Privacy policy
This policy explains what personal data we process when you use biscuitprint.com, why, and what rights you have. We collect only what is needed to price, produce and deliver your parts.
1. Who is responsible
Biscuit Systems, MB, company code 306824273, Laisvės al. 110, LT-44253 Kaunas, Lithuania is the data controller. Contact for anything about your data: [email protected].
2. What we collect
Contact details you give at checkout: email address, phone number and, if you enter it, your name.
Delivery details: the parcel locker you choose.
Order details: the files you upload, the options you choose, prices, order and payment status, and any note you write to us.
Payment: our payment provider tells us whether a payment succeeded and under which reference. We never receive your card number or bank login.
Technical data: IP address, browser type and the time of requests, kept in server logs for security and to limit abuse of the service.
Messages you send us by email.
3. Why we process it and on what legal basis
To price, produce and deliver your order and to send you emails about it: performance of the contract (GDPR Article 6(1)(b)).
To keep accounting records and issue invoices: our legal obligations (Article 6(1)(c)), under Lithuanian accounting law.
To keep the service secure, prevent fraud and abuse, and fix problems: our legitimate interests (Article 6(1)(f)).
We do not use your data for marketing and we do not send newsletters.
4. Who receives your data
Klix (operated by AS Citadele banka, Latvia) processes your payment and receives your email address, the order reference and amount.
Omniva (AB Omniva LT) delivers the parcel and receives your name, phone number and the chosen locker.
Our hosting and email delivery providers in the European Union store and transmit data on our behalf under data processing agreements.
We do not sell personal data and do not transfer it outside the European Economic Area except to processors that provide the safeguards required by the GDPR.
5. How long we keep it
Uploaded files that are not ordered are deleted 30 days after upload. Files from a paid order are kept for 30 days after dispatch so a defective part can be reprinted, then deleted. You can ask us to delete them earlier once the order is complete.
Order and payment records, including your contact details, are kept for 10 years as required by Lithuanian accounting law.
Server logs are kept for up to 90 days.
7. Your rights
You can ask us to access, correct, delete or export your personal data, to restrict processing, or to object to processing based on our legitimate interests. Write to [email protected]; we answer within one month.
You also have the right to complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, Vilnius, vdai.lrv.lt).
8. Changes
We may update this policy. The date at the top shows when it was last changed.