Privacy Policy

Last updated: 24 September 2026

This policy explains what personal data I collect when you visit woolcocoon.com or buy from me, why I collect it, who I share it with, and what your rights are. The terms of buying from me are in the Legal notices.

1. Who I am

The data controller is MB Wool Cocoon, company code 307548237, Bendriju g. 26, Panevezys 37171, Lithuania. Contact: vaivanat@gmail.com.

2. What data I collect and why

  • Orders: your name, delivery and billing address, email, phone number and order details. I need these to process, deliver and account for your order (performance of a contract and legal obligations).
  • Customer account: if you create an account, your login details and order history.
  • Contact form and emails: your name, email and message, so I can reply to you.
  • Reviews: after a purchase you may receive an email asking for a review. If you leave one, your name and review may be shown on the website.
  • Website visits: your IP address, browser and device information and the pages you view. This is used for security (spam and fraud protection, blocking unwanted traffic by country) and for visitor statistics. The visitor’s country is detected using the IP2Location LITE database for IP geolocation.
  • Marketing cookies: only if you agree in the cookie banner, I use tools from Meta (Facebook/Instagram), Google and Pinterest to measure and improve advertising.

I do not sell your personal data.

3. Who I share data with

Only with services needed to run the shop:

  • Payment processing: WooPayments (Stripe). I never see or store your full card details.
  • Delivery: the postal and courier companies I use to ship your order, and the order tracking service CWILL (ParcelPanel).
  • Tax calculation: Stripe Tax.
  • Review requests: Customer Reviews for WooCommerce (CusRev).
  • Website hosting, email delivery, security and statistics: my hosting provider, Jetpack and Akismet (Automattic), Burst Statistics and IP2Location.
  • Advertising (only with your consent): Meta, Google and Pinterest.
  • Authorities, when required by law (for example tax authorities).

Some of these companies are based outside the EU, mainly in the USA. In those cases your data is protected by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

4. How long I keep data

  • Order and invoice records: 10 years, as required by Lithuanian accounting law.
  • Customer accounts: until you ask me to delete your account.
  • Messages and contact form enquiries: up to 2 years after our last contact.
  • Cookies: see the cookie banner and cookie policy for each cookie’s lifetime.

5. Your rights

You can ask me to see, correct, delete or export your data, to restrict or object to its use, and you can withdraw your cookie consent at any time through the cookie banner. Email vaivanat@gmail.com and I will reply within one month.

If you think I handle your data unlawfully, you can complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or to the data protection authority in your own country.

6. Changes

I may update this policy when my shop or the services I use change. The date at the top shows the latest version.