A starting draft based on the GDPR. Fill in the places marked with square brackets and add to it if you use other tools (for example Google Analytics or Meta Pixel).
Data controller
[company name], company code [code], address [address], email hello@goodhabitsstore.eu.
What data we collect and why
- Fulfilling your order — first and last name, email, phone, delivery address, order history. Legal basis: performance of a contract. Kept for 10 years (accounting requirements).
- Your account — sign-in details, if you create an account. Legal basis: contract. Kept until the account is deleted.
- Newsletter — email address and the date of consent. Legal basis: consent; you can unsubscribe at any time using the link in the email.
- Enquiries — name, email, message. Legal basis: our legitimate interest in replying. Kept for 1 year.
- Cookies — see our Cookie Policy.
Who we share data with
- Delivery companies (Omniva, DPD, LP Express) — only the data needed to deliver your parcel.
- Payment providers (Montonio, PayPal) — to process the payment; we never see your card details.
- Our website hosting and email providers ([provider]).
Your rights
You have the right to access your data, correct it, erase it, restrict its processing, port it, object to processing and withdraw your consent. Write to us at hello@goodhabitsstore.eu. You may also lodge a complaint with the State Data Protection Inspectorate (vdai.lrv.lt).
Policy last updated: 20 September 2026.