PRIVACY POLICY
Please note Last updated: 2026-04-28

This Privacy Policy explains how Aneta Urbonaitė ("I", "me", "my") collects, uses, and protects your personal data when you visit anetaurbonaite.com or purchase products through this website.
1. Who I am 1.1 Data controller: Aneta Urbonaitė
1.2 Contact: aneta0305@gmail.com
1.3 Website: anetaurbonaite.com    
2. What data I collect 2.1 Analytics data (Google Analytics)

2.1.1 With your consent, I use Google Analytics to collect anonymous data about how visitors use this site. This includes:
2.1.1.1 Pages visited and time spent
2.1.1.2 Device type, browser, and operating system
2.1.1.3 Approximate location (country/city level)
2.1.1.4 How you arrived at the site (e.g. search engine, direct link)
2.1.2 Google Analytics uses cookies to track this information. No personally identifiable information is collected through analytics. Google may process this data on servers outside the EU. See Google's Privacy Policy for details.
2.1.3 You can opt out at any time using the cookie banner on this site, or via the Google Analytics Opt-out Browser Add-on.

2.2 Payment data (Stripe)
2.2.1 When you make a purchase, payment is processed by Stripe, Inc. I do not see or store your full card number. Stripe may collect:
2.2.1.1 Name and billing address
2.2.1.2 Payment card details (handled entirely by Stripe)
2.2.1.3 Email address for receipts
2.2.2. Stripe is an independent data controller. See Stripe's Privacy Policy for details.

2.3 Purchase records
2.3.1 I retain records of completed purchases (product purchased, date, amount, email used) for accounting and legal compliance purposes.

2.4 Contact enquiries
2.4.1 If you contact me via email, I will store your name and email address for the duration of our correspondence.

2.5 Marketing communications (Newsletter)
2.5.1 If you opt in at checkout or via a sign-up form, I will store your email address to send you updates about new products, releases, and resources.
2.5.2 Opting in is entirely voluntary. You can unsubscribe at any time using the link in any marketing email, or by contacting me at aneta0305@gmail.com.
2.5.3 I will not add you to a mailing list without your explicit, unticked consent.    
3. Why I collect this data
Data Legal basis Purpose
Analytics Consent (GDPR Art. 6(1)(a)) Understand how visitors use the site
Payment data Contract (GDPR Art. 6(1)(b)) Process your purchase
Purchase records Legal obligation (GDPR Art. 6(1)(c)) Accounting and tax compliance
Contact enquiries Legitimate interest (GDPR Art. 6(1)(f)) Responding to your message
Marketing communications Consent (GDPR Art. 6(1)(a)) Sending newsletters and product updates
4. Cookies This site uses the following cookies:

Cookie Type Purpose Duration
au_cookie_consent Essential Stores your cookie consent choice 1 year
_ga, _ga_* Analytics Google Analytics tracking Up to 2 years
_gid Analytics Google Analytics session tracking 24 hours

Analytics cookies are only set after you give consent via the cookie banner.    
5. How long I keep your data 5.1 Analytics data: retained per Google Analytics default settings (up to 14 months)
5.2 Purchase records: 7 years (required by EU accounting law)
5.3 Contact enquiries: deleted once our correspondence is no longer needed, typically within 2 years
5.4 Marketing email addresses: retained until you unsubscribe or request deletion    
6. Who I share data with 6.1 I do not sell your personal data. I share data only with:
6.2 Google (Analytics) — see Section 2.1
6.3 Stripe (Payment processing) — see Section 2.2
6.4 Both are subject to GDPR-compliant data processing agreements.    
7. Your rights (GDPR) 7.1 Under the General Data Protection Regulation (GDPR), you have the right to:
7.2 Access — request a copy of the personal data I hold about you
7.3 Rectification — ask me to correct inaccurate data
7.4 Erasure — ask me to delete your personal data ("right to be forgotten")
7.5 Restriction — ask me to limit how I use your data
7.6 Portability — receive your data in a portable format
7.7 Object — object to processing based on legitimate interest
7.8 Withdraw consent — withdraw cookie consent at any time via the banner on this site
7.9 To exercise any of these rights, contact me at: aneta0305@gmail.com
7.10 You also have the right to lodge a complaint with a supervisory authority. In Lithuania, this is the State Data Protection Inspectorate.    
8. Data security 8.1 I take reasonable technical measures to protect your data. Payments are handled entirely by Stripe and never pass through my servers.    
9. Changes to this policy 9.1 I may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the site after changes constitutes acceptance of the updated policy.    
10. Contact 10.1 For any privacy-related questions: aneta0305@gmail.com