Who we are
The controller of your personal data is YZY SOFT (operating the online shop Acute Angle Shop, https://acuteangleshop.com), Ozo g. 3, Vilnius 08200, Lithuania. Contact: security@yzysoft.com.
This Privacy Policy explains what personal data we collect when you visit our website or place an order, why we use it, on what legal basis, how long we keep it, and what rights you have. We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR, in Lithuanian BDAR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.
What data we collect, why, and on what legal basis
| Purpose | Data | Legal basis (GDPR Art. 6) |
|---|---|---|
| Processing and delivering your order, payment, customer support related to the order | Name, delivery and billing address, email, phone number, order details, payment status | Performance of a contract (Art. 6(1)(b)) |
| Accounting, invoicing and tax obligations | Invoice and order data | Legal obligation (Art. 6(1)(c)) |
| Answering your enquiries | Name, email, content of your message | Legitimate interest in answering you (Art. 6(1)(f)), or contract (Art. 6(1)(b)) if the enquiry concerns an order |
| Customer account | Name, email, address, order history | Performance of a contract (Art. 6(1)(b)) |
| Marketing emails and news | Name, email address | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Website analytics | IP address, device and browser data, pages visited (Google Analytics / Google Tag Manager) | Your consent (Art. 6(1)(a)) given in the cookie banner |
| Targeted advertising and measuring advertising results | Browser identifiers and pages viewed (Meta Pixel) | Your consent (Art. 6(1)(a)) given in the cookie banner |
| Security of the website and prevention of fraud and abuse | IP address, server logs | Legitimate interest (Art. 6(1)(f)) |
| Establishing, exercising or defending legal claims | Order and correspondence data | Legitimate interest (Art. 6(1)(f)) |
Providing the data needed for an order is necessary to conclude the purchase contract; without it we cannot deliver your order. All other data is provided voluntarily.
We do not sell your personal data and do not use it for automated decision-making or profiling that produces legal effects for you.
Who receives your data
We share personal data only to the extent necessary and only with:
- PayPal (Europe) S.à r.l. et Cie, S.C.A. – payment processing (including card payments, Apple Pay and Google Pay processed through the checkout). PayPal acts as an independent controller for its own purposes; see PayPal’s privacy statement.
- Postal and courier services – to deliver your parcel (name, address, phone number, email).
- Google Ireland Limited – Google Analytics and Google Tag Manager (website analytics and tag management), only if you consent to the relevant cookies.
- Meta Platforms Ireland Limited – Meta Pixel (advertising and measuring its results), only if you consent to marketing cookies.
- Accounting, hosting and IT service providers acting on our behalf under data processing agreements.
- Public authorities where we are required to do so by law.
Transfers outside the EU/EEA
Some of our providers, in particular Google and Meta, may process data in the United States or other countries outside the European Economic Area. In such cases the transfer is based on an European Commission adequacy decision (including the EU–US Data Privacy Framework, where the recipient is certified) or on Standard Contractual Clauses, together with additional safeguards where needed. You can request more information using the contact details above.
Cookies, Google Analytics and Meta Pixel
We use cookies and similar technologies. Cookies that are not strictly necessary (analytics and marketing) are set only after you give consent in the cookie banner. You can change or withdraw your choice at any time through the cookie settings on our website. Details are in our Cookie Policy.
Google Analytics is a web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). It helps us understand how visitors use the website. Google may transfer data to Google LLC in the United States. You can prevent the collection of data by Google Analytics by withdrawing your cookie consent, or by installing the Google Analytics opt-out browser add-on. More information: Google Privacy Policy.
Meta Pixel is a service of Meta Platforms Ireland Limited (Merrion Road, Dublin 4, Ireland). With your consent, it lets us measure the results of our advertising and show our ads to people who visited our website, on Facebook and Instagram. The pixel transmits your browser identifier and information about the pages you viewed to Meta. We do not receive your Meta profile data. You can manage ad preferences in your Facebook ad settings, and withdraw your consent through our cookie settings. More information: Meta Privacy Policy.
Social media
Our website contains links to our profiles on Facebook and Instagram. Clicking a link takes you to the website of the respective social network, which is operated by Meta Platforms Ireland Limited and is subject to its own privacy policy. No data is sent to those networks merely because you view our pages without clicking the links.
Emails
We send order-related messages (confirmation, shipping information) to fulfil your order. We send marketing emails only if you subscribed or gave your consent. Every marketing email contains an unsubscribe link, and you can also unsubscribe by writing to security@yzysoft.com. Withdrawal of consent does not affect the lawfulness of processing before the withdrawal.
How long we keep your data
- Orders, invoices and accounting records: 10 years after the end of the financial year, as required by Lithuanian accounting law.
- Customer account data: until you delete your account or ask us to delete it (data we must keep by law is retained for the period above).
- Correspondence and enquiries: 3 years after the last contact.
- Marketing consent and email subscription: until you withdraw your consent or unsubscribe; we keep a record of the consent for as long as needed to prove it.
- Analytics and advertising cookies: for the period stated in our Cookie Policy, or until you withdraw your consent.
- Server logs and security data: up to 12 months, unless needed longer to investigate an incident.
After these periods we delete or anonymise the data.
Your rights
Under the GDPR you have the right to:
- access your personal data and receive a copy of it (Art. 15);
- have inaccurate data corrected and incomplete data completed (Art. 16);
- have your data erased, “the right to be forgotten” (Art. 17);
- restrict processing (Art. 18);
- receive your data in a structured, commonly used, machine-readable format and transmit it to another controller (data portability, Art. 20);
- object to processing based on our legitimate interests (Art. 21);
- withdraw your consent at any time, without affecting the lawfulness of processing carried out before the withdrawal (Art. 7(3)).
To exercise your rights, write to us at security@yzysoft.com or by post at YZY SOFT, Ozo g. 3, Vilnius 08200, Lithuania. We will reply within one month. We may ask you to confirm your identity before we act on a request.
Right to lodge a complaint
If you believe that we process your personal data unlawfully, you have the right to lodge a complaint with the supervisory authority. In Lithuania this is the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, VDAI): https://vdai.lrv.lt. You may also complain to the supervisory authority in the EU country where you live or work. We would appreciate the chance to resolve your concern first, so please contact us before you do.
Security
We take appropriate technical and organisational measures to protect personal data against loss, destruction, alteration, unauthorised access or disclosure, including encrypted connections (HTTPS), access control and password-protected servers. No transmission over the internet can be guaranteed to be completely secure.
Protection of minors
Our website is not directed at children under 16 and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.
Links to other websites
Our website may contain links to third-party websites. We are not responsible for their content or privacy practices. This Privacy Policy does not apply to those websites.
Governing law
This Privacy Policy is governed by the laws of the Republic of Lithuania and EU data protection law. This does not limit mandatory consumer rights under the law of your country of residence.
Changes to this Privacy Policy
We may update this Privacy Policy when our processing or the law changes. The current version is always available on this page, and the date of the last update is shown below. This Privacy Policy applies together with our Terms & Conditions.
Last updated: 4 November 2026