Privacy policy

MB “Sea Coast” is the data controller for personal data processed through seacoast.lt.

Controller details MB “Sea Coast”, company code 305467548 Workshop and correspondence: Kalniečių str. 207, LT-50141 Kaunas, Lithuania Registered office: Piliakalnio str. 3, LT-46224 Kaunas, Lithuania info@seacoast.lt · +370 680 85599

Data is processed in accordance with the GDPR and the law of the Republic of Lithuania.

The short version

This site sets no tracking cookies and runs no advertising trackers. Your cart is stored in your own browser, not on a server. The only personal data I hold is what’s needed to send you the thing you bought.

What I collect, and why

Order details — name, email, delivery address and order contents. Needed to fulfil the contract between us (GDPR Art. 6(1)(b)) and to meet Lithuanian accounting law (Art. 6(1)(c)).

Payment data — handled entirely by Stripe Payments Europe, Ltd. Card numbers never reach this site and I never see them. I receive only a confirmation, the last four digits, and the billing name and address. See Stripe’s privacy policy.

Messages you send me — kept so I can answer you, on the basis of legitimate interest (Art. 6(1)(f)).

Anonymous traffic statistics — page views and referrers, via Cloudflare Web Analytics, which uses no cookies and does not fingerprint or track individuals across sites. This data cannot identify you.

Your cart — stored in your browser’s local storage. It never leaves your device until you press Checkout.

What I do not do

I don’t sell or rent your data. I don’t send marketing email unless you explicitly ask. I don’t build profiles or make automated decisions about you. I don’t use advertising or social-media tracking pixels.

Who else sees your data

• Stripe — payment processing.
• Cloudflare — hosting and delivery of this site.
• Postal and courier services — your delivery address, so the parcel arrives.
• My accountant and the Lithuanian tax authority — invoice records, as legally required.

Where a provider is outside the EU, transfers rely on the European Commission’s Standard Contractual Clauses.

How long it’s kept

Order and invoice records: 10 years, as required by Lithuanian accounting law. Email correspondence: up to 2 years. Anonymous analytics: 6 months.

Your rights

Under the GDPR you may request access to your data, correction, erasure, restriction, portability, or object to processing based on legitimate interest. Email info@seacoast.lt and I’ll respond within one month.

Note that data needed for statutory accounting records cannot be erased before the retention period ends.

If you believe your data has been mishandled, you can complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

Cookies

This site sets no cookies of its own. Cloudflare may set a strictly necessary security cookie to protect the site against attacks; it stores no personal information and cannot be used to track you.

Last updated 14 August 2026.