Privacy policy

Who handles your information

The Vow Atelier is the shop name. Legal seller: [legal name]. Registration / individual activity number: [number]. Business address: [address]. Privacy contact: [email]. These details must be completed before trading.

What we collect and why

We use your name, email, optional phone number, delivery and billing details, product choices and personalisation to process purchases and answer enquiries. Booking requests can also include dates, venue details and special requests. Film enquiries include the photos you choose to upload.

Order and enquiry processing is necessary to take steps at your request or perform a contract. Accounting records are kept to meet legal obligations. Security and fraud prevention rely on legitimate interests. Any optional marketing requires a separate choice; placing an order is not marketing consent.

Payments and service providers

Card payments are processed by Stripe; we do not receive your full card number. Hosting, order storage, payment and email providers process information needed to deliver their services. Film production and delivery partners: [confirm providers and what they receive].

Where a provider processes data outside the European Economic Area, appropriate GDPR safeguards must apply. Provider locations and transfer safeguards: [confirm before publishing this policy].

Your film photos

Uploaded reference photos are stored privately and accessed through temporary authorised links. Upload only photos you have permission to use, and ensure people shown agree to their use for the film. They are not authorised for advertising merely because you submit them.

Photo deletion schedule, finished-film storage period and production-provider handling: [confirm retention periods and providers].

How long information is kept

Order and accounting retention: [confirm statutory period]. Unsuccessful enquiries: [confirm period]. Film photos and films: [confirm period]. Information should be deleted when it is no longer needed, unless the law requires retention.

Your rights

You may request access, correction, deletion, restriction or portability where applicable, and object to processing based on legitimate interests. You may withdraw consent without affecting earlier lawful processing. Send requests to [privacy email]; we normally respond within one month.

You can complain to the Lithuanian State Data Protection Inspectorate (VDAI), or your local supervisory authority. See vdai.lrv.lt for current contact details.