Privacy policy

General Provisions

This Privacy Policy explains how UAB "Desėja" (hereinafter referred to as "Desėja", "we", "our", or "us") collects, uses, stores, and processes your personal data when you use our website and online store www.deseja.lt, purchase our products, book our services (including appointments made through the Altegio platform), create a customer account, subscribe to our newsletter, or otherwise communicate with us.

The terms of this Privacy Policy apply each time you access our content and/or services, regardless of the device you use (such as a computer, mobile phone, tablet, smart TV, or any other device). The collection, processing, and storage of your personal data are governed by this Privacy Policy, the General Data Protection Regulation (EU) 2016/679 ("GDPR"), and other applicable laws and regulations.

By providing your personal data, you acknowledge and agree that Desėja will collect, process, and store your personal data for the purposes, by the means, and in accordance with the procedures set out in this Privacy Policy and applicable legislation. When processing personal data, we comply with the General Data Protection Regulation (GDPR), other directly applicable data protection laws, and the guidance issued by the competent supervisory authorities. We implement appropriate technical and organizational measures to protect the personal data we collect from website visitors against accidental loss, unauthorized access, misuse, disclosure, alteration, or destruction.

It is important that you read this Privacy Policy carefully, as each time you access or use our website, you acknowledge that you have read, understood, and agree to the terms set out in this Privacy Policy. If you do not agree with these terms, please refrain from accessing our website or using our content and/or services.

Individuals under the age of 16 may not submit any personal data through our website. If you are under the age of 16, you must obtain the consent of your parent(s) or legal guardian(s) before providing any personal information through our website.

Collection, Processing and Storage of Personal Data

Desėja processes personal data in accordance with the following fundamental principles:

• Personal data is collected for specified, explicit, and legitimate purposes.
• Personal data is processed lawfully, fairly, and transparently.
• Personal data is kept accurate and, where necessary, up to date.
• Personal data is retained only for as long as necessary to achieve the purposes for which it was collected.
• Personal data is processed only by employees who are authorized to access such information.
• All information relating to processed personal data is treated as confidential.
• Personal data is protected against accidental loss, unauthorized access, misuse, alteration, or disclosure. We have implemented appropriate physical, technical, and organizational measures to safeguard all information collected in connection with the provision of our services.

Desėja respects every customer's right to privacy. We collect and process personal data, including but not limited to your first name, last name, telephone number, email address, and any other information you provide in contracts, registration forms, or through other communications with us, for the following purposes:

• to process and fulfil product orders;
• to issue financial documents, including invoices;
• to resolve issues related to product supply or delivery;
• to perform our contractual obligations;
• subject to your consent, to send you marketing communications, including promotional offers, newsletters, publications, and information about events, to provide personalized content on social media platforms, and to remember information relevant to your interests and preferences;
• to improve the functionality and performance of our website, making it easier for you to find the products, services, and information you are looking for.

In processing and storing your personal data, Desėja implements appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, access, or any other unlawful processing.

Online Store Platform

Our online store is powered by Shopify Inc. Shopify Inc. provides the e-commerce infrastructure necessary for order processing, customer account management, website functionality, and security.

When you use our website, certain personal data may be processed through the Shopify platform in accordance with Shopify's Privacy Policy and applicable data protection laws.

You can read Shopify's Privacy Policy here.

Marketing through Meta Lead Ads and Messaging

We advertise our products and services on Meta platforms (Facebook and Instagram) using Lead Ads instant forms and/or message-based advertisements (such as Messenger and Instagram Direct).

If you choose "Learn More", submit your contact details, or consent to receive marketing communications, we may receive the personal data you provide (such as your first name, last name, email address, telephone number, or selected topic of interest) from Meta Platforms Ireland Limited.

We use this information to:

• send newsletters, promotional offers, and other marketing communications via email, SMS, or other communication channels you have selected;
• personalize marketing communications;
• create and manage audience segments;
• measure and improve the effectiveness of our advertising campaigns.

The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).

For compliance purposes, we maintain records of your consent, including the date, source, and version of the consent form.

