Privacy Policy

Effective Date: September 15, 2026 Last Updated: September 15, 2026

This Privacy Policy (“Policy”) explains how OpalNirvana (“we”, “us”, “our”, or the “Seller”) collects, uses, shares, and protects personal information (“Personal Information”) when you visit or shop on our website (the “Website”).

We are the data controller responsible for your Personal Information. If you have any questions about this Policy or how we handle your data, please contact us using the details in the “Contact Us” section below.

1. Definitions

Website: The OpalNirvana online store, where Buyers can place orders for products and services and arrange delivery.
Goods: Products and services sold and delivered by the Seller through the Website.
Order: A request placed by a Buyer on the Website to purchase and receive Goods.
Delivery: The process of shipping ordered Goods to the Recipient.
Buyer: An individual aged 18 or older, or a legal entity, who uses the Website to purchase Goods.
Recipient: The person or entity named in an Order to receive the Goods. This may be the Buyer or someone else.
Seller: The company that owns and operates the Website and supplies the Goods.
Personal Information: Any information that identifies you or can reasonably be linked to you, such as your name, email address, phone number, or IP address.

2. Information We Collect

Contact and account information. Your name, email address, phone number, billing address, and delivery address. You provide this when you place an order, create an account, or contact us.

Recipient information. If you send an order to someone else, we collect the recipient’s name, address, and phone number so we can deliver it. Please only share another person’s details if you have their permission.

Payment information. Payments are handled by secure third-party payment processors. We do not store your full card number or bank login details on our systems. We may receive limited information from the processor, such as the payment method type, the last four digits of your card, and confirmation that the payment succeeded.

Order and shopping history. Items you buy, add to your cart, or view, along with order dates and amounts.

Communications. Records of emails, calls, WhatsApp messages, and other correspondence with our customer support team.

Device and usage information. Your IP address, browser type, device type, operating system, time zone, pages visited, links clicked, and how you interact with the Website. This is collected automatically through cookies and similar technologies.

Content you submit. Reviews, photos, videos, or other content you upload to the Website or share with us on social media.

3. How We Collect Information

Directly from you when you browse, place an order, create an account, subscribe to our emails, leave a review, or contact us.
Automatically through cookies, pixels, log files, and similar technologies (see Section 8).
From third parties, including payment processors, delivery companies, analytics providers, and advertising partners.
From social media platforms when you interact with our pages, posts, or ads, depending on your settings on those platforms.

4. How We Use Your Information and Our Legal Bases

Under the EU General Data Protection Regulation (GDPR), we must have a legal basis for using your Personal Information. The table below explains what we do and why.

Purpose	Examples	Legal basis
Fulfilling your order	Processing payment, arranging delivery, sending order confirmations and invoices	Performance of a contract
Customer support	Answering questions, handling returns, refunds, and complaints	Performance of a contract; legitimate interests
Marketing emails	Newsletters, promotions, and special offers	Consent (you can withdraw at any time)
Targeted advertising	Showing you relevant ads on social media and other websites	Consent
Analytics and improvement	Understanding how visitors use the Website and fixing problems	Consent (for non-essential cookies); legitimate interests
Security and fraud prevention	Detecting suspicious orders and protecting accounts	Legitimate interests; legal obligation
Legal and tax compliance	Keeping accounting records and responding to lawful requests from authorities	Legal obligation

Where we rely on legitimate interests, we have considered your rights and concluded that our interests do not override them. You can object to this processing at any time (see Section 10).

5. How We Share Your Information

We share Personal Information only as needed for the purposes above, with:

Payment processors, to handle payments securely.
Delivery and logistics companies, to ship your order.
Service providers, including website hosting, email, customer support, and analytics tools, who act on our instructions.
Advertising and marketing partners, where you have given consent.
Professional advisers, such as accountants and lawyers, where necessary.
Authorities and law enforcement, when required by law or to protect our rights, customers, or others.
A buyer or successor, if our business is sold, merged, or restructured.

We do not sell your Personal Information.

6. International Data Transfers

We are based in Lithuania, in the European Economic Area (EEA). Some of our service providers may process data outside the EEA. When this happens, we make sure appropriate safeguards are in place, such as a European Commission adequacy decision or the Commission’s Standard Contractual Clauses. You can contact us for more information about these safeguards.

7. How We Protect Your Information

We use appropriate technical and organizational measures to protect your Personal Information, including encrypted (HTTPS) connections, access controls, and working only with trusted service providers. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the relevant authorities of a data breach where the law requires it.

8. Cookies and Similar Technologies

Cookies are small files stored on your device that help the Website work and help us understand how it is used.

Essential cookies are needed for the Website to function (for example, keeping items in your cart). These do not require your consent.
Analytics cookies help us understand how visitors use the Website.
Marketing cookies are used to show you relevant ads on other websites and social media.

We only use analytics and marketing cookies with your consent, which you can give or refuse through our cookie banner. You can change your choices at any time through the cookie settings on the Website or in your browser settings. Blocking some cookies may affect how the Website works.

9. How Long We Keep Your Information

We keep Personal Information only as long as necessary for the purposes described in this Policy:

Order and invoice records are kept for the period required by applicable tax and accounting laws.
Account information is kept while your account is active, and deleted or anonymized after you close it, unless we need to keep it for legal reasons.
Marketing data is kept until you unsubscribe or withdraw your consent.
Customer support records are kept as long as needed to resolve your request and handle any follow-up.

When data is no longer needed, we delete or anonymize it securely.

10. Your Rights

If you are in the EEA, UK, or another region with similar laws, you have the right to:

Access the Personal Information we hold about you.
Correct inaccurate or incomplete information.
Delete your information (“right to be forgotten”), subject to legal exceptions.
Restrict how we use your information in certain situations.
Object to processing based on legitimate interests, and to direct marketing at any time.
Data portability, meaning you can receive your data in a common format or ask us to send it to another provider.
Withdraw consent at any time, without affecting processing that happened before you withdrew it.

California and other US state residents may have similar rights, including the right to know what Personal Information we collect, to request deletion or correction, to opt out of targeted advertising, and not to be discriminated against for exercising these rights.

To exercise any of your rights, contact us using the details below. We will respond within one month, or within the time required by the law that applies to you. We may need to verify your identity before acting on your request.

11. Your Privacy Choices

Marketing emails: Click the “unsubscribe” link in any of our emails, or contact us.
Cookies: Update your preferences through our cookie settings or your browser.
Advertising: Adjust your ad preferences on social media platforms, or withdraw cookie consent on our Website.
Account and data requests: Contact us to access, update, or delete your information.

12. Children

The Website is not intended for anyone under 18, and we do not knowingly collect Personal Information from children. If you believe a child has provided us with Personal Information, please contact us and we will delete it.

13. Third-Party Links

The Website may link to other websites or social media platforms. We are not responsible for their privacy practices, so please review their privacy policies before sharing any information with them.

14. Changes to This Policy

We may update this Policy from time to time. The “Last Updated” date at the top shows when it was last changed. If we make significant changes, we will let you know through the Website or by email where appropriate.

15. Contact Us

If you have questions, concerns, or requests about this Policy or your Personal Information, please contact us:

Email: support@opalnirvana.com Alternate email: opalnirvanaa@gmail.com Phone / WhatsApp: +370 670 135 31 Address: Saulėtekio al. 4, LT-10222 Vilnius, Lithuania

16. Complaints

If you are unhappy with how we have handled your Personal Information, please contact us first so we can try to resolve it. You also have the right to lodge a complaint with a data protection authority. In Lithuania, this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija). If you live elsewhere in the EEA, you can contact your local data protection authority.