Privacy policy
Last updated: 8 October 2026
This Privacy Policy explains how MB EME STILIUS (brand name EME boutique) collects, uses, stores and shares personal data when you visit www.emeboutique.com, create an account, place an order, contact us, subscribe to marketing communications or otherwise use our online store (the “Services”).
1. Data controller
The controller of your personal data is:
MB EME STILIUS
Company code: 305730287
VAT number: LT100013967315
Registered office: Raudondvario pl. 288A-4, LT-47164 Kaunas, Lithuania
Physical store: A. Juozapavičiaus pr. 31-10, LT-45257 Kaunas, Lithuania
Email: info@emeboutique.com
Telephone: +370 605 08291; +370 645 20930
2. Personal data we process
Depending on how you use the Services, we may process:
- Identification and contact data: name, surname, email address, telephone number, billing and delivery addresses.
- Order and transaction data: purchased or viewed products, cart contents, order value, discounts, returns, exchanges, complaints and transaction history.
- Payment data: payment method, payment status, transaction reference and related confirmation. Card details are processed by payment service providers; we generally do not receive or store full payment-card numbers.
- Account data: login details, preferences and account settings.
- Delivery data: selected carrier, parcel number, tracking status and delivery-related communications.
- Communications: messages, enquiries, telephone-call details and information supplied in connection with customer service, returns or complaints.
- Marketing data: subscription status, consent records, email engagement and communication preferences.
- Reviews and user content: product reviews, ratings, name or nickname and any content you voluntarily publish.
- Technical and usage data: IP address, device and browser information, cookie identifiers, pages viewed, interactions, referring source and security logs.
Please do not send us special-category or other sensitive personal data unless it is strictly necessary for a specific request.
3. Purposes and legal bases
| Purpose | Legal basis |
|---|---|
| Processing orders, payments, delivery, returns and exchanges | Performance of a contract or steps taken before entering into a contract (GDPR Article 6(1)(b)) |
| Issuing invoices, maintaining accounting records and complying with tax or other statutory duties | Compliance with a legal obligation (Article 6(1)(c)) |
| Providing customer service, handling enquiries, complaints and warranty claims | Performance of a contract, compliance with legal obligations and our legitimate interest in providing effective customer service and defending legal claims (Articles 6(1)(b), (c) and (f)) |
| Creating and administering customer accounts | Performance of a contract and our legitimate interest in providing requested account functionality (Articles 6(1)(b) and (f)) |
| Preventing fraud, protecting accounts, transactions and the website, and enforcing our policies | Our legitimate interest in protecting customers, our business and the Services (Article 6(1)(f)); where applicable, compliance with a legal obligation (Article 6(1)(c)) |
| Sending email marketing and measuring marketing engagement | Your consent (Article 6(1)(a)); where legally permitted, marketing similar EME boutique products to existing customers subject to a clear and free opt-out |
| Analytics, personalisation and targeted advertising using non-essential cookies or pixels | Your consent (Article 6(1)(a)) |
| Collecting and displaying reviews voluntarily submitted by customers | Your request or consent and our legitimate interest in informing customers and improving the Services (Articles 6(1)(a) and (f)) |
| Establishing, exercising or defending legal claims and responding to authorities | Compliance with legal obligations and our legitimate interests (Articles 6(1)(c) and (f)) |
Where processing is based on legitimate interests, we assess whether those interests are overridden by your rights and freedoms. You may object to such processing in the circumstances described below.
4. How we obtain personal data
We obtain data directly from you; automatically from your device through the Services, cookies and similar technologies; from Shopify and other service providers acting on our behalf; from payment and delivery providers; and, where applicable, from advertising or social-media partners in accordance with your settings and consent.
5. Cookies and similar technologies
We use strictly necessary cookies to operate the store, maintain security, remember essential choices and complete checkout. Where required by law, analytics, personalisation and advertising cookies or pixels are activated only after you give consent.
Our Shopify cookie banner allows you to accept, decline or manage non-essential cookies. You can change or withdraw your choice at any time using the Cookie preferences link in the website footer. Withdrawing consent does not affect processing that was lawful before withdrawal. Blocking some cookies may affect optional website features but will not prevent use of essential shopping functions.
