Privacy policy
PRIVACY POLICY
Last updated: 24 September 2026
1. GENERAL INFORMATION
This Privacy Policy explains how MB Sentral gm, which operates the online store CNTRL HOOPS, collects, uses, stores and transfers your personal data when you visit our website, purchase our products, contact us or otherwise use our services.
Data controller:
MB Sentral gm
Company registration number: 308153403
Registered office address: Pasakų g. 3-1, LT-10105 Vilnius, Lithuania
Email: cntrlhoops@gmail.com
Phone: +370 671 16115
Website: cntrlhoops.com
In this Privacy Policy, the terms “CNTRL HOOPS”, “we”, “us” and “our” refer to MB Sentral gm.
Our online store runs on the Shopify platform.
By using our website, you confirm that you have read this Privacy Policy.
2. WHAT PERSONAL DATA WE COLLECT
Depending on how you use our website and services, we may collect the following personal data about you.
Contact details
We may collect your:
first name, surname, email address, phone number, shipping address, billing address and other contact information you voluntarily provide.
Order and purchase information
We may process information about:
the products you purchased, order number, order date, amount paid, selected shipping method, returns, exchanges, refunds and other order-related information.
Payment information
Payments in our store may be processed by Shopify Payments, banks or other payment service providers.
We generally do not receive or store your full payment card details. Payment service providers may process card or bank account information in accordance with their own privacy and security policies.
We may receive payment-related information, such as the payment method, payment status, transaction identifier and other information needed to fulfil your order.
Account data
If you use a customer account, we may process information about your account, order history, settings and other account-related data.
Data from communications with us
If you send us an email, message, enquiry or complaint, we may retain the information you provide and our correspondence history.
Technical and usage data
When you visit the website, we may automatically collect certain technical information, such as:
your IP address, device type, browser, operating system, pages visited, actions taken on the website, referring website and other similar information.
This data may be collected using cookies, pixels and other similar technologies.
3. WHERE WE OBTAIN YOUR DATA
We may obtain personal data:
directly from you when you place an order, contact us, create an account or subscribe to marketing communications;
automatically when you visit or use our website;
from Shopify and our other service providers;
from payment, shipping, analytics and marketing service providers;
from other lawful sources where permitted by applicable law.
4. PURPOSES FOR PROCESSING PERSONAL DATA
We may process your personal data for the following purposes.
Order fulfilment
We use data to:
receive and fulfil orders, process payments, dispatch products, inform customers about order status, administer returns and exchanges, and provide customer service.
Legal basis: entering into and performing our contract with you.
Compliance with legal and accounting obligations
We retain and process certain data to comply with accounting, tax, consumer protection and other legal requirements.
Legal basis: compliance with legal obligations that apply to us.
Customer service
We use your data to respond to enquiries, resolve problems, handle complaints and provide information about orders.
Legal basis: performance of a contract and our legitimate interest in providing quality customer service.
Website security and fraud prevention
We may use data to protect the website, our business and customers against fraud, abuse, unlawful activity or security threats.
Legal basis: our legitimate interest in ensuring the security of our systems, business and customers and, where applicable, compliance with legal obligations.
Website analysis and improvement
We may analyse how visitors use our website to improve its performance, product offering and user experience.
Where applicable law requires your consent for such processing, we process data only after obtaining that consent.
Legal basis: your consent or, where permitted, our legitimate interest in improving our services.
Marketing
If you have given consent, or in other cases permitted by law, we may send you information about:
CNTRL HOOPS products, new products, discounts, promotions and other offers.
You may unsubscribe from marketing emails at any time by clicking the unsubscribe link in them or contacting us.
Legal basis: your consent or another basis permitted by applicable law.
5. COOKIES AND SIMILAR TECHNOLOGIES
Our website may use cookies and similar technologies.
They may be used to:
ensure the website functions properly, save your cart and settings, maintain security, analyse website use and, with the necessary consent, carry out personalised marketing and advertising.
We use non-essential cookies and tracking technologies only where permitted by applicable law and, where required, with your consent.
You can manage your preferences through the cookie management tool available on our website.
Shopify recommends that EEA stores properly configure their Customer privacy settings and cookie banner; publishing a privacy policy alone is not enough.
6. SHOPIFY
Our online store runs on the Shopify platform.
Shopify processes certain personal data needed to provide the online store, payments, security and other Shopify services.
When Shopify acts as our data processor, it processes data on our behalf in accordance with our instructions and Shopify's data processing terms.
In certain cases, Shopify may act as a separate data controller and process data for purposes it determines.
Further information about Shopify's data processing can be found in Shopify's Consumer Privacy Policy and Shopify Privacy Portal.
