1. Who we are (Controller)

The data controller responsible for your personal data is:

2. Data we collect

• Identity data: first and last name, username or similar identifier.
• Contact data: email address, phone number, billing and shipping addresses.
• Account data: login credentials (passwords stored using hashing), preferences, order history.
• Transaction data: orders, invoices, payment amounts and timestamps. We do not store full card numbers; payments are processed by our payment provider(s).
• Technical data: IP address, device and browser type, operating system, language, referring URLs.
• Usage data: pages viewed, clicks, time on page, referring/exit pages, campaign/source.
• Marketing & communications data: your preferences for receiving marketing from us.
• Support data: messages you send to our support channels and any attachments.

We may also receive data about you from third parties (e.g., payment providers, analytics, ad networks) in accordance with their privacy policies.

3. How we use your data & legal bases

We only process personal data where a lawful basis applies (GDPR Art. 6). Our purposes and legal bases include:

• Provide services & perform contracts (create accounts, process/deliver orders, customer support) — performance of a contract (Art. 6(1)(b)).
• Payments and fraud prevention — performance of a contract (Art. 6(1)(b)) and legitimate interests (Art. 6(1)(f)).
• Site functionality, analytics & improvement — consent for non-essential cookies (Art. 6(1)(a)); legitimate interests for basic performance and security (Art. 6(1)(f)).
• Marketing communications (newsletters, offers) — consent (Art. 6(1)(a)) or legitimate interests (Art. 6(1)(f)) where permitted. You can opt out at any time.
• Legal compliance (e.g., tax and accounting, responding to lawful requests) — legal obligation (Art. 6(1)(c)).
• Security & abuse prevention — legitimate interests (Art. 6(1)(f)).

4. Cookies & similar technologies

We use cookies and similar technologies to operate the Website, measure performance, and personalize content. Non-essential cookies (e.g., analytics/marketing) are used only with your consent via our cookie banner. You can change your preferences at any time using the “Cookie Settings” link in the footer.

5. Sharing your data

We share personal data with trusted recipients as necessary for the purposes above, subject to appropriate safeguards:

• Service providers (processors): hosting, CDN, cloud infrastructure, email delivery, customer support tools, analytics, payment processing, and anti-fraud services.
• Professional advisers: auditors, accountants, legal counsel, where necessary.
• Authorities: when required by law or to protect rights, property, and safety.
• Business transfers: in connection with a merger, acquisition, or sale of assets; we will notify you of changes in control and your choices.

Key providers we use (examples — replace with your actual providers):

• Hosting & CDN:
• Payments:
• Email & marketing:
• Analytics:
• Support:

6. International data transfers

If we transfer personal data outside the European Economic Area (EEA) or the UK, we ensure appropriate safeguards, such as adequacy decisions (Art. 45) or Standard Contractual Clauses (Art. 46). Copies of relevant safeguards are available upon request.

7. Data retention

We keep personal data only as long as necessary for the purposes described above, including to meet legal, accounting, or reporting requirements. For example:

• Order and invoice data: typically retained for 10 years to satisfy tax/accounting laws (jurisdiction-dependent).
• Account data: retained while your account is active; deleted or anonymized after 12 months of inactivity unless we must keep it longer for legal reasons.
• Marketing data: retained until you withdraw consent or object to processing.
• Support communications: retained for up to 24 months for quality and audit purposes.

8. Security

We implement technical and organizational measures to protect personal data, including encryption in transit, access controls, least-privilege policies, and regular monitoring. However, no method of transmission or storage is 100% secure.

9. Your rights

Subject to conditions and exceptions, you have the right to:

• Access your personal data and obtain a copy.
• Rectify inaccurate or incomplete data.
• Erase your data (“right to be forgotten”).
• Restrict processing of your data.
• Object to processing based on legitimate interests or direct marketing.
• Data portability (receive data in a structured, commonly used format).
• Withdraw consent at any time where processing is based on consent.
• Lodge a complaint with a supervisory authority (see below).

To exercise your rights, contact us at support@voltusbox.eu or sales@voltusbox.eu. We may need to verify your identity before fulfilling your request.

10. Children’s privacy

Our services are not intended for children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can take appropriate action.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated version here and update the “Last updated” date. Significant changes may also be communicated by email or website notice.

12. How to contact us & complaints

If you have questions or concerns about this policy or our data practices, contact:

You also have the right to lodge a complaint with your local supervisory authority. In Lithuania, this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija): vdai.lrv.lt.