The exact cookies and their duration may change when Shopify or an installed service is updated. Current details are shown in the cookie-preference interface.
6. Direct marketing
We send marketing emails only where we have a lawful basis. You can unsubscribe at any time by using the link in each marketing email or by contacting us. Unsubscribing from marketing does not stop transactional messages about your orders, returns, account or security.
7. Service providers and other recipients
We disclose only the data reasonably necessary for the relevant purpose. Recipients may include:
- Shopify, which hosts and powers the online store and related commerce services;
- Stripe Card Payments and OPAY, as applicable, for payment processing;
- your selected delivery and tracking providers, which may include Omniva, LP EXPRESS, DPD, Lietuvos paštas, 17TRACK and other carriers requested or selected for an order;
- Omnisend for email marketing, forms, segmentation and automation;
- Meta (Facebook and Instagram), Google and YouTube, and Pinterest for advertising, analytics or sales-channel functions, subject to your consent and settings;
- Judge.me for product reviews;
- IT, hosting, cybersecurity, customer-support, accounting, legal and professional advisers;
- banks, insurers, auditors, public authorities, courts or law-enforcement bodies where required by law or necessary to protect legal rights.
Some providers act as our processors, while others may act as independent controllers under their own privacy notices.
8. Shopify
The Services are hosted by Shopify. Shopify processes information necessary to provide, secure and improve its platform and may process certain data as an independent controller for its own enhanced services. Further information is available in the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
9. International transfers
Some service providers may process data outside Lithuania or the European Economic Area. Where personal data are transferred to a country without an adequacy decision, we rely on safeguards permitted by law, such as the European Commission’s Standard Contractual Clauses, and supplementary measures where required. A copy or further information about applicable safeguards may be requested from us.
10. Retention periods
- Order, payment-confirmation, invoice and accounting records are generally retained for 10 years or longer where required by law.
- Customer-service communications are generally retained for 2 years after the matter is resolved, unless a longer period is necessary for a complaint, dispute or legal claim.
- Account data are retained while the account is active and are deleted or anonymised after closure, except for data that must be kept for legal, fraud-prevention or dispute-resolution purposes.
- Marketing data are processed until you unsubscribe or withdraw consent. We may retain minimal evidence of consent and opt-out to demonstrate compliance and prevent further marketing.
- Technical and security logs are generally retained for up to 12 months, unless a longer period is required to investigate an incident.
- Reviews may remain published until they are removed, the related product or service is discontinued, or retention is no longer necessary.
- Cookie duration is stated in the cookie-preference interface.
After the applicable period, data are deleted or anonymised unless further retention is required or permitted by law.
11. Your rights
Subject to applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, data portability, or object to processing based on legitimate interests or to direct marketing. Where processing is based on consent, you may withdraw it at any time.
To exercise a right, email info@emeboutique.com. We may request proportionate information to verify your identity. We normally respond within one month, subject to any lawful extension.
You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania or the supervisory authority in your country of residence. We encourage you to contact us first so that we can try to resolve the matter.
12. Automated decisions
We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you. Product recommendations and advertising personalisation may be automated but do not produce such effects.
13. Security
We apply reasonable organisational and technical measures to protect personal data. However, no electronic transmission or storage method is completely secure. Please do not send payment-card details, passwords or other highly sensitive information by ordinary email or social-media message.
14. Children
The online store is not directed at children who cannot lawfully provide their own data or enter into a purchase without a parent or guardian. We do not knowingly collect children’s data unlawfully. A parent or guardian may contact us to request review or deletion of such data.
15. Changes to this policy
We may update this Privacy Policy to reflect changes to our Services, providers, practices or legal requirements. We will publish the updated version on this page and change the “Last updated” date. Where required, we will provide additional notice or request renewed consent.
16. Contact
For privacy questions or requests, contact MB EME STILIUS at info@emeboutique.com, +370 605 08291 or +370 645 20930, or by post at Raudondvario pl. 288A-4, LT-47164 Kaunas, Lithuania.