Privacy Policy

Last updated: 16 September 2026

This Privacy Policy explains how MB “Teplep” collects, uses, stores and shares personal data when you visit teplep.com, place an order, upload an image, contact us or otherwise use our services.

This Privacy Policy applies in accordance with the General Data Protection Regulation (EU) 2016/679 (“GDPR”) and other applicable data protection laws.

1. Data Controller

The controller responsible for processing your personal data is:

MB “Teplep”
Company code: 306573159
VAT identification number: LT100018052912
Registered address: Stasio Antano Bačkio g. 34-1, LT-11320 Vilnius, Lithuania
Email: info@teplep.com
Telephone: +370 632 89999
Website: https://teplep.com

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following personal data.

Contact and identification data

This may include:

• your name and surname;

• email address;

• telephone number;

• billing and delivery address;

• company name, company code and VAT identification number, where applicable.

Order and transaction data

This may include:

• products ordered and selected product options;

• order number, date, price and payment status;

• billing and delivery information;

• delivery tracking information;

• information about returns, refunds, complaints and customer support requests.

We do not normally receive or store complete payment card details. Payment information is processed by the payment service provider selected during checkout.

Customer-uploaded images and personalisation information

When ordering a personalised product, you may provide:

• photographs or other image files;

• names, dates, text or other personalisation instructions;

• information contained in messages relating to the creation of the artwork;

• photographs showing you, family members, children, pets or other individuals.

A photograph of an identifiable person constitutes personal data. We process uploaded images only to create, review, produce and deliver the ordered product, provide customer support and resolve complaints.

We do not use customer-uploaded images for advertising, publish them on our website or social media, or use them in a public portfolio without separate permission.

We do not use customer-uploaded images for biometric identification or to train our own general-purpose artificial intelligence models.

If you upload an image depicting another person, you confirm that you are authorised to provide the image and request its processing. If an image depicts a child, you must be the child’s parent or legal guardian, or have appropriate permission from the child’s parent or legal guardian.

Please do not provide sensitive personal information that is not necessary for fulfilling your order.

Communications and customer service data

We may process information contained in:

• emails and contact forms;

• telephone communications;

• social media messages;

• product reviews;

• complaints and return requests;

• other communications sent to us.

Website and device data

When you use our website, we or our service providers may automatically collect:

• IP address;

• browser and device type;

• operating system;

• approximate location derived from the IP address;

• pages viewed and actions performed on the website;

• referral source;

• cookie identifiers;

• shopping cart and checkout activity;

• technical and security logs.

Marketing preference data

We may collect information about:

• whether you have agreed to receive marketing communications;

• your cookie and tracking preferences;

• whether you opened or interacted with marketing communications.

3. How We Collect Personal Data

We collect personal data:

• directly from you when you place an order, upload an image, contact us, create an account or subscribe to marketing;

• automatically through cookies, pixels and similar technologies;

• from Shopify and applications connected to our online store;

• from payment service providers;

• from delivery and logistics providers;

• from analytics, advertising and fraud-prevention service providers;

• from social networks when you communicate with us through those platforms.

4. Purposes and Legal Bases for Processing

We process personal data only when we have a valid legal basis.

Processing and fulfilling orders

We process contact details, order information, payment confirmation, delivery details, uploaded images and personalisation instructions in order to:

• accept and process your order;

• create a standard or personalised artwork;

• process payment;

• produce and package the product;

• deliver the order;

• communicate about the order;

• handle returns, refunds, defects and complaints.

Legal basis: performance of a contract or taking steps at your request before entering into a contract.

Accounting, tax and legal compliance

We process and retain invoices, transactions, payment records and related information in order to comply with accounting, tax, consumer protection and other legal obligations.

Legal basis: compliance with a legal obligation.

Customer service and dispute resolution

We process communications and order information in order to answer questions, provide support, investigate complaints, prevent misuse and establish, exercise or defend legal claims.

Legal basis: performance of a contract and our legitimate interests in providing customer service, protecting our rights and resolving disputes.

Website operation, security and fraud prevention

We process technical data and security logs to operate the website, keep it secure, detect fraudulent activity, prevent unauthorised access and correct technical problems.

Legal basis: our legitimate interests in operating a secure and reliable online store and, where applicable, compliance with legal obligations.

