ПОЛИТИКА КОНФИДЕНЦИАЛЬНОСТИ

General Provisions

This Privacy Policy explains how UAB "Desėja" (hereinafter referred to as "Desėja", "we", "our", or "us") collects, uses, stores, and processes your personal data when you use our website and online store www.deseja.lt, purchase our products, book our services (including appointments made through the Altegio platform), create a customer account, subscribe to our newsletter, or otherwise communicate with us.

The terms of this Privacy Policy apply each time you access our content and/or services, regardless of the device you use (such as a computer, mobile phone, tablet, smart TV, or any other device). The collection, processing, and storage of your personal data are governed by this Privacy Policy, the General Data Protection Regulation (EU) 2016/679 ("GDPR"), and other applicable laws and regulations.

By providing your personal data, you acknowledge and agree that Desėja will collect, process, and store your personal data for the purposes, by the means, and in accordance with the procedures set out in this Privacy Policy and applicable legislation. When processing personal data, we comply with the General Data Protection Regulation (GDPR), other directly applicable data protection laws, and the guidance issued by the competent supervisory authorities. We implement appropriate technical and organizational measures to protect the personal data we collect from website visitors against accidental loss, unauthorized access, misuse, disclosure, alteration, or destruction.

It is important that you read this Privacy Policy carefully, as each time you access or use our website, you acknowledge that you have read, understood, and agree to the terms set out in this Privacy Policy. If you do not agree with these terms, please refrain from accessing our website or using our content and/or services.

Individuals under the age of 16 may not submit any personal data through our website. If you are under the age of 16, you must obtain the consent of your parent(s) or legal guardian(s) before providing any personal information through our website.

Collection, Processing and Storage of Personal Data

Desėja processes personal data in accordance with the following fundamental principles:

  • Personal data is collected for specified, explicit, and legitimate purposes.

  • Personal data is processed lawfully, fairly, and transparently.

  • Personal data is kept accurate and, where necessary, up to date.

  • Personal data is retained only for as long as necessary to achieve the purposes for which it was collected.

  • Personal data is processed only by employees who are authorized to access such information.

  • All information relating to processed personal data is treated as confidential.

  • Personal data is protected against accidental loss, unauthorized access, misuse, alteration, or disclosure. We have implemented appropriate physical, technical, and organizational measures to safeguard all information collected in connection with the provision of our services.

Desėja respects every customer's right to privacy. We collect and process personal data, including but not limited to your first name, last name, telephone number, email address, and any other information you provide in contracts, registration forms, or through other communications with us, for the following purposes:

  • to process and fulfil product orders;

  • to issue financial documents, including invoices;

  • to resolve issues related to product supply or delivery;

  • to perform our contractual obligations;

  • subject to your consent, to send you marketing communications, including promotional offers, newsletters, publications, and information about events, to provide personalized content on social media platforms, and to remember information relevant to your interests and preferences;

  • to improve the functionality and performance of our website, making it easier for you to find the products, services, and information you are looking for.

In processing and storing your personal data, Desėja implements appropriate technical and organizational measures to protect your personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, access, or any other unlawful processing.

Online Store Platform

Our online store is powered by Shopify Inc. Shopify Inc. provides the e-commerce infrastructure necessary for order processing, customer account management, website functionality, and security.

When you use our website, certain personal data may be processed through the Shopify platform in accordance with Shopify's Privacy Policy and applicable data protection laws.

You can read Shopify's Privacy Policy here.

Marketing through Meta Lead Ads and Messaging

We advertise our products and services on Meta platforms (Facebook and Instagram) using Lead Ads instant forms and/or message-based advertisements (such as Messenger and Instagram Direct).

If you choose "Learn More", submit your contact details, or consent to receive marketing communications, we may receive the personal data you provide (such as your first name, last name, email address, telephone number, or selected topic of interest) from Meta Platforms Ireland Limited.

We use this information to:

  • send newsletters, promotional offers, and other marketing communications via email, SMS, or other communication channels you have selected;
  • personalize marketing communications;
  • create and manage audience segments;
  • measure and improve the effectiveness of our advertising campaigns.

The legal basis for this processing is your consent in accordance with Article 6(1)(a) of the General Data Protection Regulation (GDPR).

For compliance purposes, we maintain records of your consent, including the date, source, and version of the consent form.

Meta Business Tools (Meta Pixel and/or Conversions API)

Subject to your consent to the use of marketing cookies, our website may use Meta Pixel and/or the Meta Conversions API to:

  • measure advertising performance and conversions;
  • improve the effectiveness of our advertising campaigns;
  • create custom and lookalike audiences;
  • display more relevant advertisements on Meta platforms.

