Privacy Policy

Last updated: 2026.08.14

Who we are

Our website address is: https://nextstepoffashion.com

We understand the particular importance of protecting your personal data. For this reason, we collect and process only the data that is necessary for carrying out our activities. We process personal data lawfully, transparently and fairly, for purposes defined in advance, and only to the extent necessary to achieve those purposes. When processing personal data, we aim to ensure that it is accurate, secure, confidential, properly stored and protected. In processing your personal data, we comply with the General Data Protection Regulation (hereinafter - GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and personal data processing requirements set out in other legal acts.

1. What is this document?

1.1. This privacy policy (hereinafter - the Privacy Policy) sets out the privacy conditions applying when you use the website nextstepoffashion.com (hereinafter - the Website).

1.2. Please read this Privacy Policy carefully so that you understand the practices we apply when processing your personal data. After reading this document, you will know how we process your personal data, where we obtain it from, and what rights you have as a data subject.

1.3. If you use the Website, this means you have read and agreed to this Privacy Policy and to the purposes, methods and procedures for processing your personal data described in it. If you do not agree with the Privacy Policy, you are not entitled to use the Website.

1.4. In this Privacy Policy, the term "personal data" means any information by which you can be identified - directly or indirectly. Personal data includes surname, name, date of birth, postal or email address, location data and online identifiers, characteristics specific to you, and other similar information.

1.5. The Privacy Policy applies to all persons visiting the Website, as well as to any actions you may perform on the Website.

2. Who are we?

2.1. The Website is managed by Brigita Zukauskaite, operating under the brand Next Step of Fashion.

2.2. Under the provisions of applicable legal acts, we are the controller of your personal data.

3. What principles do we follow?

3.1. When processing your personal data, we will:

a) comply with the requirements of applicable law, including the GDPR;

b) process your personal data in a lawful, fair and transparent manner;

c) collect your personal data for specified, clearly defined and legitimate purposes, and not process it further in a way incompatible with those purposes, except to the extent permitted by law;

d) take all reasonable steps to ensure that personal data which is inaccurate or incomplete, having regard to the purposes of its processing, is corrected, supplemented, its processing suspended, or erased without delay;

e) keep it in a form which allows your identity to be established for no longer than is necessary for the purposes for which the personal data is processed;

f) not provide personal data to third parties and not make it public, except in the cases set out in this Privacy Policy or in cases provided for by law;

g) ensure that your personal data is processed in a way that guarantees appropriate security through relevant technical or organisational measures, including protection against unauthorised or unlawful processing and against accidental loss, destruction or damage.

4. How do we collect your personal data?

4.1. We process personal data obtained in the following ways:

a) when you provide the data to us. You provide us with your personal data when you submit enquiries on the Website or communicate with us by telephone or email. If you contact us in writing, by email or by telephone, we will retain the correspondence or call records;

b) when you use the Website. When you use the Website, certain information (e.g. IP address, type of browser used, number of visits to the Website, pages viewed, time spent on the Website, demographic data and, if you arrived at the Website from a third-party website, the referring page URL) is collected automatically;

c) when we receive your personal data from other persons in accordance with legal acts and/or this Privacy Policy.

4.2. We may combine personal data received from you with data we have collected ourselves from other public or accessible sources. For example, we may combine the personal data you have provided with data obtained through website cookies, data collected while providing our services, or data lawfully obtained from third parties. In exercising your rights, you may at any time request the correction of inaccurate personal data.

5. What data do we process and for what purposes?

5.1. We process your personal data for the following purposes:

a) To ensure the quality of sales and services - that is, to respond to enquiries you have submitted through the Website about our products, solutions or services. You provide us with your personal data by writing to us or communicating with us by telephone, or by submitting complaints about the Website or the services we provide. If you contact us in writing, by email or by telephone, we will retain the correspondence records.

Personal data processed for this purpose:

• Data categories: name, surname, email address, telephone number, and data provided when you submit an enquiry about our products, solutions or services by email (e.g. message text) or by telephone (e.g. date, time and duration of the call).

• Legal basis: your consent, as well as our legitimate interest in assessing client feedback in order to improve the quality of our activities and services.

• Retention period: 1 year from the date your enquiry is submitted to us.

b) For direct marketing purposes - to send you offers, newsletters and information about products and/or services of ours, of persons related to us, and of our partners.

Personal data processed for this purpose:

• Data categories: name, surname, email address.

• Legal basis: your consent.

• Retention period: 3 years from the date you give us your consent, or until you withdraw that consent in the manner described in section 6.7 of this Privacy Policy.

c) To ensure the functionality of the Website, as well as to improve it and offer you better and more relevant services. When you use the Website, certain data is transmitted to us automatically following your visit. This data is non-personal information used to improve the content, functionality and usability of the Website. You can read more about this in section 7 of this Privacy Policy.

