Privacy policy
Last updated: 21 September 2026
This policy explains what personal data Vinted Ledger ("we", "us") collects when you visit or buy from this store, why we collect it, and what rights you have. We operate from Lithuania and follow the EU General Data Protection Regulation (GDPR).
Who is responsible for your data
Vinted Ledger is the data controller. You can reach us through the Contact page or at the email address listed in our Contact information policy.
What we collect
- Order details: your name, email address, billing address and what you bought. We need these to take payment and email you your list.
- Payment details: handled by Shopify Payments and the payment provider you choose at checkout. We never see or store your full card number.
- Messages: anything you send us through the contact form or by email.
- Device and usage data: IP address, browser type, pages viewed and how you reached the store, collected through cookies and similar technology.
Why we use it and on what legal basis
- To process your order, deliver your download and give support (performance of a contract).
- To keep records for tax and accounting (legal obligation).
- To prevent fraud and keep the store secure (legitimate interest).
- To send marketing emails, only if you opted in (consent). Every email has an unsubscribe link.
Cookies
The store uses cookies needed to run the cart and checkout. Analytics and marketing cookies load only after you accept them in the cookie banner, and you can change that choice at any time.
Who we share it with
We share data only with the services that run the store: Shopify (hosting, checkout and email delivery), payment providers, and our accountant where the law requires it. Shopify may process data outside the EU under Standard Contractual Clauses. We do not sell your personal data.
How long we keep it
Order records are kept for 10 years, as Lithuanian accounting law requires. Support messages are deleted two years after the conversation ends. Marketing consent lasts until you withdraw it.
Your rights
You can ask to see, correct, delete or export your data, object to its use, or restrict how we use it. Contact us and we will reply within one month. If you are unhappy with our answer, you can complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt) or the data protection authority where you live.
Children
The store is not meant for anyone under 16, and we do not knowingly collect data from children.
Changes
When this policy changes, we update the date at the top of this page.