These activities are carried out in accordance with the Meta Business Tools Terms. Where applicable, certain processing activities may also be subject to the applicable Joint Controller Addendum with Meta Platforms Ireland Limited.

Email Marketing Service Provider (Omnisend)

We may use Omnisend, an email marketing platform, to send newsletters, promotional campaigns, and automated marketing communications.

Omnisend acts as our data processor, and personal data is processed in accordance with the Data Processing Agreement (DPA) concluded between Desėja and Omnisend.

Every marketing email contains an unsubscribe link, and you may withdraw your consent to receive marketing communications at any time.

Service Bookings through Third-Party Service Providers

To manage bookings for the services provided by UAB "Desėja", we use the Altegio appointment management platform, which acts as our data processor.

When booking an appointment through Altegio, you may provide the following personal data:

  • first and last name;

  • telephone number;

  • email address (if provided);

  • selected service;

  • preferred appointment date and time;

  • selected specialist (where applicable);

  • notes or any other information necessary for your booking.

We process this personal data for the following purposes:

  • to manage service bookings;

  • to confirm appointments;

  • to send appointment reminders;

  • to notify you of any changes to or cancellations of your appointment;

  • to provide the requested service;

  • to fulfil our internal administrative, accounting, and legal obligations;

  • to ensure high-quality customer service.

If you choose to receive appointment reminders by SMS, email, or telephone, such communications are considered an integral part of the provision of the requested service and do not constitute direct marketing.

Altegio processes personal data solely on behalf of Desėja, in accordance with the applicable Data Processing Agreement (DPA), and only to the extent necessary for appointment management and the provision of our services.

For more information about how Altegio processes personal data, please refer to the Altegio Privacy Policy here.

Categories and Sources of Personal Data

We collect only the personal data that you voluntarily provide to us (for example, through forms, emails, messages, or other communications) and technical data generated by your device, provided that you have given your consent where required. Such technical data may include cookie identifiers, device or event identifiers, information about your interactions with advertisements or forms, and other similar technical information.

Data Retention

Personal data is retained only for as long as necessary to fulfil the purposes for which it was collected or for the period required by the applicable laws and regulations of the Republic of Lithuania and the European Union.

Where personal data is processed on the basis of your consent, it will be retained until you withdraw your consent, unless a longer retention period is required by applicable law.

Profiling and Automated Decision-Making

We may carry out limited profiling activities (for example, audience segmentation based on your interactions with advertisements or newsletters) to provide you with more relevant communications and improve the effectiveness of our marketing activities.

We do not make decisions based solely on automated processing that produce legal effects or similarly significant consequences for you. You have the right to object to profiling and/or withdraw your consent at any time, where such processing is based on your consent.

Disclosure of Personal Data to Third Parties

Your personal data may be disclosed to third parties in the following circumstances:

  • when it is necessary to share your personal data with our business partners or service providers in order to fulfil your requests or provide the services you have chosen;
  • where disclosure is necessary for our legitimate business, contractual, or commercial purposes and is permitted or required under the applicable laws of the Republic of Lithuania or the European Union.

Where necessary, your personal data may also be transferred outside the Republic of Lithuania to our trusted business partners and service providers.

Personal data may be shared with:

  • Meta Platforms Ireland Limited, where we use Meta Business Tools or Meta Lead Ads;
  • Omnisend, acting as our data processor, for the delivery of newsletters and marketing communications in accordance with our Data Processing Agreement (DPA).

Where personal data is transferred outside the European Economic Area (EEA) (for example, to Meta Platforms, Inc. in the United States), such transfers are carried out using appropriate safeguards in accordance with the GDPR, including the EU–U.S. Data Privacy Framework and/or the European Commission's Standard Contractual Clauses (SCCs), where applicable.

In the cases provided for by the applicable laws of the Republic of Lithuania, we may disclose information relating to your purchases, services received, visits to our website, or other information concerning you where such disclosure is necessary:

  • to comply with applicable laws, regulations, or legal procedures;

  • where we reasonably believe that disclosure is necessary to protect or defend our legal rights;

  • to protect your safety or the safety of other individuals;

  • to prevent, investigate, or detect criminal offences or fraud;

  • in response to lawful requests from public authorities or other competent governmental bodies.

