Last updated: 11 August 2026

1. Who We Are

The Linen Valley is the trading name of Linen Valley MB, a company registered in the Republic of Lithuania. We are the controller of the personal data described in this policy.

Linen Valley MB
V. Macernio g. 3H
LT-08336 Vilnius
LITHUANIA

Company code: 303166891
VAT: LT100008697815

Email: home@thelinenvalley.com
Phone: +370 682 11413

This policy explains what we do with your personal data when you visit www.thelinenvalley.com or place an order with us. We process data in accordance with the General Data Protection Regulation (EU) 2016/679 and Lithuanian data protection law.

2. What We Collect

When you browse the site. Your IP address, device and browser type, the pages you view and how you reached us. Most of this is collected through cookies, described in Section 4.

When you place an order. Your name, email address, phone number, delivery address, the items ordered, the price paid, the time of the transaction and the payment method used. Where you supply measurements for a custom order, we hold those too.

When you subscribe to our newsletter. Your email address.

When you leave a review. Your name and the content of your review, submitted through our reviews provider.

When you contact us. Whatever you choose to tell us in your message, along with your email address or phone number.

We never see or store your card number. Card details go directly to our payment providers.

If you give us someone else's details, for example when sending a gift to another address, please make sure that person is aware of this policy.

3. Why We Use It, and on What Legal Basis

We only process your data where we have a lawful reason to do so. Here is what we do, and why we are allowed to.

Processing and delivering your order. We use your contact and delivery details to make your order, send it to you and support you afterwards. Legal basis: performance of our contract with you.

Answering your questions. We use whatever you send us to reply. Legal basis: our contract with you, or our legitimate interest in responding to people who write to us.

Keeping accounting and tax records. Orders and invoices are recorded and retained. Legal basis: legal obligation.

Sending newsletters and offers. We write to subscribers about our linens. Legal basis: your consent.

Inviting you to review a purchase. After your order arrives we may ask what you thought of it. Legal basis: our legitimate interest in improving what we make.

Measuring how the site is used, and showing ads. We look at anonymous usage patterns and reach new customers through advertising. Legal basis: your consent, given through the cookie banner.

Preventing fraud and protecting the site. We monitor for misuse and unauthorised access. Legal basis: our legitimate interest in keeping the shop secure.

You can withdraw consent at any time. Every newsletter carries an unsubscribe link, and cookie preferences can be changed through the banner. Withdrawing consent does not affect anything we did before you withdrew it.

4. Cookies

Cookies are small files stored on your device. We use four kinds:

• Essential — needed for the shop to work, including your cart and checkout. These cannot be switched off.
• Functional — remember your preferences, such as currency or language.
• Analytics — tell us anonymously how visitors move through the site.
• Advertising — allow us to show relevant ads and to measure whether they work.

When you first visit, our cookie banner asks whether you accept the non-essential categories. Nothing outside the essential category is set until you agree. You can change your choice at any time by reopening the banner, and you can also clear or block cookies through your browser settings, although some parts of the site may stop working if you do.

5. Who We Share It With

We do not sell your personal data. We share it with the following service providers, each of which processes it only on our instructions:

• Shopify — hosts the shop and processes orders
• Shopify Payments — processes card payments
• PayPal — processes PayPal payments
• Judge.me — collects and displays product reviews
• Omnisend — sends our newsletters
• 17TRACK — provides parcel tracking
• Google — analytics and advertising
• Our cookie consent provider — records your cookie choices
• Delivery companies — carry your parcel to you
• Our accountants — keep our books

We also disclose data where the law requires it, or where it is needed to establish or defend a legal claim. If our business were ever sold or reorganised, customer data would pass to the new owner.

6. Transfers Outside the European Economic Area

Some of the providers above operate outside the EEA, including in the United States and in Asia. Where data leaves the EEA, the transfer is covered either by an adequacy decision of the European Commission or by the Standard Contractual Clauses approved by the Commission. You may ask us for details of the safeguards that apply to any particular transfer.

7. How Long We Keep It

Order, invoice and accounting records — 12 years, as required by Lithuanian accounting legislation.

Customer service correspondence — three years from our last exchange with you.

Newsletter data — for as long as you stay subscribed. After you unsubscribe we keep your email address on a suppression list, so that we can prove you opted out and make sure we do not contact you again.

Cookie data — from the length of your visit up to two years, depending on the cookie.

Records of cookie consent — two years, as evidence that consent was given.

When data is no longer needed, we delete it.

8. How We Protect It

Our shop runs on encrypted connections. Access to customer data is limited to the people who need it to run the business and to the providers listed in Section 5, each bound by a written agreement. We review who holds access as our tools change.

No system is completely secure, and email in particular travels unprotected. Please avoid sending us sensitive information by email.

9. Your Rights

Under the GDPR you have the right to:

• be told how your data is used, which is what this policy is for
• ask for a copy of the data we hold about you
• have inaccurate data corrected
• have your data deleted, where we have no continuing reason to keep it
• ask us to restrict how we use your data
• receive your data in a portable, machine-readable form
• object to processing based on our legitimate interests
• object to direct marketing at any time, with no reason needed
• withdraw consent you have given

Where we keep data because the law requires it, a deletion request cannot override that obligation. We will tell you if that is the case.

10. How to Exercise Your Rights, and How to Complain

Write to home@thelinenvalley.com. We reply within one month. If your request is complex we may need longer, up to a further two months, and we will tell you within the first month if that happens. There is no charge.

If you are not satisfied with our answer, you may complain to the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt, ada@ada.lt). If you live in another EU country, you may complain to the supervisory authority there instead.

11. Changes to This Policy

We may update this policy. The current version is always the one published on this page, with the date of the last update at the top. Where a change materially affects how we use your data, we will tell subscribers by email.

12. Contact

Linen Valley MB
V. Macernio g. 3H
LT-08336 Vilnius
LITHUANIA

Email: home@thelinenvalley.com
Phone: +370 682 11413