Privacy policy
Version of 2026-10-11
1. Who processes your data
Data controller: MB VIVIDO, company code 308165131, VAT code LT100020951115, VMVT permit No. 520002992, registered office Sukilėlių pr. 65, Kaunas, email info@vivido.lt, tel. +370 636 03003. For questions about your data, write to info@vivido.lt.
2. What data we process and why
- Orders and delivery: name, surname, delivery address or parcel locker, email, phone, order contents. Purpose: performing the contract and delivery. Legal basis: contract (GDPR Art. 6(1)(b)).
- Payment: payment data is processed by payment service providers (e.g., Montonio, Stripe); we do not see or store card details and only receive the payment status.
- Invoices and accounting: order and payment data are kept for the periods required by law (accounting documents are usually kept for 10 years). Legal basis: legal obligation.
- Account and subscription: email, order history, subscription settings, loyalty points (once introduced). Legal basis: contract.
- Inquiry forms (business, private label, sponsorship and ambassadors, call requests): the data and message you provide so that we can reply. Legal basis: your request / legitimate interest.
- Virtual assistant Čiti: your messages are sent to an AI service provider to generate a reply, and a copy of the conversation (without the session identifier, with an approximate location based on IP) is emailed to our team 3 minutes after the last message and deleted from the conversation storage. Please do not write sensitive data to the assistant. Legal basis: legitimate interest in providing help; if you leave contact details, your request.
- Security and operation: IP address and technical logs for protection against abuse (rate limits, bot traps). Legal basis: legitimate interest.
- Newsletters and marketing: only with your consent; you can withdraw consent at any time.
3. Who we share data with
Data is received only by the service providers who need it (data processors): payment service providers (Montonio, Stripe), delivery service providers (parcel locker and courier networks), email service providers (sending messages and the mailbox), the website hosting and security provider (Cloudflare), the AI service provider (Anthropic, for assistant replies), and accounting and invoicing system providers. When data is transferred outside the European Economic Area, GDPR safeguards (e.g., standard contractual clauses) apply.
4. How long we keep data
- Order and accounting data: for the periods set by law.
- Inquiry and correspondence data: until the matter is resolved and up to 3 years afterward, if not needed longer.
- Account data: while you have an account; after deletion, only what we are required to keep by law.
5. Cookies and local storage
The website uses only essential technical elements: your cart contents in your browser's local storage (localStorage) and the assistant's conversation state in the session (sessionStorage). They are needed for the website to work and are not used for tracking. We do not enable analytics and marketing cookies (the "Analytics" and "Marketing" categories) until you choose them in the consent window. You can change your choice at any time by clicking "Cookie settings" at the bottom of the page; consent is stored in your browser for 12 months.
6. Your rights
You have the right to access your data, correct it, delete it, restrict processing, object to processing, transfer your data and withdraw consent at any time. Write to info@vivido.lt; we will reply within 30 days. If you believe your rights have been violated, you can complain to the State Data Protection Inspectorate (vdai.lrv.lt).
7. Security
We apply organizational and technical measures: encrypted connections (HTTPS), access restrictions, and we do not retain payment details. We will report incidents as required by law.
8. Changes
We may update the policy; the current version is always published on this page.