Analytics and website improvement

Subject to your cookie choices, we may use analytics services, including Google Analytics and Hotjar, to understand how visitors use our website and improve its functionality and user experience.

Legal basis: your consent, where consent is required.

Advertising and marketing measurement

Subject to your cookie choices, we may use advertising and measurement tools, including Google Ads and Meta technologies, to measure advertising performance and display relevant advertising.

Legal basis: your consent.

Non-essential analytics and advertising technologies should not be activated before you provide consent where consent is required by law.

Email marketing

We send promotional emails only where we have a lawful basis to do so. You may unsubscribe at any time by using the unsubscribe link in an email or contacting us.

Legal basis: your consent or, where permitted by applicable law, our legitimate interests in promoting similar products to existing customers.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

5. Artificial Intelligence and Image-Processing Tools

We may use artificial intelligence-assisted and other digital image-processing tools to:

• transform a customer-provided photograph into an artwork;

• remove or adjust backgrounds;

• improve image quality;

• create artistic effects;

• prepare files for printing;

• assist with product descriptions and other website content.

Where a customer image is processed using an external service provider, we provide only the information reasonably necessary to perform the requested service. Such providers may process information on our behalf under their applicable contractual and data protection terms.

AI-assisted processing is used to help create or prepare the ordered product. It is not used to make decisions about you that produce legal or similarly significant effects.

Customer-uploaded images are not used by us for unrelated profiling, advertising or biometric identification.

6. Cookies and Similar Technologies

Our website uses cookies, pixels and similar technologies.

These technologies may be categorised as:

• strictly necessary cookies, required for website operation, shopping cart functionality, checkout, security and privacy preferences;

• functional cookies, used to remember selected preferences and improve website functionality;

• analytics cookies, used to understand website traffic and usage;

• advertising cookies, used to measure campaigns and provide relevant advertising.

Strictly necessary cookies may be used without consent where permitted by law. Non-essential analytics, advertising and similar technologies are used only after consent where consent is required.

You can accept, reject or modify non-essential cookie preferences through the cookie banner or the Cookie Preferences link available on the website.

The website may use technologies provided by Shopify, Google, Meta and Hotjar. Additional information about individual cookies, their providers, purposes and duration should be made available in our Cookie Policy or cookie preference tool.

You can also control cookies through your browser settings. Disabling strictly necessary cookies may prevent parts of the website or checkout from working correctly.

7. Service Providers and Recipients

We may disclose personal data only where necessary to operate our business, provide the requested services or comply with legal obligations.

Recipients may include:

• Shopify, which provides the e-commerce platform, hosting, checkout and related infrastructure;

• payment service providers, banks and fraud-prevention providers;

• delivery and logistics providers, including Venipak, where applicable;

• printing, production and fulfilment partners, where their involvement is necessary to fulfil an order;

• cloud hosting, file storage, email and IT service providers;

• AI-assisted and digital image-processing service providers used to prepare personalised artwork;

• website analytics and user-experience providers, including Google Analytics and Hotjar, subject to consent;

• advertising and marketing providers, including Google Ads and Meta, subject to consent;

• accountants, legal advisers, insurers and other professional advisers;

• public authorities, courts or law-enforcement bodies where disclosure is required by law;

• potential purchasers or advisers in connection with a legitimate corporate transaction, subject to appropriate confidentiality measures.

Service providers acting on our behalf may process personal data only for the purposes of providing their services and in accordance with applicable contracts and data protection requirements.

Shopify may also process certain customer data for its own purposes, depending on the Shopify services used. More information is available in the Shopify Consumer Privacy Policy.

We do not sell customer-uploaded photographs or other personal data.

8. International Data Transfers

Some service providers may process personal data outside Lithuania or the European Economic Area.

Where personal data is transferred outside the European Economic Area, we use an appropriate transfer mechanism where required, such as:

• a European Commission adequacy decision;

• European Commission Standard Contractual Clauses;

• another legally recognised safeguard.

You may contact us for additional information about the safeguards applicable to a particular transfer.

9. Data Retention

We retain personal data only for as long as necessary for the purpose for which it was collected.

The applicable retention period depends on:

• the time required to fulfil the order and provide customer service;

• mandatory accounting, tax and record-keeping requirements;

• applicable limitation periods;

• the need to resolve complaints or legal disputes;

• security, fraud-prevention and backup requirements;

• the duration of your account or subscription;

• your consent and cookie preferences.

