Privacy Policy
Updated on 12 November 2026
We value your privacy. This policy explains what personal data we collect, why we use it, whom we share it with, how long we keep it and what rights you have. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania and the Law on Electronic Communications.
1. Who processes your data
Data controller: UAB „Globus sitis“ (ISTORE.LT), company code 304123850, VAT code LT100009789715, Smolensko g. 10D-38, Vilnius, Lithuania.
Contact for data protection matters: [email protected], tel. +370 674 87407. We have not appointed a data protection officer, so please use these contacts for all questions.
This policy applies to the websites istore.lt and istore.lv, our store and our customer service by phone and e-mail.
2. What data we collect
Data you provide:
- first name, last name, e-mail, phone number, delivery and billing address; if you buy for a company — company details and your position;
- order information: products, prices, invoices, delivery method, comments;
- payment information: payment method and status; for bank transfers — payer's name and account number; for refunds — the bank account you provide. We do not see or store payment card details;
- for leasing and rental: personal identification number, identity document details and other data requested by the financing company (usually provided directly to the financing company);
- for insurance and extended warranty: date of birth, device serial number;
- for Trade-in (buying back used devices): personal identification number, bank account, device model and serial (IMEI) number;
- for warranty service and returns: device details, description of the fault;
- correspondence, enquiries via website forms, questions and reviews about products, requests to be notified when a product is back in stock.
Data collected automatically: IP address, browser and device information, pages visited, products viewed and added to the cart, where you came from (e.g. an ad), cookie identifiers (see section 7); when you call us — phone number, time and duration of the call (we do not record calls); in our store and warehouse — CCTV recordings.
Data from other sources: from Google, Apple or Facebook when you sign in with their account (section 6); from payment companies and banks — payment confirmation; from leasing and rental companies — the financing decision; from courier services — shipment status; from public registers (Register of Legal Entities, State Tax Inspectorate, EU VIES, rekvizitai.vz.lt) — company details.
You are not obliged to provide data, but without the necessary data we cannot fulfil your order. By making a purchase you confirm that you are at least 18 years old.
3. Why we use data and how long we keep it
| Purpose | Legal basis | Retention period |
|---|---|---|
| Processing orders, delivery, payment, warranty service, returns | performance of a contract | 10 years from the order, then the data are anonymised |
| Invoices, accounting, Trade-in deeds | legal obligation | 10 years |
| Leasing, rental, insurance, extended warranty | conclusion and performance of a contract | as for orders; partners keep data under their own rules |
| Serving business (B2B) customers, checking company details, device enrolment in Apple Business Manager | performance of a contract, legitimate interest | company representatives' contacts — for the period of cooperation and 10 years after the last order |
| Communication with customers by e-mail, phone, SMS about orders | performance of a contract, legitimate interest | correspondence — 5 years from the last message; call history — 2 years |
| Website account | contract | until you delete the account |
| Newsletters and offers by e-mail | consent | until you withdraw consent, but no longer than 3 years from the last opened e-mail or purchase |
| Website operation and protection against attacks | legitimate interest | technical logs — up to 12 months |
| Sales statistics: the amount and products of each purchase are sent to Google Analytics from our server, without name, e-mail or cookies | legitimate interest | Google Analytics — no longer than 14 months |
| Website traffic statistics (with cookies) | consent | no longer than 14 months |
| Advertising on Google, Facebook and Instagram, measuring its effectiveness, target audiences | consent; for B2B contacts — legitimate interest | according to cookie lifetime; partners keep data under their own rules |
| CCTV in the store and warehouse (safety of people and property) | legitimate interest | 1 month, longer only when a recording is needed for an investigation |
| Defence of legal claims | legitimate interest | until the dispute is resolved |
When we process data on the basis of legitimate interest, we assess that your interests do not override ours, and you may object (section 10). We do not make automated decisions that produce legal effects for you. Leasing and rental decisions are made by the financing company under its own rules.
