PRIVACY POLICY

Last updated: 09/01/2026

This Privacy Policy explains how Griliai LT projektai, MB (“we”, “us”, “our”) collects, uses, stores, and discloses personal information when you visit or use our website https://cobb.lt (the “Site”), make a purchase, or otherwise interact with us (collectively, the “Services”).

For the purposes of this Privacy Policy, “you” refers to any visitor, customer, or other individual whose personal information we process.

By accessing or using our Services, you acknowledge that you have read and understood this Privacy Policy.

 

1. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or business operations. Any updates will be published on this page with a revised “Last updated” date.

2. Personal Information We Collect

We collect personal information in the following ways:

a) Information you provide directly

When you use our Services, you may provide us with:

• Contact information (such as name, email address, phone number)

• Order and delivery information (such as products purchased, delivery address, billing details, order notes)

• Customer support communications (emails, messages, or other inquiries)

Providing certain information is necessary to place an order or receive support. If you choose not to provide required information, some Services may not be available to you.

b) Information collected automatically

When you browse our Site, we automatically collect certain technical and usage information, including:

• IP address and approximate location

• Device type, operating system, and browser information

• Pages viewed, products viewed, referring URLs, and interaction data

This information is collected using cookies and similar technologies (“Cookies”).

For details on Shopify-related cookies, please see:
https://www.shopify.com/legal/cookies

c) Information from third parties

We may receive information from trusted third-party service providers that support our business operations, including:

• Shopify Inc. (e-commerce platform hosting and store functionality)

• Payment service providers (for payment processing and confirmation)

• Shipping and logistics partners (for order delivery and tracking)

• Analytics and security providers (to help improve and protect our Services)

All such information is processed in accordance with this Privacy Policy.

 

3. How We Use Your Personal Information

We use personal information for the following purposes:

Providing and operating our Services

• Processing and fulfilling orders

• Managing payments, deliveries, returns, and refunds

• Maintaining customer accounts (if created)

Customer support

• Responding to inquiries and providing assistance

• Improving customer experience and service quality

Communications and marketing

• Sending service-related messages (order confirmations, delivery updates, important notices)

• Sending marketing communications (newsletters or offers), where permitted by law or based on your consent
  You may unsubscribe from marketing communications at any time.

Security and fraud prevention

• Detecting and preventing fraud, abuse, or security incidents

• Protecting our customers, Site, and business

Legal and compliance purposes

• Meeting accounting, tax, and consumer protection obligations

• Responding to lawful requests from authorities

4. Legal Bases for Processing (GDPR)

Where the General Data Protection Regulation (GDPR) applies, we process personal information based on one or more of the following legal grounds:

• Performance of a contract (e.g., fulfilling your order)

• Legal obligation (e.g., tax and accounting requirements)

• Legitimate interests (e.g., fraud prevention, customer support, service improvement)

• Consent (e.g., marketing communications where required)

5. Disclosure of Personal Information

We may share personal information with third parties only when necessary to operate our Services, including:

• Shopify Inc. (store hosting and technical infrastructure)

• Payment service providers (to process payments securely)

• Shipping and logistics partners (to deliver orders)

• IT, analytics, and security providers

• Professional advisors or authorities, where required by law

We do not sell personal data in the ordinary commercial sense.

6. Payments, Currency, and Payment Processing

We offer secure online payments through approved payment service providers.

Available payment methods include:

• Shopify Payments (card payments)

• MakeCommerce (Maksekeskus AS) electronic banking services, including Swedbank, SEB, Luminor, Citadele, and Šiaulių bankas

• PayPal

All payments are processed in euro (EUR) currency.

Payments in our online store may be processed using the MakeCommerce (Maksekeskus AS) payment platform, operated by Maksekeskus AS (Liivalaia 45, Tallinn 10145, Estonia, registry code 12268475).

When processing a payment via MakeCommerce, the personal data necessary to complete and confirm the payment (such as payment details and transaction information) is transferred to Maksekeskus AS in accordance with applicable data protection laws.

7. Cookies and Your Choices

Most browsers accept Cookies by default. You may control or disable Cookies through your browser settings. Please note that disabling Cookies may affect Site functionality.

Where applicable, cookie preferences may also be managed through Shopify’s customer privacy or cookie consent tools.

8. Data Retention

We retain personal information only for as long as necessary to:

• Provide our Services

• Comply with legal and accounting obligations

• Resolve disputes and enforce agreements

Retention periods depend on the type of data and applicable legal requirements.

9. Data Security

We implement reasonable technical and organizational measures to protect personal information. However, no system is completely secure, and we cannot guarantee absolute security.

10. Your Rights (EEA / UK – GDPR)

Depending on your location and applicable law, you may have the right to:

• Access your personal information

• Request correction of inaccurate data

• Request deletion (where legally permissible)

• Restrict or object to processing

• Request data portability

• Withdraw consent at any time (where processing is based on consent)

To exercise your rights, please contact us using the details below.

11. Complaints

If you have concerns about how we process personal data, please contact us first. You also have the right to lodge a complaint with the Lithuanian supervisory authority:

Valstybinė duomenų apsaugos inspekcija (VDAI)

12. International Data Transfers

Some of our service providers (including Shopify) may process personal information outside the European Economic Area. Where required, such transfers are protected by appropriate safeguards, including Standard Contractual Clauses.

13. Third-Party Websites

Our Site may contain links to third-party websites or services. We are not responsible for their privacy practices. Please review their privacy policies separately.

CONTACT / DATA CONTROLLER

For the purposes of applicable data protection laws, the data controller is:

Griliai LT projektai, MB
Company code: 307067314
VAT No.: LT100019186616
Email: projektai@griliai.lt
Phone: +370 676 90777
Registered address: Gabijos g. 76, LT-47103 Kaunas, Lithuania

We operate exclusively online and do not maintain a physical retail store. All orders are placed and processed via our website.