01. General Information

VšĮ Yume Drift ("we", "our", "us") operates the Yume Drift Shop at shop.yumedrift.eu and is committed to protecting your privacy and personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR"). This Privacy Policy explains how we collect, use, and protect personal data in connection with orders placed through the Shop.

02. Data Controller

03. Data We Collect

• — Name
• — Email address
• — Shipping and billing address
• — Order history and contents
• — Payment confirmation data (card details are processed and stored by our payment processor, Stripe — we never see or store full card numbers)

04. Legal Basis for Processing

We process your personal data based on: performance of a contract (fulfilling your order), legal obligation (tax and accounting records), and legitimate interest (fraud prevention, customer support).

05. Purpose of Data Collection

Your data is collected to process and ship your order, provide customer support, prevent fraud, comply with tax and accounting obligations, and — only with your consent — send marketing communications.

06. Data Sharing

We share order data with Stripe (payment processing) and shipping carriers (delivery), strictly to the extent needed to fulfil your order. We do not sell or rent your personal data to third parties.

07. International Transfers

Stripe may process payment data outside the European Economic Area. Where this occurs, transfers are safeguarded under Stripe's Standard Contractual Clauses and applicable GDPR transfer mechanisms.

08. Data Retention

Order and transaction records: 10 years (Lithuanian accounting law). Customer contact details: 3 years from last order. Marketing data: until consent is withdrawn, max 2 years.

09. Your Rights

Under GDPR you have the right to: access, rectification, erasure, restrict processing, object, data portability, and withdraw consent. Contact: info@yumedrift.eu

10. Data Security

We implement appropriate technical and organizational measures to protect your personal data, and rely on Stripe's PCI-DSS-compliant infrastructure for payment data.

11. Cookies & Local Storage

The Shop uses browser local storage (not cookies) to remember the contents of your shopping cart between visits, stored only on your own device. We do not use tracking or advertising cookies.

12. Contact Information