Last updated: 2026-06-06

This Privacy Policy explains how MB “Veiksmo tapyba” collects, uses, stores and processes personal data when you visit splatterstudio.lt, use our online store, register for classes, events or otherwise contact us.

1. Data Controller

Data controller:

MB “Veiksmo tapyba”
Company code: 306623007
Address: Vytenio g. 50-7, LT-03229 Vilnius, Lithuania
Email for privacy matters: labas@splatterstudio.lt
Phone: +370 691 99500

No Data Protection Officer has been appointed.

The business operates in Lithuania.

2. When we collect personal data

We may collect and process personal data when you:

– visit our website;
– use our online store;
– purchase physical products, gift cards or services;
– create a user account;
– register for classes, activities or events;
– complete registration or inquiry forms;
– contact us by email, phone or other channels;
– provide consent for photo or video use;
– consent to analytics or advertising cookies.

3. What data we may process

Depending on the service used, we may process the following data.

3.1. Website visitor data

– IP address;
– device and browser information;
– visited pages;
– date and time of visit;
– traffic source;
– cookie consent choices;
– technical website usage data.

This data is used for website operation, security, analytics and advertising performance measurement, where the required consent has been provided.

3.2. Online store and customer data

When you purchase through the website or use the online store, we may process:

– name and surname;
– email address;
– phone number;
– delivery and billing address;
– company details, if purchasing on behalf of a legal entity;
– order details;
– selected payment method;
– order status;
– invoice details;
– account login and order history data.

We do not directly store full payment card data when payments are processed by a third-party payment service provider.

3.3. Registration data for classes and events

In registration forms, we may collect:

– child’s name and surname;
– child’s age;
– parent’s or guardian’s name and surname;
– contact phone number;
– email address;
– selected group;
– selected participation period;
– data of additional registered children;
– information about allergies, health notes or other important information, if provided;
– consent for data processing;
– consent or refusal regarding photo and video use.

Registration data may be stored in WordPress / form systems, sent by email and, where needed, exported to CSV or Excel for administration purposes.

3.4. Children’s data

Some of our services are intended for children. In such cases, children’s personal data is processed only to the extent necessary to organize the activity, confirm participation, communicate with parents or guardians and provide the service safely.

Information about allergies, health notes or other important circumstances is collected only to the extent voluntarily provided by parents or guardians and only for the safe organization of activities.

4. Purposes of data processing

We use personal data for the following purposes:

– to accept, process and administer orders;
– to process payments;
– to provide products and services;
– to administer gift cards;
– to create and manage user accounts;
– to administer registrations for classes and events;
– to contact you regarding place confirmation, payment or additional details;
– to send automatic confirmation that a registration has been received;
– to issue invoices;
– to comply with accounting and tax obligations;
– to ensure website security and technical operation;
– to analyze website traffic;
– to measure Google Ads and other advertising campaign results, where consent has been given;
– to respond to inquiries;
– to protect our rights and legitimate interests in case of a dispute.

5. Legal bases for processing

We process personal data based on one or more of the following legal bases:

– performance of a contract, when you purchase products or services;
– your consent, where you agree to non-essential cookies, photo / video use or provide additional data;
– legal obligation, where we are required to retain accounting, tax or other legally required documents;
– legitimate interest, when we administer the website, ensure security, respond to inquiries or protect our rights;
– consent provided by parents or guardians and the need to safely organize activities, where child-related important information is provided.

6. Payments

Payments on the website may be processed through third-party payment service providers, such as Stripe, PayPal, Paysera, Montonio, WooPayments or other providers indicated on the website.

Payment providers may process payment data according to their own privacy policies and legal obligations. We do not directly store full bank card details when payments are processed through a third-party payment system.

7. Delivery

If physical products are purchased, data may be transferred to delivery service providers to fulfil the order. In such cases, only the data necessary for delivery is transferred, such as name, surname, phone number, email address, address and order information.

8. Invoices and accounting

Invoices may be issued for orders. For accounting and tax purposes, data may be transferred to accounting systems, accounting service providers and authorities where required by law.

9. External registration and event systems

For some services, events or activities, registration may take place through external platforms. Such platforms may include Google Forms, Calendly, Eventbrite, Tally, Typeform, Meta Lead Forms or other registration, form, calendar or event management systems.

When a user is redirected to an external platform, the privacy terms of that platform may also apply. In such cases, we recommend reviewing the privacy policy of the relevant platform.

10. Photos and video material

Photos or video material may be taken during classes or events only when participants are informed and the required consent is obtained.

Children’s photos or video material may be used on the website, social media, advertising or other communication only with separate consent from parents or guardians. Such consent is optional, and refusing it does not prevent participation in activities unless explicitly stated otherwise in a specific case.

Consent for photo or video use may be withdrawn by contacting labas@splatterstudio.lt. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

11. Who we may share data with

Data may be shared only to the extent necessary for the stated purposes:

– payment service providers;
– delivery service providers;
– accounting service providers and accounting systems;
– website hosting, IT maintenance and technical service providers;
– email service providers;
– form, registration or event management systems;
– Google and other analytics or advertising platforms, where consent has been given;
– law enforcement, supervisory or other authorities where required by law;
– consultants or lawyers where necessary to protect our rights.

12. Transfers outside the European Economic Area

Some service providers, such as Google, payment, form, advertising or other technology platforms, may process data outside the European Economic Area.

In such cases, data is transferred only where appropriate safeguards apply, such as European Commission Standard Contractual Clauses, provider security commitments or other lawful transfer mechanisms.

13. How long we keep data

We retain personal data no longer than necessary for the relevant purpose or as required by law.

Indicative retention periods:

– online store order, invoice and accounting data is retained according to statutory accounting and tax document retention requirements;
– account data is retained while the account is active or until deletion, unless there is a legal basis to retain it longer;
– registrations for children’s classes are retained for up to 12 months after the end of the activities;
– automatic and administrative emails are retained for up to 12 months unless longer retention is required for inquiry, service or dispute administration;
– photo / video consents are retained until withdrawal or while the related material is used;
– cookie consent records are retained for up to 12 months;
– analytics data is retained according to Google Analytics data retention settings.

14. Your rights

You have the right to:

– receive information about the processing of your data;
– access your personal data;
– request correction of inaccurate data;
– request deletion of data where applicable;
– request restriction of processing;
– object to processing based on legitimate interest;
– withdraw consent where processing is based on consent;
– request data portability where applicable;
– submit a complaint to the State Data Protection Inspectorate in Lithuania.

To exercise your rights, contact us at labas@splatterstudio.lt.

15. Cookies and similar technologies

The website uses necessary, functional, analytics and advertising cookies. Non-essential cookies are used only with your consent.

More information is provided in the Cookie Policy:
https://splatterstudio.lt/en/cookie-policy/

16. Changes to this policy

This Privacy Policy may be updated when the website, services, tools used or legal requirements change.

The latest version is always published on this page.