Meta Business Tools (Meta Pixel and/or Conversions API)

Subject to your consent to the use of marketing cookies, our website may use Meta Pixel and/or the Meta Conversions API to:

• measure advertising performance and conversions;
• improve the effectiveness of our advertising campaigns;
• create custom and lookalike audiences;
• display more relevant advertisements on Meta platforms.

These activities are carried out in accordance with the Meta Business Tools Terms. Where applicable, certain processing activities may also be subject to the applicable Joint Controller Addendum with Meta Platforms Ireland Limited.

Email Marketing Service Provider (Omnisend)

We may use Omnisend, an email marketing platform, to send newsletters, promotional campaigns, and automated marketing communications.

Omnisend acts as our data processor, and personal data is processed in accordance with the Data Processing Agreement (DPA) concluded between Desėja and Omnisend.

Every marketing email contains an unsubscribe link, and you may withdraw your consent to receive marketing communications at any time.

Service Bookings through Third-Party Service Providers

To manage bookings for the services provided by UAB "Desėja", we use the Altegio appointment management platform, which acts as our data processor.

When booking an appointment through Altegio, you may provide the following personal data:

• first and last name;
• telephone number;
• email address (if provided);
• selected service;
• preferred appointment date and time;
• selected specialist (where applicable);
• notes or any other information necessary for your booking.

We process this personal data for the following purposes:

• to manage service bookings;
• to confirm appointments;
• to send appointment reminders;
• to notify you of any changes to or cancellations of your appointment;
• to provide the requested service;
• to fulfil our internal administrative, accounting, and legal obligations;
• to ensure high-quality customer service.

If you choose to receive appointment reminders by SMS, email, or telephone, such communications are considered an integral part of the provision of the requested service and do not constitute direct marketing.

Altegio processes personal data solely on behalf of Desėja, in accordance with the applicable Data Processing Agreement (DPA), and only to the extent necessary for appointment management and the provision of our services.

For more information about how Altegio processes personal data, please refer to the Altegio Privacy Policy here.

Categories and Sources of Personal Data

We collect only the personal data that you voluntarily provide to us (for example, through forms, emails, messages, or other communications) and technical data generated by your device, provided that you have given your consent where required. Such technical data may include cookie identifiers, device or event identifiers, information about your interactions with advertisements or forms, and other similar technical information.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or for the period required by the applicable laws and regulations of the Republic of Lithuania and the European Union.

Where personal data is processed on the basis of your consent, it will be retained until you withdraw your consent, unless a longer retention period is required by applicable law.

Profiling and Automated Decision-Making

We may carry out limited profiling activities (for example, audience segmentation based on your interactions with advertisements or newsletters) to provide you with more relevant communications and improve the effectiveness of our marketing activities.

We do not make decisions based solely on automated processing that produce legal effects or similarly significant consequences for you. You have the right to object to profiling and/or withdraw your consent at any time, where such processing is based on your consent.

Disclosure of Personal Data to Third Parties

Your personal data may be disclosed to third parties in the following circumstances:

• when it is necessary to share your personal data with our business partners or service providers in order to fulfil your requests or provide the services you have chosen;
• where disclosure is necessary for our legitimate business, contractual, or commercial purposes and is permitted or required under the applicable laws of the Republic of Lithuania or the European Union.

Where necessary, your personal data may also be transferred outside the Republic of Lithuania to our trusted business partners and service providers.

Personal data may be shared with:

• Meta Platforms Ireland Limited, where we use Meta Business Tools or Meta Lead Ads;
• Omnisend, acting as our data processor, for the delivery of newsletters and marketing communications in accordance with our Data Processing Agreement (DPA).

Where personal data is transferred outside the European Economic Area (EEA) (for example, to Meta Platforms, Inc. in the United States), such transfers are carried out using appropriate safeguards in accordance with the GDPR, including the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs), where applicable.

In the cases provided for by the applicable laws of the Republic of Lithuania, we may disclose information relating to your purchases, services received, visits to our website, or other information concerning you where such disclosure is necessary:

• to comply with applicable laws, regulations, or legal procedures;
• where we reasonably believe that disclosure is necessary to protect or defend our legal rights;
• to protect your safety or the safety of other individuals;
• to prevent, investigate, or detect criminal offences or fraud;
• in response to lawful requests from public authorities or other competent governmental bodies.

