Privacy policy
Last updated 29 September 2026
This policy explains in plain words what data we collect, why we use it, who we share it with and what rights you have. We process personal data under the General Data Protection Regulation (GDPR) and the laws of the Republic of Lithuania.
1. Who we are
The data controller is UAB “[company name]”, company code [code], address [address], Lithuania. We sell under the VOLO brand at volodrink.com.
For any question about your data, email labas@volodrink.com.
2. What data we collect and why
| Purpose | Data | Legal basis |
|---|---|---|
| Processing and delivering your order | First and last name, email, phone, chosen parcel locker, ordered products, order total, payment status | Performance of a contract (GDPR Art. 6(1)(b)) |
| Age confirmation | Your confirmation that you are 18 or older | Legal obligation and our legitimate interest in not selling the product to minors |
| Accounting and tax | Invoice and payment data | Legal obligation (Law on Accounting) |
| Newsletter and discount codes | Your consent (GDPR Art. 6(1)(a)) | |
| Customer service, returns and the taste guarantee | Our correspondence with you, order data | Performance of a contract and legitimate interest |
| Advertising and measuring its results | See section 3 | Your consent |
We never see or store your card or online banking details. Payments are handled by the payment service provider Montonio.
The product is for adults only, so we do not knowingly collect data from anyone under 18.
3. Advertising and Meta (Facebook, Instagram)
If you click “Accept” in the cookie banner, we use the Meta Pixel and the Meta Conversions API. They help us understand which ads bring customers and show ads to people who may be interested in VOLO.
We share the following with Meta:
- what you do on the site: page views, products added to the cart, started and paid orders and their value;
- technical information: IP address, browser type, Meta cookie identifiers (_fbp, _fbc) and an anonymous browser ID we generate;
- when you place an order: email, phone, first and last name and city. Before sending, these are converted with the one-way SHA-256 algorithm, so Meta only receives a hashed value that cannot be turned back into your data.
If you choose “Essential only”, Meta receives no data. You can withdraw your consent at any time with the button in section 4.
Meta Platforms Ireland Ltd. processes this data as a joint controller. You can read more in Meta's privacy policy.
5. Who we share data with
We only share data with partners we need to fulfil your order or run the site:
- Montonio Finance (Estonia): payments and shipment booking;
- Omniva, LP Express, DPD, Venipak: delivery to the parcel locker you choose;
- Netlify (USA): website hosting and newsletter forms;
- Meta Platforms Ireland: advertising, only if you agreed (see section 3);
- our accounting service provider: invoices and bookkeeping;
- public authorities: only when required by law.
When data is transferred outside the European Economic Area (for example to the USA), we rely on the EU-US Data Privacy Framework or the European Commission's standard contractual clauses.
We do not sell your data.
6. How long we keep data
- Order and invoice data is kept for 10 years, as required by the Law on Accounting.
- Your newsletter email is kept until you unsubscribe. Every email has an unsubscribe link at the bottom.
- Customer service correspondence is kept for 2 years.
7. Your rights
You have the right to:
- find out what data we hold about you and get a copy;
- ask us to correct inaccurate data;
- ask us to delete data when it is no longer needed or you withdraw consent;
- ask us to restrict processing;
- receive your data in a portable format and pass it to someone else;
- object to processing based on legitimate interest;
- withdraw your consent at any time.
To use any of these rights, email labas@volodrink.com. We will reply within one month.
If you believe your data is not handled properly, you can complain to the State Data Protection Inspectorate of Lithuania (L. Sapiegos g. 17, Vilnius, vdai.lrv.lt).
8. Other
Security. The site only runs over an encrypted HTTPS connection, and only the people who need order data for their work can access it.
Changes. If we change this policy, we will update the date at the top of the page. We will email you about any significant changes.