4. Whom we share data with
We do not sell data. We share only as much as is needed for the stated purpose.
| Recipient | Why |
|---|---|
| Courier services: UAB „DPD Lietuva“, AB „Lietuvos paštas“ (LP Express, Unisend) | delivery of shipments |
| Payment service providers: Paysera LT, UAB; Stripe Payments Europe, Limited; UAB „Decentralized“ (CoinGate); banks | payments and refunds according to the payment method you choose |
| Financing companies: UAB „Artea lizingas“, UAB „Nordrent“, UAB „Own 1“ (Orion), Fairown (only for previously concluded contracts) | leasing and rental, when you choose them |
| Insurance and warranty providers: UAB „Garantijų centras“ (Warranty Expert), Compensa Vienna Insurance Group, ADB; the SmartCare service provider | purchase insurance and extended warranty, when you buy them |
| The manufacturer (Apple) and its authorised distributors | device enrolment of business customers in Apple Business Manager, special orders, warranty service |
| Google Ireland Limited and Meta Platforms Ireland Limited | advertising and its measurement, website statistics (section 7), sign-in with Google or Facebook |
| Apple Distribution International Limited | Sign in with Apple |
| Marketing service providers | sending newsletters and SMS notifications, managing cookie consents |
| IT service providers | hosting of servers, e-mail and documents, website protection, accounting system, telephony, internal work and communication tools, artificial intelligence tools that help staff handle orders and enquiries |
| State Tax Inspectorate, law enforcement and other public authorities, courts | when required by law or to defend legal claims |
Delivery, payment, financing and insurance companies, Google and Meta also use data for their own purposes under their own privacy policies. Other partners process data only on our behalf, on our instructions and under data processing agreements. A specific list of recipients is available on request at [email protected].
5. Data outside the European Economic Area
Some of our partners (e.g. Google, Meta and some IT service providers) may also process data in the USA. Data are transferred only with the safeguards provided by the GDPR: the EU-U.S. Data Privacy Framework or the Standard Contractual Clauses approved by the European Commission.
6. Sign-in with Google, Apple and Facebook
You can create an account and sign in with your Google, Apple or Facebook account. With your permission we then receive your first name, last name, e-mail address and account identifier. Apple lets you hide your e-mail address — in that case we receive an address generated by Apple. We use these data only to administer your account, sign-in and orders.
We do not use data received from Google for advertising, do not sell them and do not share them with others, except when needed to fulfil an order or required by law. When using information received via Google APIs, we comply with the Google API Services User Data Policy, including the Limited Use requirements.
The data are kept as long as you have an account. You can delete them in your account („Delete account“) or by writing to [email protected]. You can also revoke access with the provider: myaccount.google.com/permissions, appleid.apple.com („Sign in with Apple“) or in Facebook settings („Apps and websites“).
7. Cookies
Here we explain what cookies and similar technologies the istore.lt and istore.lv websites use and how you can choose which of them you accept.
What cookies are
Cookies are small text files that a website stores in your browser. Pixels and tags work in a similar way: they are small pieces of code that tell a partner that you have visited a page. Cookies help the website work (e.g. remember your cart), measure traffic and show you relevant ads.
Which cookies we use
| Category | Used for | Set by |
|---|---|---|
| Strictly necessary always active | sign-in, cart, language, protection against attacks and bots, saving your cookie choice. The website would not work without them. | ISTORE.LT, CookieScript, Stripe |
| Functionality only with consent | additional features, e.g. newsletter subscription forms. | Sender.net, Meta (for sign-in with Facebook) |
| Performance only with consent | traffic statistics: which pages are most visited, where visitors come from, how the website is used. | Google (Google Analytics) |
| Targeting only with consent | measuring ad effectiveness, showing you ads on other websites and apps, building target audiences. | Google (Google Ads, YouTube), Meta (Facebook, Instagram) |
Until you consent, we do not set functionality, performance or targeting cookies, and Google tags run in a limited mode (Google Consent Mode).
Meta Pixel and business customer audiences
Meta Pixel. If you accept targeting cookies, we share with Meta your actions on the website: products viewed and added to the cart, checkout started, purchase and its amount. Together with them, the e-mail address and phone number you enter in website forms or in your order are sent to Meta in encrypted (SHA-256) form. Meta cannot restore the data from them, but can match the actions with its users. We are joint controllers with Meta Platforms Ireland Limited for the collection and transfer of these data. Meta carries out further processing under its own privacy policy (facebook.com/privacy/policy).
Business customer audiences. We may share encrypted e-mail addresses of business customers' representatives with Meta in order to show them ads about business solutions. You can object to this by writing to [email protected].
How to change your choice
On your first visit a cookie banner is shown: you can accept all cookies, reject them or choose categories. You can change your choice at any time here: Change cookie settings.