Furthermore, where you fail to fulfil your contractual obligations or perform them improperly, and such failure may cause us financial loss, we may disclose the necessary personal data to courts, law enforcement authorities, insurance companies, or debt collection agencies for the purpose of protecting our legitimate interests and enforcing our legal rights.

Your personal data may be shared with the following data processors or business partners where necessary for the provision of our services:

• Shopify Inc. – for operating our online store platform;
• Altegio – for appointment booking and service management;
• Omnisend – for email marketing and marketing automation;
• Meta Platforms Ireland Limited – for advertising campaigns and Meta Business Tools;
• Google LLC – for analytics and advertising services;
• payment service providers;
• shipping and delivery partners;
• accounting service providers;
• IT service providers.

Registration Requirements

When completing a registration form, you are required to provide complete, accurate, and up-to-date information about yourself.

If you submit inaccurate, false, misleading, or incomplete information, Desėja reserves the right to refuse or cancel your registration and, where appropriate, delete the related personal data in accordance with applicable laws.

Updating or Correcting Personal Data

You have the right to update, correct, or amend the personal information you have provided at any time.

If you wish to update or correct your personal data, please contact us at sugardep@gmail.com or by telephone at +370 676 52856.

Cookies and Other Tracking Technologies

On the website www.deseja.lt, we use cookies and other similar technologies (hereinafter collectively referred to as “cookies”) to ensure the proper functioning of the website and online store, remember visitors’ preferences, analyse the use of the website and, where we have obtained your consent, carry out marketing activities and measure their effectiveness.

Cookies are small text files that may be stored on your computer, mobile phone, tablet or other device when you visit a website. They allow the website to remember certain information about your visit and your preferences.

In addition to cookies, the website may use other similar technologies, including pixels, tags, event identifiers and server-side data transmission technologies. Therefore, where appropriate, references to cookies in this section also include similar tracking technologies.

Categories of Cookies

Strictly Necessary Cookies. These cookies are necessary for the proper and secure functioning of the website and online store. They may be used to enable the shopping cart, checkout, security, privacy preferences and other functions explicitly requested by the visitor. Where a cookie is strictly necessary for the provision of an electronic service requested by the user, separate consent for its use is not required.

Functional / Personalisation Cookies. These cookies help remember visitors’ preferences, such as country, region or other settings, in order to make the website more convenient to use.

Analytics Cookies. These cookies help us understand how visitors use the website, identify website sessions, assess website performance and improve the user experience. Analytics cookies that require consent under applicable law are used only after we have obtained your consent.

Marketing Cookies and Technologies. These are used to measure the effectiveness of advertising and marketing activities, analyse interactions with advertisements, create audiences and display more relevant advertising. Such non-essential technologies are used with your consent where required by applicable law.

Cookies Identified on Our Website

During our review of the website, the following cookies were identified. The specific cookies used for an individual visitor may vary depending on the visitor’s choices, the website features used and technical settings.

The list of cookies may change when the website, online store platform, applications or third-party integrations are updated. We therefore periodically review the technologies used on our website and, where necessary, update the information provided in this section.

Shopify

Our online store operates using the Shopify platform. Shopify uses cookies and other technologies necessary for the operation of the online store, shopping cart, checkout, security, localisation, analytics and, where the required consent has been obtained, marketing functions.

Further information about cookies used by Shopify is available in the Shopify Cookie Policy.

Omnisend

We use Omnisend for newsletters, marketing automation and related functions.

Omnisend tracking technologies may be used to identify a visitor’s session or contact, determine behaviour on the website, associate shopping cart information with a visitor’s session, perform marketing automations and provide certain subscription and registration form functions.

Omnisend distinguishes between strictly necessary cookies and tracking cookies. Tracking cookies may be used to identify contacts, monitor behaviour and perform marketing automations.

When Shopify’s integrated cookie consent mechanism is used, visitors’ choices may be communicated to Omnisend through the Shopify Customer Privacy API.