5.2. We do not request and do not process special categories of personal data revealing your racial or ethnic origin, political opinions, religious or philosophical beliefs, trade union membership, health data, or data concerning your sex life or sexual orientation. If, while using the Website or in any other way (in writing, by email or by telephone), you provide us with such data, it will be considered that this data was provided with your consent. Accordingly, we will process this data together with the other data you have provided in the ways described in section 5.1 of this Privacy Policy.

5.3. We may combine personal data received from you with data collected from other public or accessible sources (e.g. we may combine the personal data you have provided with data obtained through Website cookies, or with data lawfully obtained from third parties). In exercising your rights, you may at any time request the correction of inaccurate personal data.

6. Do we use your personal data for direct marketing?

6.1. Yes, we may use your personal data for direct marketing purposes in order to send you offers, newsletters and information about products and/or services of ours, of persons related to us, and of our partners, which in our view may be of interest to you. However, we will use your personal data for this purpose only with your separate consent.

6.2. For this purpose, we process the personal data listed in section 5.1(b) of the Privacy Policy.

6.3. You can choose whether to allow us to use your personal data for direct marketing purposes. You can do this in the contact form by ticking the option "I agree that my data may be used for marketing purposes."

6.4. By granting the right to process your data for direct marketing purposes, you also grant us permission to contact you for this purpose by means of communication (e.g. email, telephone, SMS) or other communication tools.

6.5. We may combine the information we hold about you with information held by third parties in order to send you offers and newsletters.

6.6. If you consent to the use of your personal data for direct marketing purposes, we may use your personal data to analyse and improve the effectiveness of our websites, advertising and market research, and for other marketing and sales purposes. In such cases we will use your data in anonymised form.

6.7. Even if you have consented to the processing of your personal data for direct marketing purposes, you may withdraw this consent easily at any time, for all or part of the processing activities. To do so, you may:

a) unsubscribe using the method indicated in the offers or newsletters received electronically (e.g. by clicking the "Unsubscribe" link), or

b) send us a request to the email address indicated in this Privacy Policy. The request must clearly state your name and surname. If you express a wish to withdraw your consent in this way, we may ask you to provide identity documents.

6.8. If you withdraw your consent, we will endeavour to stop processing your personal data for direct marketing purposes as soon as possible.

6.9. Withdrawal of consent does not automatically oblige us to erase your personal data or to provide you with information about the personal data we process. If you would like us to carry out these actions as well, you must state this separately in your request.

7. How do we use cookies?

7.1. We collect information about you using cookies and similar technologies. Cookies are small files temporarily stored on your device's hard drive that allow us to recognise you during subsequent visits to the Website, save browsing history and preferences, tailor content, speed up searches on the Website, create a convenient and user-friendly Website environment, and present it more efficiently and reliably. Cookies are a standard practice in website browsing that makes using a website easier.

7.2. Using cookies, we may collect the following information: IP address, type of browser used, number of visits to the Website, pages viewed, time spent on the Website, demographic data and, if you arrived at the Website from a third-party website, the referring page URL.

7.3. We use the information obtained through cookies for the following purposes:

a) to ensure the functionality of the Website (e.g. so that you can use Website personalisation);

b) to improve and develop the Website so that it better meets your needs;

c) for service development and analysis of Website use;

d) for targeted marketing.

7.4. We may, without breaching legal acts, combine information obtained through cookies with information obtained about you by other means (e.g. combine information about your use of the Website with the personal data you have provided).

7.5. The following cookies may be used on the Website:

a) technical cookies - cookies that are necessary for the Website to function;

b) functional cookies - cookies that, while not necessary for the Website to function, significantly improve its performance, quality and user experience;

c) analytical cookies - cookies used to prepare statistical analysis of Website visitors' navigation methods; the data collected by these cookies is used anonymously;

d) targeting or advertising cookies - cookies used to display offers or other information that may be of interest to you;

e) social media cookies - cookies necessary in order to use Website information within your social media profile account.

7.6. You may give consent to the use of cookies in the following ways:

a) by not deleting them and/or not changing your browser settings so that it does not accept cookies;

b) by clicking "I agree" on the cookie notice (banner) presented on the Website.

7.7. You may withdraw your permission for us to use cookies at any time. You can do this by changing your browser settings so that it does not accept cookies. How to do this depends on the operating system and browser you use. Detailed information about cookies, their use and opt-out options can be found at http://AllAboutCookies.org or https://policies.google.com/technologies/ads.

7.8. In some cases - in particular where technical and functional cookies are disabled, refused or deleted - browsing speed may be reduced, certain Website functions may be limited, or access to the Website may be blocked.

8. Who do we provide your personal data to?

8.1. We guarantee that your personal data will not be sold, provided or otherwise transferred to third parties without a legal basis, nor used for purposes other than those for which it was collected. We will not transfer your personal data in any way other than in accordance with this Privacy Policy. However, we reserve the right to disclose information about you if we are required to do so by law, or if requested by lawfully acting law enforcement or prosecuting authorities.

8.2. We may transfer your personal data to companies that assist us in carrying out our activities, including direct marketing. We require such partners to process your data only in accordance with our instructions and applicable data protection legislation.

