Last updated: October, 2026

This Privacy Policy explains how this page collects, uses, discloses, and safeguards your information when you visit this website (https://ondoustudio.com) or use its services. Please read this policy carefully. By accessing or using this website, you agree to this Privacy Policy.

1. Who we are

Ondou Studio is run by Greta Rekštytė as a sole trader under Lithuanian individual activity certificate No. 1220202. Palanga, Lithuania.
Contact: info@ondoustudio.com

Ondou Studio is the controller of the personal data described here.

2. What Ondou Studio collects, and why

Orders. Name, email, phone (if given), billing and shipping address, order details. Used to process, ship and support your order.
Legal basis: performance of a contract (GDPR Art. 6(1)(b)), and legal obligations for accounting and tax (Art. 6(1)(c)).

Payments. Card details are handled directly by WooPayments, powered by Stripe, which also uses essential cookies to prevent fraud. Ondou Studio never sees or stores your full card number.

Newsletter. Your email, if you subscribe – through the sign-up form or the checkbox at checkout. Sent through Mailchimp. For subscribers who shop, basic purchase information may be shared with Mailchimp.
Legal basis: your consent (Art. 6(1)(a)). Unsubscribe at any time through the link in every email.

Messages. What you send by email or a contact form – used only to reply.
Legal basis: legitimate interest in answering you (Art. 6(1)(f)).

Security. Basic technical data (IP address, browser) may be processed by the hosting server to keep the site safe.
Legal basis: legitimate interest (Art. 6(1)(f)).

2. Cookies

This site uses only essential cookies – to keep the cart, checkout and payments working. No advertising or tracking cookies are used. Details: [Cookie Policy].

4. Who receives your data

Only what is needed, only to:

• Hostinger – website hosting
• WooPayments / Stripe – payments
• Postal and courier services – delivery
• Mailchimp (Intuit) – newsletter
• An accountant and public authorities, where the law requires

Ondou Studio does not sell your data.

5. Transfers outside the EU

Stripe and Mailchimp may process data in the United States. These transfers rely on the EU–US Data Privacy Framework or the European Commission’s Standard Contractual Clauses.

6. How long data is kept

• Order and accounting records – 10 years, as required by Lithuanian accounting law
• Newsletter – until you unsubscribe
• Messages – as long as needed to help you, then deleted
• Cookies – as listed in the Cookie Policy

7. Your rights

You may ask to access, correct, delete or receive a copy of your data, to restrict or object to its use, and to withdraw consent at any time. Withdrawing consent does not affect what happened before.

Write to info@ondoustudio.com – you will receive a reply within one month.

You may also complain to the State Data Protection Inspectorate of Lithuania or the authority in your country.

8. Changes

This policy may change as the site does. The date above shows the latest version.