Meta Pixel and Other Meta Technologies

Where we have obtained the required consent, we may use advertising and conversion measurement technologies provided by Meta Platforms Ireland Limited, including Meta Pixel and, where applicable, server-side conversion technologies.

These technologies may be used to assess advertising effectiveness, analyse interactions with advertisements and the website, measure conversions, create audiences and display more relevant advertising.

Meta Pixel enables us to evaluate visitors’ activities on the website, including pages visited and certain actions related to shopping.

Please note that not all marketing technologies operate as traditional cookies stored in your browser. Depending on the integrations used and your privacy choices, certain data may also be processed using server-side technologies.

Consent and Management of Cookie Preferences

When you first visit our website, you are presented with a cookie and privacy preferences banner.

You may:

• Accept all cookies;
• Reject all non-essential cookies;
• select individual cookie categories and click “Save selected preferences”.

Strictly necessary cookies cannot be disabled through our cookie preference interface to the extent that they are required for the proper functioning of the website, online store or a function explicitly requested by you.

Analytics, marketing and other non-essential cookies and similar technologies for which consent is required under applicable law are used only after obtaining your consent.

Simply using the website or continuing to browse does not constitute consent to the use of non-essential cookies.

You may change your preferences or withdraw your previously given consent at any time by using the Cookie Preferences function available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

You may also delete or restrict cookies through your internet browser settings. Please note that disabling certain strictly necessary cookies may prevent some functions of the website or online store from operating properly.

Third-Party Services

In certain cases, cookies or other technologies may be used by service providers engaged by us, including Shopify, Meta and Omnisend. The processing of personal data by these service providers may also be subject to their respective privacy and cookie policies.

Further information about recipients of personal data, international data transfers, data retention periods and your rights as a data subject is provided in other sections of this Privacy Policy.

Social Media and Third-Party Services

Any information you provide to us through social media platforms (including messages, the use of "Like" or "Follow" features, comments, or other interactions) is also subject to the privacy policies of the respective social media platform operators.

Our website may contain links to our profiles on social media platforms and to third-party service providers that support the operation of our website, marketing activities, customer communications, and service delivery.

We currently use the following third-party services:

• Meta (Facebook and Instagram) – Privacy Policy available here;
• Shopify Inc. – Privacy Policy available here;
• Omnisend – Privacy Policy available here;
• Altegio – Privacy Policy available here;
• Google LLC – Privacy Policy available here.

We recommend that you review the privacy policies of these third-party providers to understand how they collect, use, and protect your personal data. If you have any questions regarding their data processing practices, we encourage you to contact the relevant service provider directly.

Amendments to this Privacy Policy and Final Provisions

Desėja reserves the right to amend or update this Privacy Policy, in whole or in part, at any time. Any changes will be published on our website at www.deseja.lt and will become effective upon publication, unless otherwise stated.

Your continued use of our website or services following the publication of any changes constitutes your acceptance of the revised Privacy Policy.

Any disputes arising in connection with this Privacy Policy shall first be resolved through mutual negotiations. If no agreement can be reached, disputes shall be settled in accordance with the laws of the Republic of Lithuania.

If you have any questions, comments, or suggestions regarding this Privacy Policy or the processing of your personal data, please contact us at sugardep@gmail.com.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

• access your personal data;
• request the rectification or completion of inaccurate or incomplete personal data;
• request the erasure of your personal data ("the right to be forgotten");
• request the restriction of the processing of your personal data;
• receive your personal data in a structured, commonly used, and machine-readable format and request its transfer to another data controller (the right to data portability);
• withdraw your consent at any time, where processing is based on your consent, without affecting the lawfulness of processing carried out before the withdrawal;
• object to the processing of your personal data where such processing is based on our legitimate interests;
• lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania or another competent data protection supervisory authority.

Data Protection Contact Information

Data Controller: UAB "Desėja"

Company Registration Number: 303575863

Registered Office Address: Giedraičių St. 46-29, LT-09301 Vilnius, Lithuania

Telephone: +370 676 52856

Email: sugardep@gmail.com

VAT Number: LT100009391419

Last Updated: 29 July 2026