Privacy Policy

Last updated: October 8, 2026

1. Who is responsible for your data?

Norio, UAB, operating the MyAurio online store at myaurio.com, is the controller of the personal data we process to operate our store and manage our customer relationships.

  • Company registration number: 306949622
  • Registered address: J. Jasinskio g. 7-13A, LT-01112 Vilnius, Lithuania
  • Email: hello@myaurio.com
  • Telephone: +370 700 66 029

This Policy explains our handling of information when you visit the store, place an order, contact us or subscribe to communications.

2. Information we process

Depending on your interactions with us, we process:

  • Contact and delivery information, such as your name, email, telephone number, billing address, shipping address and selected pickup location;
  • Order information, including products purchased, amounts, payment status, transaction references, delivery status, returns and refunds;
  • Account information, if you create an account;
  • Correspondence and information you provide when requesting support or making a complaint;
  • Technical information, such as IP address, browser, device information and security logs;
  • Cookie identifiers, usage information and marketing preferences where the relevant technologies are enabled and a valid legal basis exists.

We receive information directly from you and, where necessary, from Shopify, payment providers and delivery partners, for example payment confirmation and shipment status.

Payment credentials are handled through the relevant payment services. Please do not send card details, bank login credentials or other sensitive information by email.

3. Purposes and legal bases

We process information to:

  • Fulfil your order and manage your account: to enter into and perform our contract, including payment coordination, delivery, order communications and returns;
  • Meet legal obligations: including accounting, tax, consumer protection and product safety requirements;
  • Provide support and resolve disputes: to perform the contract, comply with legal obligations and pursue our legitimate interest in resolving enquiries and establishing or defending claims;
  • Protect the store: on the basis of our legitimate interest in preventing fraud, securing our systems and maintaining a reliable service;
  • Send promotional communications: with your consent, or under a legally permitted existing-customer exception where its conditions are met. You can unsubscribe at any time;
  • Use optional analytics or advertising technologies: with your consent where required.

Our legitimate interests are assessed against your rights and reasonable expectations. Accepting our purchase terms does not automatically subscribe you to marketing.

Essential order, payment and delivery information is needed to complete your purchase. If you do not provide it, we may be unable to accept or fulfil your order. Optional marketing consent is not a condition of purchase.

4. Payment processing through MakeCommerce.lt

Payments in our online store are processed using the MakeCommerce.lt platform, operated in Lithuania through Maksekeskus AS Lithuania filialas, Konstitucijos pr. 21A, LT-08105 Vilnius, Lithuania, registration number 307639352. Personal information necessary to execute and confirm your payment is therefore transferred to Maksekeskus AS.

Depending on the payment method, this may include your name, contact details, order reference, payment amount, currency and relevant transaction information. Payment providers and participating banks also process information under their own legal obligations and privacy notices.

For further information, see MakeCommerce's Privacy Policy.

5. Other recipients

We share relevant information only where needed with:

  • Shopify and its service providers, which provide the platform and infrastructure for our store;
  • Couriers, parcel locker operators and fulfilment partners, to prepare and deliver orders;
  • IT, communications and customer support providers, where used to operate the store and assist customers;
  • Accounting and professional advisers, where needed for compliance or claims;
  • Analytics and advertising providers, where those tools are enabled and the required consent has been obtained;
  • Public authorities, where disclosure is required by law.

Service providers acting on our behalf must process information under appropriate contractual safeguards. Some recipients, including payment providers, may act as independent controllers for their own processing.

Shopify's privacy information is available at shopify.com/legal/privacy.

6. International transfers

Shopify and other service providers may process information outside the European Economic Area. Where such transfers occur, the applicable GDPR transfer mechanism must be in place, such as an adequacy decision or European Commission Standard Contractual Clauses, with additional safeguards where necessary. Contact hello@myaurio.com for information about the safeguards applicable to your data or how to obtain a copy.

7. Cookies and similar technologies

Essential cookies support functions such as the shopping cart, checkout, security and remembering privacy choices. Optional analytics and advertising technologies, where enabled, are used only after consent where required by law.

You can accept or reject optional cookies and change your choices through the store's cookie settings. Your browser also allows you to manage cookies, although blocking essential cookies may affect checkout. The cookie consent interface provides information about enabled optional technologies and their duration.

8. Retention and security

We retain data according to its purpose: order and accounting records for the applicable statutory recordkeeping period; account data while the account is maintained and for any necessary subsequent legal period; support and dispute records until the matter and relevant claim periods have ended; and marketing information until consent is withdrawn or the relevant lawful marketing basis ends. A limited record of an opt-out may be retained to respect your choice. Technical and cookie data are retained according to their security purpose and the durations identified in the relevant cookie information.

We delete or anonymise information when it is no longer needed, unless continued retention is legally required. We apply appropriate technical and organisational safeguards and limit access to authorised persons who need it.

9. Your rights

Subject to applicable conditions, you may request access, correction, deletion, restriction or portability of your data. You may object to processing based on legitimate interests and may object to direct marketing at any time. Consent can be withdrawn without affecting earlier lawful processing.

Contact hello@myaurio.com to exercise your rights. We may request proportionate identity verification. We normally respond within one month; legally permitted extensions will be explained to you.

You can complain to the Lithuanian State Data Protection Inspectorate at vdai.lrv.lt or the competent supervisory authority in your country.

10. Updates

We may revise this Policy as our services or legal requirements change. The current version and update date are published here. Where required, we will separately notify you of material changes or seek fresh consent.