Privacy Policy

This Privacy Policy explains how norecipe.eu (“we”, “us”) processes personal data when you browse the site, create an account, or place an order.

Controller: Operator of norecipe.eu · Contact: norecipe.eu@gmail.com · Contact page

Last updated: 20 August 2026

1. Scope

This Policy applies to personal data processed via norecipe.eu and related order fulfilment. It is intended to comply with the EU General Data Protection Regulation (GDPR) and applicable Lithuanian data protection law.

2. Data we collect

  • Identity & contact: name, email, phone, billing/shipping address, company name (if provided).
  • Account: login credentials (stored hashed), order history, saved addresses.
  • Transaction: products ordered, amounts, payment status, invoices. Card data is processed by payment providers — we do not store full card numbers.
  • Communications: messages you send via contact forms or email.
  • Technical: IP address, device/browser type, approximate location derived from IP, pages viewed, referrer, cookie IDs.
  • Age confirmation: records of age-gate / 21+ acknowledgement where used.

3. Purposes and legal bases (GDPR Art. 6)

  • Contract performance: process orders, payments, delivery, returns, account management.
  • Legitimate interests: site security, fraud prevention, network integrity, improving shop UX, defending legal claims — balanced against your rights.
  • Legal obligation: tax, accounting, and regulatory record-keeping.
  • Consent: non-essential cookies/analytics (where required), marketing emails (only if you opt in). You may withdraw consent at any time.

4. Who we share data with

We do not sell personal data. We share data only with processors/service providers needed to run the store, under appropriate contracts:

  • Hosting / server providers;
  • Payment processors / gateways;
  • Shipping carriers and logistics partners;
  • Email / transactional notification tools;
  • Analytics providers (only if enabled and, where required, consented);
  • Professional advisers or authorities when legally required.

5. International transfers

If a provider processes data outside the EEA/UK, we use appropriate safeguards (e.g. EU Standard Contractual Clauses or an adequacy decision) where required by GDPR.

6. Retention

  • Orders & invoices: typically kept for the period required by tax/accounting law (often up to 10 years in Lithuania) and then deleted or anonymised.
  • Accounts: while active and for a reasonable period after last login / closure request, unless longer retention is required.
  • Support emails: as needed to resolve enquiries, then deleted or archived with limited access.
  • Security logs: typically for a short period (e.g. weeks to months) unless investigating abuse.
  • Marketing consent records: for as long as consent is relied upon, plus evidence of consent.

7. Your rights

Subject to GDPR conditions, you may request:

  • Access to your personal data;
  • Rectification of inaccurate data;
  • Erasure (“right to be forgotten”) where applicable;
  • Restriction of processing;
  • Data portability (where processing is based on consent or contract and is automated);
  • Objection to processing based on legitimate interests;
  • Withdrawal of consent without affecting prior lawful processing.

To exercise rights, email norecipe.eu@gmail.com from the address associated with your account/order. We may need to verify your identity. We aim to respond within one month (extendable as permitted by GDPR for complex requests).

You may lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) or another EU supervisory authority of your habitual residence.

8. Cookies and similar technologies

  • Essential cookies: required for cart, checkout, login, security, and preference storage. These do not require consent under ePrivacy rules for strictly necessary cookies.
  • Analytics / marketing cookies: used only if enabled and after consent via the cookie notice, where required.

You can manage non-essential cookies through the on-site cookie banner/settings and via your browser controls. Blocking essential cookies may break checkout.

9. Security

We apply technical and organisational measures appropriate to the risk (HTTPS, access controls, least-privilege hosting). No method of transmission or storage is 100% secure; please use a strong unique password for your account.

10. Children

The site is not directed to persons under 21. We do not knowingly collect personal data from children. If you believe a minor provided data, contact us for deletion.

11. Automated decision-making

We do not use solely automated decision-making that produces legal or similarly significant effects about you, beyond standard fraud/payment risk checks by payment providers.

12. Changes

We may update this Policy by posting a new version on this page with a revised date. Material changes may also be highlighted via the site or email where appropriate.

13. Related documents

See also: Terms & Research Use Policy, Payment & Delivery, Refund & Returns.