8.3. We may disclose the data we have collected about you to the following third parties:

a) third-party service providers (e.g. technical service providers, in the performance of our contracts with them, including services relating to newsletter distribution or other marketing activities);

b) third-party service providers whose services we generally use for data storage, telecommunications and website hosting.

8.4. The ability of the service providers listed above to use your data is limited - they may not use this data for any purpose other than providing services to us.

9. How long do we store your personal data?

9.1. We store your personal data for no longer than is required by the purposes of processing or provided for by legal acts, where those acts set a longer retention period.

9.2. We aim not to store outdated or irrelevant personal data, so once data is updated only the current information is retained. Historical information is retained where this is required by law or necessary for carrying out our activities.

9.3. The retention periods for your personal data are set out separately for each processing purpose in section 5.1 of this Privacy Policy.

10. How do we protect your personal data?

10.1. The data we collect from you will be held within the territory of the European Union (EU).

10.2. Unfortunately, the transmission of information over the internet is not entirely secure. Although we make every effort to protect your personal data, we cannot guarantee the security of data while you transmit it to the Website - you assume the risk associated with transmitting data to the Website. Once we receive your data, we apply strict procedures and security measures to protect it from unauthorised access.

10.3. In the unlikely event that we become aware of a breach of the security of your personal data that may pose a significant risk to your rights or freedoms, we will inform you without delay as soon as we become aware of it and have established what information was accessed.

11. External websites

11.1. The Website may contain links to external websites - those of our business partners or websites where our products and/or services are advertised. If you follow such links to any of these websites, please note that these websites and the services accessible through them have their own separate privacy policies. We accept no responsibility or liability for these policies or for the personal data collected on these websites or in the provision of their services, such as contact or location data. Please review these policies before submitting personal data on these websites or using any of their services.

12. What rights do you have?

12.1. When processing personal data, we ensure your rights under the GDPR and the Law on Legal Protection of Personal Data of the Republic of Lithuania. As a data subject, you have the following rights:

a) to know (be informed) about the processing of your personal data;

b) to access the personal data we process about you;

c) to request the correction, supplementation or clarification of incorrect, inaccurate or incomplete personal data;

d) to request the erasure of personal data when it is no longer needed for the purposes for which it was collected;

e) to request the erasure of personal data if it is processed unlawfully, or where you withdraw your consent to the processing of personal data or do not give such consent where it is required;

f) to object to the processing of personal data or to withdraw consent previously given;

g) to request the restriction (other than storage) of the processing of your personal data where there is a dispute or a need to verify the lawfulness of processing or the accuracy of the data, as well as in cases where we no longer need your personal data but you do not wish us to erase it;

h) to request that personal data collected on the basis of your consent or for the performance of a contract be provided to you in an easily readable format, or transmitted to another data controller, where this is technically feasible.

12.2. We will endeavour to guarantee the exercise of your rights as a data subject and to create all conditions for these rights to be exercised effectively. However, we reserve the right not to comply with your requests where this is necessary to ensure:

a) the performance of our legal obligations;

b) national security or defence;

c) public order, or the prevention, investigation, detection or prosecution of criminal offences;

d) important economic or financial interests of the State;

e) the prevention, investigation and detection of breaches of official or professional ethics;

f) the protection of your rights and freedoms or those of others.

12.3. You may submit requests relating to the exercise of your rights to us in person, by post or by electronic means. Upon receiving your request, we may ask you to provide identity documents, as well as other additional information relating to the request that we may need.

12.4. Upon receipt of your request, we will respond no later than 30 calendar days from the date your request and all documents necessary to respond are received.

12.5. If we consider it necessary, we will suspend the processing of your data, other than storage, until your request has been resolved. If you lawfully withdraw your consent, we will cease processing your personal data immediately and no later than within 30 calendar days, except in the cases set out in section 12.2 of this Privacy Policy and in legal acts - that is, where applicable legislation, our legal obligations, court decisions or binding instructions from authorities require us to continue processing your data.

12.6. If we refuse to comply with your request, we will clearly state the grounds for that refusal.

12.7. If you disagree with our actions or with our response to your request, you may appeal against our actions and decisions to the competent state authority.

13. Where can you submit a complaint?

13.1. If you wish to submit a complaint about our processing of data, please submit it in writing, providing as much information as possible, using the contact details given at the end of this policy. We will cooperate with you and endeavour to resolve any issues without delay.

13.2. If you believe that your rights under the GDPR have been breached, you may submit a complaint to our supervisory authority - the State Data Protection Inspectorate of the Republic of Lithuania (Valstybinė duomenų apsaugos inspekcija) - although we will first try to resolve any disputes together with you.

14. How will this Privacy Policy be changed?

14.1. All changes to our Privacy Policy will be published on the Website. Where necessary, we will notify you of them. New terms of the Privacy Policy may also be published on the Website, and you may need to read and agree to them in order to continue using the Website and/or our services.

15. How to contact us

15.1. Please send all documents relating to this Privacy Policy to the following contact details: by email - info@nextstepoffashion.com