You can also delete or block cookies in your browser settings. Please note that if you block strictly necessary cookies, some website features (e.g. the cart) will not work.
You can also manage ad settings in partners' accounts: Google My Ad Center, Meta ad preferences.
Partners' privacy policies
- Google: policies.google.com/privacy; how Google uses data from websites: policies.google.com/technologies/partner-sites
- Meta (Facebook, Instagram): facebook.com/privacy/policy
- Cloudflare: cloudflare.com/privacypolicy
Full list of cookies
Below is a list of all cookies used on the website with their provider, purpose and lifetime. It is updated automatically when the website is scanned.
In addition to cookies, if you accept targeting cookies, data on the advertising source from Google and Meta are stored in your browser's local storage (localStorage).
8. Newsletters and notifications
We send newsletters (Apple news, offers, events) only with your consent, usually 1–2 times a week. We can see whether an e-mail was opened and which links were clicked. You can unsubscribe by clicking the link at the bottom of the e-mail, in the „Newsletter subscription“ section of your account or by writing to [email protected].
Order notifications (e-mails, SMS) are not advertising. We send them to perform the contract.
9. How we protect data
We use an encrypted connection (HTTPS). Only employees who need access for their work can access data. We protect our systems against attacks, make backups and keep software up to date. Employees are bound by confidentiality obligations.
10. Your rights
You have the right to:
- access your data and receive a copy;
- rectify inaccurate data;
- request erasure of your data („right to be forgotten“). Data we must keep by law (e.g. invoices) will be deleted when the retention period ends;
- restrict processing;
- object to processing based on legitimate interest and, at any time, to direct marketing;
- withdraw your consent at any time;
- receive the data you provided in a commonly used electronic format and transfer them to another controller;
- lodge a complaint with the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, 10312 Vilnius, [email protected]) or with the data protection authority of the EU country where you live.
Send requests to [email protected] or call +370 674 87407. We may ask you to confirm your identity. We reply within 1 month. You can also delete your account yourself: sign in and click „Delete account“. Your account and personal data are then deleted and purchase data are anonymised, except for data we are required to keep.
11. Links to other websites
The website contains links to partners' websites (leasing and insurance companies, manufacturers). Their own privacy policies apply there.
12. Changes to this policy
We review the policy at least once a year and whenever our data processing changes. The current version is published on this page with the date of the update. Previous version (valid until 12 November 2026).
13. Frequently asked questions
What data do you hold about me?
The data you provided when buying or contacting us: name, contact details, address, orders, correspondence. If you accepted cookies — also information about your browsing on the website. You can get a copy of all data we hold about you by writing to [email protected].
Whom do you share my data with?
Only those needed to fulfil your order: the courier service, the payment, leasing or insurance company you chose, and IT service providers who help us. If you accepted cookies — also the advertising partners Google and Meta. We do not sell data. A specific list of recipients is available on request.
How do I delete my account and data?
Sign in to your account and click „Delete account“. Your account and personal data are deleted immediately and purchase information is anonymised. The law requires us to keep invoices for 10 years, so we cannot delete them immediately. No account? Write to [email protected].
How do I unsubscribe from the newsletter?
Click the link at the bottom of any newsletter or untick the box in the „Newsletter subscription“ section of your account. You will still receive order notifications, as they are not advertising.
Why do I see iStore ads on Facebook, Instagram or Google?
If you accepted targeting cookies, advertising systems know that you visited our website and may show you related ads. Don't want that? Change your cookie settings and withdraw consent for targeting cookies.
How do I change my cookie choice?
At any time here: Change cookie settings. You can also delete cookies in your browser.
Do you record phone calls?
No. We only see the call history: number, time and duration. We use it to call you back and improve our service.
Is there CCTV in the store?
Yes, there are cameras in the store and warehouse, indicated by signs at the entrance. Recordings are kept for 1 month, longer only if needed to investigate an incident. Only authorised persons can view them.
Is my payment card data safe?
We neither see nor store card details. They are handled by payment service providers (Stripe, Paysera) in their secure systems.
I signed in with Google, Apple or Facebook. What do you receive?
Only your first name, last name, e-mail address and account identifier. We do not receive your password or other account information. You can also revoke access in the provider's settings.
What should I do if I think my data are being processed improperly?
Write to [email protected] or call +370 674 87407 — we will reply within 1 month. You also have the right to contact the State Data Protection Inspectorate of Lithuania ([email protected]).