Order, invoice, payment and delivery records are retained for the period required by applicable accounting, tax and other laws.

Customer-uploaded images and production files are retained only for as long as reasonably necessary to create and deliver the product, perform quality control and resolve potential complaints. After they are no longer required, they are deleted or securely anonymised, subject to limited backup retention and any applicable legal obligations.

Customer-service communications are retained for as long as necessary to resolve the request and protect legal rights.

Marketing information is retained until you unsubscribe, withdraw consent or the information is no longer required for marketing purposes.

Cookie and analytics data is retained according to the duration shown in the applicable cookie preference tool or Cookie Policy.

10. Data Security

We use appropriate technical and organisational measures intended to protect personal data against:

• unauthorised access;

• accidental loss;

• unlawful use or disclosure;

• alteration;

• destruction.

Access to customer-uploaded images and order information is limited to persons and service providers who need the information to fulfil the order or perform their duties.

However, no electronic transmission or storage system can be guaranteed to be completely secure.

11. Your Rights

Subject to the conditions and limitations established by law, you have the right to:

• obtain confirmation of whether we process your personal data;

• request access to your personal data;

• request correction of inaccurate or incomplete data;

• request deletion of your personal data;

• request restriction of processing;

• object to processing based on legitimate interests;

• object at any time to direct marketing;

• receive certain data in a structured, commonly used and machine-readable format;

• request transfer of eligible data to another controller;

• withdraw consent at any time where processing is based on consent;

• lodge a complaint with a data protection supervisory authority.

You also have the right not to be subject to a decision based solely on automated processing that produces legal effects or similarly significantly affects you, except where permitted by law.

To exercise your rights, contact us at info@teplep.com. We may request information necessary to verify your identity and protect your data.

We will respond within the period required by applicable law, normally within one month. This period may be extended where permitted by law if the request is complex or numerous.

12. Marketing Choices

You may stop receiving promotional emails at any time by:

• selecting the unsubscribe link in the email; or

• contacting us at info@teplep.com.

Even if you unsubscribe from marketing, we may still send necessary communications concerning your orders, payments, deliveries, returns, security or changes affecting our contractual relationship.

You may change your cookie choices through the Cookie Preferences link on the website.

13. Children’s Data

Our online store is not intended for children to place orders independently. Orders must be placed by an adult or by a person legally authorised to enter into the transaction.

A customer may upload an image depicting a child for the purpose of ordering a personalised product. The person submitting the image must be the child’s parent or legal guardian, or have appropriate permission from the child’s parent or legal guardian.

Such images are processed only for order fulfilment, customer service and complaint handling and are not published or used for marketing without separate permission.

If you believe that a child’s personal data has been provided to us without appropriate authorisation, contact us at info@teplep.com.

14. Product Reviews and Public Content

If you voluntarily submit a product review, photograph, social media comment or other content for publication, the information you choose to make public may be visible to other users.

We will not publish a customer’s order photograph or personalised artwork for marketing purposes without separate permission.

If you wish to request removal of content previously submitted for publication, contact us at info@teplep.com.

15. Third-Party Websites

Our website may contain links to websites or services operated by third parties. We do not control those third parties and are not responsible for their privacy practices.

Before providing personal data to a third-party website, you should review its privacy policy.

16. Complaints

If you have concerns about how we process your personal data, please contact us first at info@teplep.com so that we can investigate and respond.

You also have the right to lodge a complaint with:

State Data Protection Inspectorate of the Republic of Lithuania
L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania
Website: https://vdai.lrv.lt

You may also contact the data protection authority in the EU or EEA country where you habitually reside, work or believe an infringement occurred.

17. Changes to This Privacy Policy

We may update this Privacy Policy when our services, technologies, service providers or legal obligations change.

The current version will be published on this website with the updated revision date. Where required by law, we will provide additional notice of material changes.

18. Contact Us

For questions about this Privacy Policy, the processing of your personal data or the exercise of your rights, contact:

MB “Teplep”
Company code: 306573159
VAT identification number: LT100018052912
Stasio Antano Bačkio g. 34-1
LT-11320 Vilnius
Lithuania

Email: info@teplep.com
Telephone: +370 632 89999