Privacy policy

This privacy notice explains how we process your personal data under the EU General Data Protection Regulation (GDPR). Last updated: 9 October 2026

1. Data controller

MB Litneco (trading as NorthSheep), company code 306672424, VAT LT100016616116, registered office: Šlamučių g. 1, 92286 Klaipėda, Lithuania. Email: info@northsheep.eu

2. What data we process

  • Data you give us: name, delivery and billing address, phone number, email address and account details (if you create an account).
  • Order data: products bought, amounts, dates, and messages about returns, complaints and support.
  • Payment data: processed directly by the payment providers; we only receive limited information (payment method, result, last digits of the card).
  • Browsing data: IP address, browser and device, pages visited, collected also through cookies (see section 9).

3. Purposes and legal bases

  • Processing your order, payment and delivery: performance of the contract (Art. 6(1)(b) GDPR).
  • Customer service, returns, cancellation and guarantee: performance of the contract and legal obligations (Art. 6(1)(b) and (c)).
  • Tax and accounting obligations: legal obligation (Art. 6(1)(c)).
  • Fraud prevention and security of the website and payments: legitimate interest (Art. 6(1)(f)).
  • Defending our rights in disputes: legitimate interest (Art. 6(1)(f)).
  • Newsletter: only with your consent (Art. 6(1)(a)), which you can withdraw at any time via the link in every email.
  • Analytics and marketing cookies: only with your consent.

The data needed for your order is required to conclude and perform the contract; consent for marketing is optional. We do not make decisions based solely on automated processing that produce legal effects for you; fraud checks carried out independently by payment providers (for example Klarna) remain subject to their own privacy notices.

4. Who we share data with

  • Payment providers (card networks, PayPal, Klarna, Apple Pay, Google Pay), partly as independent controllers.
  • Carriers (such as FedEx and BRT), to deliver your order.
  • E-commerce platform and hosting: Shopify International Limited (Ireland), as processor under Art. 28 GDPR.
  • Accountants and tax advisers, and public authorities where required by law.

We do not sell your data. An up-to-date list of processors is available on request.

5. Transfers outside the European Union

Shopify may process data outside the EU, for example in Canada and the United States. These transfers are based on an adequacy decision of the European Commission (Art. 45 GDPR) or on the Commission's standard contractual clauses (Art. 46 GDPR). You can request a copy of the safeguards.

6. How long we keep data

  • Customer and order data: up to 5 years after your last order.
  • Tax and accounting records: for the period required by law (10 years).
  • Newsletter: until you withdraw your consent.
  • Cookies: for the duration shown in the cookie banner.

7. Your rights

You can exercise your rights under Articles 15–22 GDPR at any time: access, rectification, erasure, restriction, data portability, objection to processing based on legitimate interest and to direct marketing, and withdrawal of consent (without affecting processing before withdrawal). Email us at info@northsheep.eu; we reply within one month.

8. Complaints to a supervisory authority

You can lodge a complaint with the data protection authority of the EU country where you live (in Ireland: the Data Protection Commission, www.dataprotection.ie; in Italy: the Garante per la protezione dei dati personali, www.garanteprivacy.it) or with the authority where we are established: the State Data Protection Inspectorate of Lithuania, vdai.lrv.lt.

9. Cookies

  • Technical cookies (needed for the website, cart and checkout to work and to remember your preferences): no consent required.
  • Analytics cookies: only with your consent, unless configured anonymously and in aggregate.
  • Marketing and profiling cookies, including third-party cookies: only with your consent.

On your first visit the cookie banner lets you accept, reject or choose cookies, and lists them with their purpose and duration. You can change your choice at any time.

10. Children

Our website is not intended for children under 18 and we do not knowingly collect their data.

11. Changes

We may update this notice; the current version is always published here with the date of the last update.