Effective date: 25 October 2026
This Privacy Policy explains how personal data is handled when you browse our online store, place an order, create an account, contact us or use interactive features such as the free tarot-card reading. It is intended for visitors and customers of agesandmoments.com. The controller is Flara, MB (company registration number 306167799; VAT number LT100016297914), registered office: Aukštadvario g. 24, LT-14331 Vilnius, Lithuania. Privacy enquiries: info@agesandmoments.com.
Personal data we process
- Contact and order details: name, email address, phone number if supplied, billing and delivery addresses, order content, order number and transaction status.
- Account information if you register: username, login credentials in protected form, saved preferences and order history.
- Messages you send to us, such as enquiries, complaints, return requests and customer-service correspondence.
- Technical data necessary to operate and protect the website, which may include IP address, browser/device information, timestamps and security logs.
- Cookie and device identifiers, where used, subject to applicable consent requirements.
- Marketing preferences and newsletter details only where a newsletter or marketing feature is used.
Payment information is processed through the payment services made available at checkout. We may receive payment confirmation and limited transaction details; we do not need customers to email us their card numbers. The actual providers depend on the payment methods configured at checkout.
Why we use personal data and our legal bases
- To process purchases, arrange delivery, handle returns and provide customer support: performance of a contract or steps taken at your request before entering into one (GDPR Article 6(1)(b)).
- To keep invoices, financial records and otherwise comply with applicable legal obligations: GDPR Article 6(1)(c).
- To keep our store secure, prevent fraud, troubleshoot errors and defend legal claims where appropriate: our legitimate interests under GDPR Article 6(1)(f), balanced against your rights.
- To send optional marketing messages or use non-essential analytics/advertising cookies where consent is required: your consent (GDPR Article 6(1)(a)). You can withdraw consent at any time without affecting earlier lawful processing.
Cookies and similar technologies
Our store uses necessary technologies for functions such as the shopping cart, checkout, session security and account sign-in. Optional analytics, personalisation or advertising technologies, if enabled, require an appropriate legal basis and, where required, your prior consent. You can manage cookies through the available cookie-preference controls and your browser. Rejecting optional cookies should not prevent essential shopping functions.
The precise names, providers and retention periods of cookies depend on the installed and activated technologies. A separate cookie notice or preference panel should list these and be kept up to date whenever website integrations change.
Sharing information
We share the minimum information reasonably needed with service providers supporting our store, such as hosting and IT services, payment service providers, delivery companies, communications and customer-service tools, and accounting or legal advisers where necessary. We may disclose data to public authorities when legally required. We do not sell personal data.
Transfers outside the European Economic Area
Some service providers may process data outside the EEA. When this happens, we apply a valid transfer mechanism where required, such as a European Commission adequacy decision or appropriate safeguards under the GDPR. You may contact us for information on the safeguards relevant to your data.
How long we keep information
We retain purchase, payment and tax-related records for the periods required by applicable Lithuanian and EU law. We keep account details while the account is active and thereafter only as necessary for legal, security or dispute-resolution purposes. Support correspondence is kept only as long as necessary to resolve the request and satisfy relevant obligations. Marketing information is kept until you unsubscribe, withdraw consent or it is otherwise no longer needed. Technical records are reviewed and deleted or anonymised when no longer necessary.
Your GDPR rights
Subject to the conditions in the GDPR, you may request access, correction, erasure, restriction of processing or portability of your data, and you may object to certain uses of your data. You may withdraw consent at any time. Email info@agesandmoments.com to exercise these rights. We will respond within the periods required by law, generally within one month.
You also have the right to complain to a supervisory authority, including the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).
Security and third-party links
We use appropriate organisational and technical safeguards to protect information. No online transmission or storage is completely risk-free. External websites linked from our store have their own privacy practices, which we do not control.
Updates and contact
We may update this policy when our business practices, service providers or legal requirements change. The effective date above identifies the current version. For questions, contact info@agesandmoments.com.
Ages & Moments is operated by Flara, MB (company registration number 306167799; VAT number LT100016297914). Registered office: Aukštadvario g. 24, LT-14331 Vilnius, Lithuania. Contact: info@agesandmoments.com.