Privacy policy

We take the protection of your personal data seriously and collect and process only the data our business needs. We process personal data lawfully, transparently and fairly, for predefined purposes and only to the extent necessary, in line with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the Lithuanian Law on Legal Protection of Personal Data.

1. What this document is

1.1. This privacy policy explains how and why we process your personal data, where we get it, who we share it with, how long we keep it and what rights you have.

1.2. It applies to the website dogfriendly.lt (the Website) and to our Instagram and Facebook accounts. If you do not agree with it, please do not use the Website.

1.3. Personal data is any information that identifies you directly or indirectly (for example name, e-mail address, phone number, IP address).

2. Who we are

2.1. The data controller is Dog friendly, MB, company code 308132964, registered address M. K. Čiurlionio g. 11, LT-03104 Vilnius, e-mail info@dogfriendly.lt, phone +370 655 35 944. We sell dog accessories.

3. Our principles

3.1. We process data lawfully, fairly and transparently; collect it only for specified, explicit purposes; collect only what is necessary; keep it accurate and up to date; keep it no longer than necessary; and protect it with technical and organisational measures against unlawful processing, loss or destruction.

4. How we collect your data

4.1. When you give it to us: placing an order, using the contact form, subscribing to the newsletter, e-mailing or calling us.

4.2. When you use the Website: some information (such as IP address and browser type) is collected automatically — see section 6.

5. Purposes and how we process your data

5.1. Fulfilling orders and issuing invoices

Data: name, e-mail address, phone number, chosen DPD parcel locker, order and payment information. Legal basis: performance of the contract and a legal obligation (accounting). Recipients: the payment service provider, the carrier DPD, accounting, IT and hosting providers. Retention: order and invoice data is kept for 10 years as required by accounting law.

5.2. Handling enquiries

Data: name, e-mail address, phone number (if given), the message and its date. Legal basis: our legitimate interest in answering you and ensuring service quality. Recipients: IT and hosting providers. Retention: up to 1 year after the enquiry is resolved.

5.3. Direct marketing (newsletter)

Data: e-mail address and consent date. Legal basis: your consent, given when subscribing on the Website or ticking the box at checkout. Recipient: the newsletter service MailerLite. Retention: until you withdraw consent, which you can do at any time via the unsubscribe link in any e-mail or by writing to info@dogfriendly.lt.

5.4. Website operation, statistics and advertising

Data: browser and device information, IP address, pages viewed and actions taken. Essential cookies and browser storage (cart, language and consent choice) need no consent. Marketing and measurement technology (the Meta Pixel in the browser and the Meta Conversions API, a server-side notice of a paid order in which e-mail, phone and name are passed only as SHA-256 hashes) is used only after your consent in the cookie banner; the recipient is Meta Platforms Ireland Ltd. See section 6.

5.5. Other purposes

We may also process data where the law requires it (for example requests from authorities) or to defend our legitimate interests (for example in disputes). We do not request or process special categories of personal data; please do not send us more data than necessary.

6. Cookies and browser storage

6.1. Cookies are small files stored on your device that let a website recognise your browser and remember choices. Browser storage (localStorage) works similarly; the Website uses it for your cart.

6.2. We use: NEXT_LOCALE — chosen language (cookie, 1 year, not shared); dfc-cookie-consent — your cookie choice (browser storage, until deleted, not shared); dfc-cart — your shopping cart (browser storage, until deleted, not shared); _fbp and fr — Meta Pixel cookies for measuring and showing advertising (facebook.com, 3 months and 1 year respectively, shared with Meta) — set only after your consent.

6.3. Essential cookies and storage are set automatically — the Website cannot work without them. Marketing cookies require your consent, which you can give or withdraw at any time via “Cookie settings” at the bottom of the page. You can also delete or block cookies in your browser; some features may then stop working.

7. Who we share your data with

7.1. We do not sell your data or pass it on for purposes other than those in this policy. Processing on our behalf is entrusted only to providers bound by data processing agreements: the payment service provider, the carrier DPD, MailerLite (newsletter), Meta (advertising, only with consent), and accounting, IT and hosting providers.

7.2. We may disclose data to public authorities where the law requires it.

7.3. Some providers (for example Meta and MailerLite) may process data outside the European Economic Area. Such transfers rely on the safeguards provided by the GDPR (adequacy decisions or standard contractual clauses).

8. How long we keep data

8.1. We keep data no longer than needed for the purpose it was collected for, or as long as the law requires — the specific periods are in section 5. Afterwards data is deleted or anonymised.

9. How we protect data

9.1. The Website runs over encrypted HTTPS; card data is handled only by the payment provider; access to data is limited to people who need it for their work. If we learn of a data breach likely to pose a high risk to your rights, we will inform you without delay.

10. Links to other websites

10.1. The Website may link to third-party websites and to our social media accounts. They have their own privacy policies, for which we are not responsible.

11. Your rights

11.1. You have the right to be informed about the processing of your data; to access it; to have inaccurate data corrected; to have data erased; to restrict processing; to object to processing; to receive your data in a portable format; and to withdraw consent at any time without affecting the lawfulness of processing carried out before withdrawal.

11.2. Send requests to info@dogfriendly.lt or by post to our registered address. We may ask for additional information to verify your identity. We reply within 30 calendar days of receiving the request. If we refuse a request, we state the grounds.

12. Complaints

12.1. If you believe your rights have been infringed, please contact us first — we aim to resolve matters quickly and amicably. You also have the right to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, 10312 Vilnius, ada@ada.lt, vdai.lrv.lt).

13. Changes to this policy

13.1. Changes are published on the Website. We will inform you separately of material changes.

14. How to contact us

14.1. By post: Dog friendly, MB, M. K. Čiurlionio g. 11, LT-03104 Vilnius. By e-mail: info@dogfriendly.lt. By phone: +370 655 35 944.

Published on 15 September 2026.