Your space. Your choice.

Mb Savy Wear is the controller responsible for the SAVY storefront uses described here. Its address is Serbentų g. 27C, Šiauliai, Lietuva. This policy covers storing information on, and accessing information from, your browser, together with the related processing of personal data.

It does not cover every use of information to fulfil an order or answer a message. Linked websites, including payment providers, have their own privacy information and storage choices.

Cookies are small values your browser stores for a website and may return with later requests. They can keep a bag connected across pages or remember a choice. A session cookie normally ends with the browser session; a persistent cookie has a stated lifetime, subject to browser rules.

Local storage keeps information in the browser without automatically sending it with every request. It normally survives closing a tab and has no built-in expiry. Privacy rules can apply to both methods, even where stored information is a random identifier rather than your name.

All optional categories are off before you choose. Accept on the banner allows the optional categories together. Settings lets you review them separately; Save choices applies the selected combination, and Accept all allows every optional category. Use necessary only saves all optional categories as off.

Continued browsing, scrolling, silence, closing the settings or dismissing a notice never counts as optional consent. Closing settings without saving leaves the existing choice unchanged. Without a saved choice, only necessary and expressly requested functionality is used. Optional consent is not a condition of shopping.

Open Cookie settings on this page or in the footer whenever you want to review your choices. Turn a category off and save, or choose Use necessary only to withdraw all optional permissions. The storefront stops the disabled optional activity and removes the analytics consent token when analytics is disabled.

Withdrawing analytics also stops Microsoft Clarity recording and clears accessible _clck and _clsk cookies. It does not automatically delete recordings already received by Microsoft; contact us about applicable erasure rights.

Failed withdrawals are queued for retry. Withdrawal affects future consent-based processing; it does not make earlier lawful processing unlawful or automatically erase processed information. Anonymous aggregate reports may remain. Ask us about deletion rights for identifiable records.

Necessary storage may contain account or bag identifiers, selected language, consent choices and saved product references. Pending email verification temporarily includes submitted contact details. Account or payment identifiers do not give permission to track browsing for unrelated purposes.

With analytics permission, Google Analytics measurement can include sanitised public page paths, shopping actions, product references and cart or order values. That event flow does not send raw account email addresses or checkout contact fields. Service providers may receive IP addresses and browser or device information when handling requests.

Microsoft Clarity records page URLs, navigation, clicks and scrolling to help us understand usability, including checkout and order confirmation. Checkout and order content are configured for masking, as are form inputs. Account, account verification and order ownership transfer pages are excluded. Its URL collection differs from Google Analytics. Clarity advertising storage remains denied, even if you allow marketing.

The rules on access to your device are separate from the GDPR rules on processing personal data. Storage strictly necessary to transmit a communication or provide a service you expressly request may be exempt from the device-storage consent requirement. That exemption does not remove other data-protection obligations.

For related personal data, the applicable basis can be taking requested steps or performing a contract, legitimate interests in secure and reliable services where justified, or a legal obligation. Optional processing relies on consent under GDPR Article 6(1)(a). We assess each purpose separately rather than treating all storage as one legal category.

Browser expiry does not mean every related record is deleted. Refreshing a cookie or using a feature can affect its lifetime; browser restrictions may shorten it. Local storage persists until cleared or replaced. Consent records have no automatic expiry; a policy-version change invalidates them.

Analytics attribution links visits with shopping activity. Its eligibility window defaults to 180 days, configurable between 30 and 400 days. Expiry is not proof of record deletion. Reports and personal-data records follow configured account periods, relevant purposes and legal duties. Contact us for applicable retention details; cookie lifetimes alone cannot establish them.

Microsoft publishes a 30-day retention period for ordinary Clarity recording playback. Click and heatmap data, and sessions marked as favourites or labelled, are retained for nine months. These service retention periods differ from browser cookie expiry.

People authorised to operate SAVY and service providers supporting hosting, store operation, account security and payment journeys may handle information needed for those tasks. Their access depends on their role and the service involved. Authorities or advisers may receive information where disclosure is legally required or necessary to establish or defend legal claims.

When enabled with your analytics consent, Google receives Google Analytics measurements and Microsoft receives Clarity interaction data and recordings. Both providers publish privacy information about their services. A category listed in settings is not evidence that an additional advertising provider receives data; the current inventory identifies the configured browser storage.

Providers may process information outside the European Economic Area. Transfers, destinations and safeguards depend on the provider and arrangement. A provider’s general compliance statement does not establish which transfer mechanism applies to a particular arrangement.

Where required, transfers must have a lawful basis under the GDPR transfer rules, such as a relevant adequacy decision or appropriate contractual safeguards with any necessary supplementary measures. Ask us for information about an applicable transfer and obtaining relevant safeguards. Google’s published transfer framework is linked below for context.

Account, verification and payment-return storage supports secure shopping. Its values can be sensitive even when they look random. Do not share storage values, account cookies or verification links in response to unsolicited messages.

Sign out on shared devices and consider clearing site data. An unlocked browser may expose your account or saved items. Clearing data can remove preferences and interrupt a bag or payment return, so complete important actions first.

Subject to the conditions in data-protection law, you can request access to personal data, correction, erasure, restriction of processing and a portable copy where applicable. You can object to processing based on legitimate interests and to direct marketing. You can withdraw consent without affecting the lawfulness of processing before withdrawal.

Rights have conditions and exceptions. Legal retention duties or defending a claim may prevent immediate deletion. We may be unable to identify someone from anonymous statistics. We explain relevant limitations when responding.

Contact [email protected] with your request and enough context to find the relevant information. Do not send passwords or full payment details. Where reasonable doubts exist about identity, we may ask for proportionate verification. Requests are normally free; the law permits exceptions for manifestly unfounded or excessive requests.

We respond without undue delay and normally within one month. Complexity or the number of requests can justify an extension of up to two further months; we tell you within the first month and explain why. You may complain to Lithuania’s State Data Protection Inspectorate, VDAI, at vdai.lrv.lt/en/, or another competent supervisory authority.

Your browser can let you inspect, block or delete cookies and other site data. Check its privacy controls for instructions. Deleting cookies may leave local storage behind unless you clear that too. Blocking necessary storage can stop sign-in, shopping bags, saved items or checkout from working as expected.

Choices are stored in the browser you use. A different device, browser or private window may need its own choice. Clearing site data may make the banner appear again. Browser deletion does not itself communicate withdrawal to us, so use Cookie settings before clearing data when you want to withdraw consent.

The storefront is not designed to collect children’s optional tracking consent. Continued use never permits analytics or marketing. Where law requires a parent’s or guardian’s consent, a child cannot give that permission on their behalf.

If you believe a child has provided information or optional consent without the required authorisation, contact us. We will consider the circumstances and the appropriate steps, including stopping consent-based processing or handling an applicable deletion request. Necessary storage may still support services that are lawfully requested.

We may update this policy when the storefront, storage purposes, providers or legal requirements change. The date above identifies this version. New optional purposes requiring consent must not be treated as accepted through an older choice. When the policy version changes, the stored choice is invalidated and settings can be presented again.

An optional category without configured storage does not identify a future provider. We explain relevant additions in the policy and inventory so you can make an informed choice. You can return here at any time.

For questions about storage, providers, retention or choices, contact Mb Savy Wear at [email protected]. Mention the relevant feature or device. You do not need optional consent to ask questions or exercise rights.

Our postal address is Serbentų g. 27C, Šiauliai, Lietuva. The official resources below explain the legal framework and provider information in more detail. They supplement this policy; your choices for the SAVY storefront remain available through Cookie settings here and in the footer.