If Shopify's enhanced personalisation or advertising features are enabled in our store, Shopify may use information about your interactions with our store and other Shopify stores to provide those features. Shopify's documentation requires customers to be informed when such features are used.
7. WHO WE MAY SHARE YOUR DATA WITH
We may share your personal data only to the extent necessary for lawful business and service delivery purposes.
Data may be shared with:
Shopify and Shopify-related service providers; payment service providers; banks; shipping and logistics companies; IT, hosting and cloud service providers; accounting and financial service providers; customer service system providers; marketing, email marketing and advertising platforms; analytics service providers; law enforcement, tax or other authorities where we are legally required to provide data.
Data recipients receive only the information they need to perform their functions.
We do not sell your personal data as a standalone data product.
8. MARKETING AND PERSONALISED ADVERTISING
We may use marketing and advertising service providers to promote CNTRL HOOPS and measure advertising effectiveness.
Cookies, pixels or other tracking technologies may be used for this purpose with the necessary consent.
This may include advertising platforms that receive certain information about how you visit our website or interact with our advertising.
You can change your cookie or marketing preferences through the privacy settings available on the website.
9. INTERNATIONAL DATA TRANSFERS
Some service providers we use may process personal data outside Lithuania or the European Economic Area.
In such cases, we ensure that data transfers are carried out in accordance with applicable data protection law.
Where necessary, this may involve:
European Commission adequacy decisions, standard contractual clauses or other lawful data transfer mechanisms.
The GDPR does not require all data to be stored in Europe, but appropriate safeguards must be applied when transferring EEA residents' data outside the EEA.
10. HOW LONG WE RETAIN DATA
We retain personal data no longer than necessary to achieve the purpose for which it was collected, or for as long as required by applicable law.
The retention period depends on the nature of the data and the purpose of processing.
For example, we may retain data related to accounting, invoices and transactions for as long as required by the accounting and tax laws of the Republic of Lithuania.
Customer service data is retained for as long as reasonably necessary to handle enquiries, disputes or claims.
Marketing data is retained until consent is withdrawn or for as long as we have another lawful basis to process it.
11. DATA SECURITY
We use reasonable technical and organisational security measures designed to protect personal data against:
unauthorised access, loss, destruction, alteration, disclosure or other unlawful processing.
However, no online system can guarantee absolute security.
For this reason, we recommend that you do not send us highly sensitive information by email or other insecure channels unless necessary.
12. YOUR RIGHTS
If the GDPR or similar data protection laws apply to you, depending on the circumstances you may have the right to:
access the personal data we process about you; request correction of inaccurate data; request deletion of data; request restriction of processing; object to certain processing; receive the data you provided in a structured, machine-readable format and, where applicable, transfer it to another data controller; withdraw previously given consent at any time.
Withdrawing consent does not affect the lawfulness of processing carried out before its withdrawal.
To exercise your rights, contact:
Before fulfilling your request, we may ask for information needed to verify your identity.
13. DIRECT MARKETING
If you have subscribed to our marketing communications, you may unsubscribe at any time.
You can do so by:
clicking the Unsubscribe link in our email or writing to us at:
Even after unsubscribing from marketing communications, you may continue to receive necessary messages relating to your order or account.
14. CHILDREN'S PRIVACY
Our online store is not specifically directed at children.
We do not knowingly seek to collect children's personal data where applicable law requires parental or guardian consent for processing and we do not have that consent.
If you believe a child has improperly provided us with personal data, contact:
15. THIRD-PARTY WEBSITES
Our website may contain links to third-party websites, platforms or services.
We do not control the privacy practices of such third parties.
If you visit another website, we recommend reading its privacy policy.
16. COMPLAINTS
If you have questions or complaints about the processing of your personal data, you may first contact us at:
If you believe your personal data is being processed in violation of data protection law, you have the right to contact the competent data protection supervisory authority.
In Lithuania, this is the State Data Protection Inspectorate (VDAI). The VDAI recommends first attempting to resolve the matter with the data controller before filing a complaint.
17. CHANGES TO THE PRIVACY POLICY
We may update this Privacy Policy periodically, for example:
when our operations, service providers, technologies or legal requirements change.
The latest version of the Privacy Policy is always published on this website.
The date at the top indicates when the Privacy Policy was last updated.
18. CONTACT INFORMATION
For questions about the Privacy Policy, your personal data or exercising your rights, contact:
MB Sentral gm
Company registration number: 308153403
Registered office address: Pasakų g. 3-1, LT-10105 Vilnius, Lithuania
Email: cntrlhoops@gmail.com
Phone: +370 671 16115
Website: cntrlhoops.com
Data controller: MB Sentral gm.