Privacy Policy
Last updated: 20 October 2026
1. Who is responsible for your data
The data controller is Cloudy Things, operated by an individual activity registered in Lithuania. You can contact us about your data at support@cloudythings.art.
2. What data we collect and why
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Name, email address | To process your order, send your download links and answer your questions | Contract (Art. 6(1)(b)) |
| Billing country and address details | To process payment, calculate taxes and issue your order record | Contract and legal obligation (Art. 6(1)(b), (c)) |
| Order history and download records | To deliver your files, reset links and handle problems | Contract (Art. 6(1)(b)) |
| Payment details | Handled by Stripe, see section 3. We never see or store your full card number | Contract (Art. 6(1)(b)) |
| IP address and basic technical data | To keep the site secure and prevent fraud | Legitimate interest (Art. 6(1)(f)) |
| Emails you send us | To reply and support you | Contract or legitimate interest |
| Cookies | See section 6 | Necessary cookies: legitimate interest. Others: your consent (Art. 6(1)(a)) |
We do not use your data for automated decision-making or profiling.
3. Who we share your data with
We only share data with services we need to run the shop, and only as much as they need:
- Stripe processes payments.
- Our hosting provider (Hostinger) stores the website and its data.
- Email service sends order emails and replies to your messages.
- Our accountant receives the order records needed for bookkeeping and taxes.
- Authorities, where the law requires it.
Some of these providers may process data outside the European Economic Area. In that case, they use safeguards recognised under EU law, such as standard contractual clauses. We do not sell your data.
4. How long we keep your data
- Order and accounting records are kept for as long as the law requires. In Lithuania, accounting documents are generally kept for up to 10 years.
- Emails and support messages are kept for as long as needed to solve your request, and up to [2] years afterwards.
- Marketing emails, if you ever sign up, are kept until you unsubscribe.
When the time is up, we delete or anonymise the data.
5. Your rights
Under the GDPR you have the right to:
- see the data we hold about you,
- have wrong data corrected,
- have your data deleted, where the law allows (some order records must be kept for tax reasons),
- limit or object to how we use your data,
- receive your data in a portable format,
- withdraw any consent you have given, at any time.
To use these rights, email support@cloudythings.art. We will reply within one month. If you are not happy with how we handle your data, you can complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt) or to the authority in your own country.
6. Cookies
We use necessary cookies that keep the cart and checkout working and keep the site secure. [If you use analytics or marketing tools: We also use cookies for [analytics tool name], but only if you accept them in the cookie banner.] You can change or withdraw your choice at any time through [the cookie settings link in the footer]. You can also block cookies in your browser, but the shop may not work properly.
7. Marketing emails
We only send you marketing emails if you have clearly agreed to receive them, and you can unsubscribe at any time using the link in each email. Order emails (confirmations and download links) are not marketing and are sent as part of your purchase.
8. Security
We take reasonable steps to protect your data, including secure (HTTPS) connections and trusted payment and hosting providers. No online service can be completely secure, so we can’t guarantee absolute security.
9. Children
This shop is meant for adults buying for themselves or their families. We do not knowingly collect data from children. If you are under 18, please ask a parent or guardian to make the purchase.
10. Links to other sites
Our site may link to other sites, such as TikTok or Pinterest. They have their own privacy policies, and we are not responsible for how they use your data.
11. Changes to this policy
We may update this policy. The date at the top shows the latest version. If we make important changes, we will say so on the site.
12. Contact
support@cloudythings.art
https://cloudythings.art/contact-us/
dipiscing elit. Ut elit tellus, luctus nec ullamcorper mattis, pulvinar dapibus leo.