Privacy policy
Privacy Policy
Last updated: June 7, 2025
Thank you for visiting Mug Senpai. Your privacy matters to us. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, place an order, or contact us.
Mug Senpai is based in Vilnius, Lithuania (EU) and operates under an official individual activity license (IVP No. 1382030). We comply with the General Data Protection Regulation (GDPR) and also observe applicable U.S. privacy laws, including the California Consumer Privacy Act (CCPA/CPRA) for eligible residents.
1. Who We Are
Data Controller: Kostas Derkintis
License: IVP No. 1382030
Location: Riovonių g. 69a-2, Vilnius, 03154, Lithuania (EU)
Email: info@mugsenpai.com
We operate as a sole proprietorship — not a corporate entity. This information is provided to meet legal identification requirements under GDPR.
2. Information We Collect
We collect only the data necessary to fulfill orders, support customers, and improve your experience.
Collected data may include:
- Name and shipping address – to deliver your order
- Email – to send order updates or respond to inquiries
- Order details – product, amount, timestamps (for tax/legal records)
- IP address and browser/device info – via Shopify and analytics tools
- Consent-based marketing email signup (via popup or checkout). Marketing emails are sent only with explicit consent, confirmed via double opt-in where required by law.
We do not collect or store full payment card numbers. All transactions are securely processed by Shopify Payments or other certified providers.
3. Why We Use Your Data
Your personal information is used for:
- Processing and shipping orders
- Sending receipts and tracking updates
- Providing customer support
- Legal and accounting compliance
- Optional marketing (if consented)
- Website analytics (only with consent)
4. Data Retention Periods
- Order info (name, address, product) → 10 years (legal requirement)
- Marketing email consent → Until withdrawn
- Product reviews → Until deleted by request
- Cookies → Based on user preferences and browser duration
You may request deletion of any non-legally required data.
5. Cookies & Tracking
We and our service providers (like Shopify) use cookies and similar technologies to:
- Run our store
- Save preferences (like cart contents)
- Analyze site traffic
- Show popup offers or discounts (if consented)
We use tools such as Google Analytics and Microsoft Clarity to understand how users interact with our store. These tools may collect anonymized data, including click behavior, scroll depth, and session recordings. Data is only collected if you have consented to analytics cookies.
For full cookie details, see Shopify’s policy:
🔗 https://www.shopify.com/legal/cookies
You can manage cookie preferences through your browser or privacy settings. We honor Global Privacy Control (GPC) signals for opting out of tracking.
6. Third-Party Services
Your data may be securely shared with:
- Shopify – to power our store
- Printify / Fulfillment Partners – to print and ship your mug
- Payment processors – for transaction handling
- Analytics & Email providers – only if you’ve opted in
All service providers are contractually bound to follow data protection laws. We do not sell your data, ever.
7. Your Rights (GDPR & Global)
You may contact us anytime to:
- Access your stored data
- Correct or update info
- Request deletion (where allowed)
- Withdraw email marketing consent
- Request data export in readable format
⏱ Response time: Within 14 calendar days
✉️ Email: info@mugsenpai.com
If unresolved, EU users may escalate complaints to the Valstybinė duomenų apsaugos inspekcija (VDAI) or use the European Commission’s online dispute platform.
8. Children’s Privacy
This site is not intended for children under age 13. We do not knowingly collect children’s data. If discovered, it will be deleted immediately.
9. International Data Transfers
Your information may be stored and processed in the EU, U.S., or other countries through Shopify and our partners. We use legal data transfer mechanisms such as Standard Contractual Clauses to ensure your information is protected.
10. Data Security
We use encrypted technology and secure platforms to protect your information. Our store is hosted on Shopify, which is PCI DSS compliant and uses SSL encryption to secure transactions. While no method is 100% secure, we also apply best practices to protect the limited data we handle directly (such as restricting email access). In the event of a breach, we will notify affected parties and regulatory authorities as required.
11. Changes to This Policy
We may update this Privacy Policy as needed. The latest version will always appear on this page with an updated date. Continued use of our website constitutes agreement to the new terms.
Contact Us
For privacy-related questions or data access requests, please contact us at:
✉️ info@mugsenpai.com
🕓 Mon–Fri: 10:00 – 18:00 EST
Note: Our registered business address is disclosed in Section 1, as required by EU GDPR.