machine-readable format.
Right to object
Where processing is based on legitimate interests, you may object to the processing based on your particular circumstances.
You may object to direct marketing at any time.
Right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
9. How to Exercise Your Rights
To exercise any of your data protection rights, please contact:
Please clearly describe your request and provide sufficient information to allow us to identify the relevant data.
Where necessary, we may request additional information to verify your identity and protect personal data from unauthorised disclosure.
We will respond to valid requests without undue delay and normally within one month, as required by the GDPR.
10. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully or that your data protection rights have been infringed, you have the right to lodge a complaint with a data protection supervisory authority.
In Lithuania, the supervisory authority is:
State Data Protection Inspectorate
L. Sapiegos str. 17
LT-10312 Vilnius
Lithuania
Website: https://vdai.lrv.lt/
You may also have the right to contact the supervisory authority in the EU Member State where you normally reside or work.
11. Data Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
Access to personal data is limited to persons and service providers who require it for legitimate business purposes.
However, no internet-based system can guarantee absolute security.
12. Social Media
CurtainCat may operate accounts on social media platforms such as Facebook and Instagram.
When you interact with CurtainCat through a social media platform, the relevant platform may independently collect and process personal data in accordance with its own privacy policy.
We may process information that you provide through comments, messages or other interactions in order to communicate with you and respond to enquiries.
13. Links to Third-Party Websites
Curtaincat.com may contain links to websites operated by third parties.
We are not responsible for the privacy practices, security or content of third-party websites. We recommend reviewing the privacy policy of any external website before providing personal information.
14. Automated Decision-Making
CurtainCat does not use personal data to make decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
Advertising and analytics services may use automated technologies to measure audiences or personalise advertising where you have provided the required consent.
15. Changes to This Privacy Policy
We may update this Privacy Policy when necessary, for example to reflect changes in the Website, service providers, legal requirements or the way personal data is processed.
The current version of the Privacy Policy will always be available on www.curtaincat.com.
Where a change materially affects how we process personal data, we will provide appropriate notice where required by law.
16. Contact
For questions concerning privacy or personal data, please contact:
UAB “BALTIC CONSULTANCY AND TRADING”
Taikos pr. 80-11
LT-51297 Kaunas
Lithuania
Email: info@curtaincat.com