Privacy policy
This policy explains what personal data elzeem.com collects and how it is used, in line with the EU General Data Protection Regulation (GDPR). The data controller is Elzė Mackevičiūtė (trading as elze.macke), Lithuania.
What data we collect
When you place an order, we collect your name, email address, and shipping address (collected directly by Stripe during checkout). When you use the contact or commission form, we collect your name, email address, and the message you send. If you order a custom postcard, the photo you upload is sent to elze by email and is not stored in any database - we do not retain a copy after the order is fulfilled. Payment is processed entirely by Stripe; we never see or store your card details.
How we use it
We use this data only to fulfil your order, ship your item, respond to your enquiry, or complete a commission. We do not use your data for marketing or sell it to third parties.
Legal basis for processing
Order and shipping data is processed under Article 6(1)(b) GDPR (contractual necessity). Contact enquiries are processed under Article 6(1)(f) GDPR (legitimate interest in responding to messages sent to us).
Third parties
We use Stripe to process payments and collect shipping addresses, and Resend to send transactional order/contact emails. Both are GDPR-compliant processors. We also use Vercel Analytics and Speed Insights to measure visitor numbers - this system stores no personal data, uses no cookies, and is GDPR-compliant. We do not collect advertising data or use third-party ad cookies.
How long we keep it
Order and message data lives in our email inbox and in Stripe/Resend's systems (for accounting and fraud-prevention purposes), not in a database we control. You can ask us to delete data we hold at any time, subject to legal recordkeeping requirements.
Your rights
Under GDPR you have the right to access, correct, or request deletion of your personal data, to object to or restrict its processing, to receive a copy of your data in a portable format (data portability, Article 20), and to lodge a complaint with your local data protection authority (in Lithuania: the State Data Protection Inspectorate, vdai.lrv.lt). To exercise any of these rights, email us below.
Contact
Questions about your data: elzemacke.shop@gmail.com