Privacy Policy

This policy explains what personal data is collected on pauliuspetrauskas.com, why, and what your rights are. Last updated: 19 Oct 2026.

1. Who is responsible

The data controller is Paulius Petrauskas, Aguonų g. 8A-28, LT-03213 Vilnius, Lithuania (individual activity certificate no. 948107). Contact: hello@pauliuspetrauskas.com.

2. What we collect and why

  • Contact and partner enquiries (name, email, company, message): to reply to you. Legal basis: steps before a contract / legitimate interest. Kept for 12 months, then deleted automatically.
  • Order records in Klaviyo (email, name, items and total of your order): after a purchase we record the order in our email tool Klaviyo to understand which products sell. Legal basis: our legitimate interest. We do not send marketing emails to buyers who did not tick the checkout box “Send me news and merch drops by email”; if you tick it, we subscribe you to the newsletter (your consent). No cookies or tracking scripts are used for this.
  • Newsletter (email address, site language, where you signed up): to send news about events, videos and merch. Legal basis: your consent (pressing Subscribe). Kept until you unsubscribe. Emails are sent through Klaviyo (see section 3). Every email contains an unsubscribe link. If you request the free Assetto Corsa car, we use your email to send you the download link and also add you to the newsletter.
  • Orders in the shop (name, delivery address, email, phone number, items ordered, payment status): to take payment, produce and deliver your order, and handle returns. Legal basis: contract and legal obligations (accounting and tax records are kept as long as the law requires).
  • Technical data (IP address, browser, pages requested): to keep the site secure and working. Legal basis: legitimate interest. Server logs are kept for a short time.

3. Who receives data

  • Print-on-demand partner (Printful): receives your name, delivery address, email and phone number to produce and ship your order (production in the EU, including Latvia, and the USA).
  • Payment provider (Stripe): processes your payment; we do not see your full card number. It may transfer data within its group, including to the USA, under its own safeguards, and may set cookies to prevent fraud while you pay.
  • Klaviyo (USA): sends the newsletter to those who subscribed; transfers outside the EU rely on safeguards such as the EU–US Data Privacy Framework or standard contractual clauses.
  • Hosting, email and security providers (web host, Cloudflare, the email service that delivers our messages): technically process requests to the site and deliver the emails we send and receive.
  • Delivery carriers chosen by the print partner.

We do not sell personal data.

4. Cookies and videos

The site uses only strictly necessary cookies (for example to remember your shopping cart and keep checkout secure). It does not use advertising or analytics cookies. If that changes, we will ask for your consent first. YouTube videos load only after you press play, using the privacy-enhanced youtube-nocookie.com address; from then on YouTube’s own privacy policy applies.

5. Your rights

You can ask to access, correct or delete your data, restrict or object to its use, receive it in a portable format, and withdraw consent at any time (for example by unsubscribing). Write to hello@pauliuspetrauskas.com. You also have the right to complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt).

6. Children and automated decisions

The site is not aimed at children under 14. We do not make decisions about you by automated means.

7. Changes

We may update this policy; the date at the top shows the latest version.