Privacy Policy

Last updated: October 14, 2025

1. General Information

This Privacy Policy explains how Mustaches UAB (hereinafter referred to as the Company) collects, processes, and protects personal data when you visit our website www.ruglyart.com, place an order, or contact us through our contact form.

The Company ensures that your data is processed in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and other applicable data protection laws.

2. Data Controller

Mustaches UAB
Address: Pramonės g. 16F, Alytus, Lithuania
Email: hello@ruglyart.com
Website: www.ruglyart.com

3. Data We Collect

We may collect and process the following types of personal data:

  • First and last name
  • Email address
  • Phone number
  • Shipping and billing address
  • Payment information (processed securely via Google Pay, Apple Pay, or PayPal)
  • Order and purchase history
  • IP address, browser type, and device information
  • Message content submitted through contact forms
  • Cookie preferences and newsletter subscription consent

4. Purposes and Legal Basis for Data Processing

Your data is processed for the following purposes:

  1. Order processing and fulfillment – to perform a contract (GDPR Art. 6(1)(b))
  2. Responding to customer inquiries – legitimate interest (GDPR Art. 6(1)(f))
  3. Accounting and legal compliance – legal obligation (GDPR Art. 6(1)(c))
  4. Direct marketing (e.g., newsletters) – with your explicit consent (GDPR Art. 6(1)(a))
  5. Analytics and advertising (Google Analytics, Meta Pixel) – based on your cookie consent (GDPR Art. 6(1)(a))

5. Data Retention

We retain personal data only for as long as necessary:

  • Order and billing data: 10 years (in accordance with accounting laws)
  • Contact form submissions: 1 year after the inquiry is resolved
  • Marketing data (newsletter): until you withdraw your consent
  • Cookies: according to each cookie’s expiration period

6. Data Sharing and Third Parties

Your data may be shared only as necessary to provide services:

  • Payment processors: Google Pay, Apple Pay, PayPal
  • Shipping partners: Omniva, DPD, LP Express
  • Hosting provider: WordPress / Automattic Inc.
  • Email marketing platform: MailerLite (for newsletters)
  • Analytics and advertising tools: Google LLC (Google Analytics), Meta Platforms, Inc. (Meta Pixel)

Some of these providers may be located outside the European Economic Area (EEA). In such cases, data transfers are carried out under the European Commission’s Standard Contractual Clauses to ensure an adequate level of protection.

7. Your Rights

You have the right to:

  • Request confirmation whether we process your data
  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your data (“right to be forgotten”)
  • Restrict processing of your data
  • Object to processing for direct marketing purposes
  • Receive your data in a structured, machine-readable format and transfer it to another controller
  • Withdraw your consent at any time (where processing is based on consent)

To exercise your rights, please contact us at hello@ruglyart.com.
If you believe your rights are being violated, you have the right to file a complaint with the State Data Protection Inspectorate (VDAI) or your local data protection authority.

8. Cookies

Our website uses cookies to ensure proper functionality and enhance user experience.
Cookies may include:

  • Necessary cookies – required for the basic operation of the site
  • Analytical cookies – help us understand site usage (Google Analytics)
  • Marketing cookies – used for advertising and remarketing (Meta Pixel)

Before enabling non-essential cookies, we will ask for your explicit consent through a cookie banner.
You can withdraw or modify your cookie preferences anytime in your browser settings.

9. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, loss, or disclosure.
All data is transmitted via secure SSL (Secure Socket Layer) encryption.

10. Children’s Privacy

Our products (such as kids’ room rugs) may be suitable for children, but our website is not directed toward children under the age of 16.
Personal data is processed only when an order is placed by an adult or with verified parental consent.

11. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in law or our business operations.
The latest version will always be available at www.ruglyart.com/privacy-policy.

12. Contact Information

If you have any questions or concerns about this Privacy Policy or how we process your personal data, please contact us:

📧 hello@ruglyart.com
📍 Mustaches UAB, Pramonės g. 16F, Alytus, Lithuania