Furthermore, where you fail to fulfil your contractual obligations or perform them improperly, and such failure may cause us financial loss, we may disclose the necessary personal data to courts, law enforcement authorities, insurance companies, or debt collection agencies for the purpose of protecting our legitimate interests and enforcing our legal rights.

Your personal data may be shared with the following data processors or business partners where necessary for the provision of our services:

  • Shopify Inc. – for operating our online store platform;

  • Altegio – for appointment booking and service management;

  • Omnisend – for email marketing and marketing automation;

  • Meta Platforms Ireland Limited – for advertising campaigns and Meta Business Tools;

  • Google LLC – for analytics and advertising services;

  • payment service providers;

  • shipping and delivery partners;

  • accounting service providers;

  • IT service providers.

Registration Requirements

When completing a registration form, you are required to provide complete, accurate, and up-to-date information about yourself.

If you submit inaccurate, false, misleading, or incomplete information, Desėja reserves the right to refuse or cancel your registration and, where appropriate, delete the related personal data in accordance with applicable laws.

Updating or Correcting Personal Data

You have the right to update, correct, or amend the personal information you have provided at any time.

If you wish to update or correct your personal data, please contact us at sugardep@gmail.com or by telephone at +370 676 52856.

Cookies

To ensure the proper functioning of our website and to provide you with a better browsing experience, we use cookies and similar technologies. Cookies are small text files that are stored on your computer or other device when you visit our website.

Cookies enable us to:

  • recognize you as a returning visitor;

  • ensure the proper functioning of our website;

  • remember your preferences and settings;

  • collect statistical information about website traffic and usage;

  • improve the performance, functionality, and security of our website.

You can review the cookies used on our website and manage your cookie preferences at any time. You may also delete some or all cookies stored on your device through your browser settings. More detailed information is available in our Cookie Policy.

You have the right to refuse the use of non-essential cookies. However, please note that disabling certain cookies may affect the functionality of the website and prevent some features from working properly.

Where required by applicable law, non-essential cookies will only be stored and used after you have provided your consent through our cookie consent banner. You may withdraw or modify your consent at any time by using our cookie preference center or by adjusting your browser settings.

Social Media and Third-Party Services

Any information you provide to us through social media platforms (including messages, the use of "Like" or "Follow" features, comments, or other interactions) is also subject to the privacy policies of the respective social media platform operators.

Our website may contain links to our profiles on social media platforms and to third-party service providers that support the operation of our website, marketing activities, customer communications, and service delivery.

We currently use the following third-party services:

  • Meta (Facebook and Instagram) – Privacy Policy available here;

  • Shopify Inc. – Privacy Policy available here;

  • Omnisend – Privacy Policy available here;

  • Altegio – Privacy Policy available here;

  • Google LLC – Privacy Policy available here.

We recommend that you review the privacy policies of these third-party providers to understand how they collect, use, and protect your personal data. If you have any questions regarding their data processing practices, we encourage you to contact the relevant service provider directly.

Amendments to this Privacy Policy and Final Provisions

Desėja reserves the right to amend or update this Privacy Policy, in whole or in part, at any time. Any changes will be published on our website at www.deseja.lt and will become effective upon publication, unless otherwise stated.

Your continued use of our website or services following the publication of any changes constitutes your acceptance of the revised Privacy Policy.

Any disputes arising in connection with this Privacy Policy shall first be resolved through mutual negotiations. If no agreement can be reached, disputes shall be settled in accordance with the laws of the Republic of Lithuania.

If you have any questions, comments, or suggestions regarding this Privacy Policy or the processing of your personal data, please contact us at sugardep@gmail.com.

Your Rights

Under the General Data Protection Regulation (GDPR), you have the right to:

  • access your personal data;

  • request the rectification or completion of inaccurate or incomplete personal data;

  • request the erasure of your personal data ("the right to be forgotten");

  • request the restriction of the processing of your personal data;

  • receive your personal data in a structured, commonly used, and machine-readable format and request its transfer to another data controller (the right to data portability);

  • withdraw your consent at any time, where processing is based on your consent, without affecting the lawfulness of processing carried out before the withdrawal;

  • object to the processing of your personal data where such processing is based on our legitimate interests;

  • lodge a complaint with the State Data Protection Inspectorate of the Republic of Lithuania or another competent data protection supervisory authority.

Data Protection Contact Information

Data Controller: UAB "Desėja"

Company Registration Number: 303575863

Registered Office Address: Giedraičių St. 46-29, LT-09301 Vilnius, Lithuania

Telephone: +370 676 52856

Email: sugardep@gmail.com

VAT Number: LT100009391419


Last Updated: 29 July 2026