The short version
- We use your pet's photo only to draw your sketches and print your order. We delete it 90 days after you last used it.
- We never use your photo or your pet's portrait in advertising without asking you first.
- We don't sell your data.
- Analytics and advertising cookies are used only if you allow them.
- Write to info@houseofmorka.com and we'll show you, correct or delete your data.
Who is responsible
House of Morka, K. Donelaičio g. 62, LT-44248 Kaunas, Lithuania, info@houseofmorka.com, is the controller of your personal data under the EU General Data Protection Regulation (GDPR).
What we collect and why
Your pet's photo, name and text
When you upload a photo and enter a name or text, we use them to draw your sketches, show them to you, and — if you order — prepare the print file and print your item. Legal basis: taking steps at your request before a contract and performing it (Article 6(1)(b) GDPR).
If a photo shows people, we only use the pet. We don't use photos to identify anyone, and we don't create biometric data. Please upload photos without other people where you can.
Your order
Name, email, delivery address, phone number (if you give it), the items you order and your order history. We use them to process, print, ship and support your order (Article 6(1)(b)), and keep invoices and accounting records because the law requires it (Article 6(1)(c)).
Payment
Payments are processed by our payment providers. We see the payment method, the amount and the last digits of a card, never the full card details.
Your account
If you create an account: your email, name, addresses and order history, so you can sign in and see your orders and designs (Article 6(1)(b)).
Messages
When you write to us, we keep the conversation to answer you and handle any reprint or refund (Article 6(1)(b) and (f)).
Newsletter
If you sign up, we send you news and offers by email. Legal basis: your consent (Article 6(1)(a)). Every email has an unsubscribe link. If you have bought from us, we may also email you about similar products unless you have opted out (Article 6(1)(f)); you can opt out at any time.
Reviews and showing your pet
If you send us a review or photos of your item, or agree that we show your pet's portrait on our site or social media, we do so only with your explicit consent, which you can withdraw at any time (Article 6(1)(a)).
Using the site
Technical data such as your IP address, device, browser, pages visited and cart contents. Needed to run the shop, keep it secure and prevent fraud (Article 6(1)(b) and (f)). Analytics and advertising data only with your consent — see Cookies below.
Who we share data with
We share only what each provider needs to do its job, under contracts that require them to protect it:
- Shopify (Shopify International Limited, Ireland) — runs our online shop, checkout, payments, customer accounts and order emails.
- Payment providers — Shopify Payments and, if you choose it, PayPal (Europe) S.à r.l. et Cie, S.C.A., Luxembourg, which acts as an independent controller.
- Image-generation provider — OpenAI, which draws the sketches from your photo. Data sent through its API is not used to train its models and is kept for up to 30 days for abuse monitoring.
- Hosting and storage providers — keep your uploaded photos, sketches and print files.
- Our print partner in Kaunas, Lithuania — receives the print file and your order details and packs your parcel.
- Couriers — receive your name, delivery address, email and phone number to deliver your parcel and send tracking updates.
- Email service provider — sends our newsletter, if you signed up.
- Analytics and advertising partners — such as Google and Meta (Facebook, Instagram), only if you accept these cookies.
- Our accountant and authorities — where the law requires it, for example for tax.
We don't sell your personal data.
Transfers outside the EU
Some providers (for example OpenAI, Google and Meta) process data in the United States or other countries outside the EU. We use them only with safeguards approved by the European Commission: the EU–US Data Privacy Framework, adequacy decisions or the Commission's Standard Contractual Clauses. Write to us for a copy of the relevant safeguards.
How long we keep it
| Data | How long |
|---|---|
| Pet photos you upload | 90 days after you last used them |
| Sketches you didn't order | 90 days |
| Designs and print files of ordered items | 12 months after delivery, so we can reprint a faulty item |
| Orders, invoices and accounting records | 10 years, as Lithuanian accounting law requires |
| Customer account | until you delete it |
| Emails with us | 3 years after our last message |
| Newsletter | until you unsubscribe |
You can ask us to delete your photos and designs sooner — write to us and we do it within 30 days, unless we still need them for an order in progress.
Cookies
We use cookies and similar technologies (such as your browser's local storage).
- Necessary — keep your cart, checkout, sign-in and security working, and remember your cookie choice. Always on.
- Preferences — remember your choices, such as dogs or cats and your favourite designs. These stay in your own browser.
- Analytics — help us understand how the site is used, so we can improve it. Only with your consent.
- Marketing — measure our ads and show relevant ones on other sites and social media. Only with your consent.
When you first visit, a banner lets you accept or refuse analytics and marketing cookies. You can change your choice at any time through the cookie settings link at the bottom of the site, or by clearing cookies in your browser.
Your rights
You have the right to access your data, have it corrected or deleted, restrict or object to its use, receive it in a portable format, and withdraw any consent at any time (this doesn't affect what we did before). Write to info@houseofmorka.com. We answer within one month.
If you think we're not handling your data properly, please tell us first. You can also complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, L. Sapiegos g. 17, LT-10312 Vilnius, ada@ada.lt, vdai.lrv.lt) or the data protection authority in your country.
Children
Our shop is not intended for children under 16. Kids' shirts are bought by adults.
Automated decisions
We don't make decisions about you that have legal or similarly significant effects based solely on automated processing.
Security
The site and checkout use encrypted connections. Access to photos, designs and orders is limited to the people who need it to make and support your order.
Changes
We may update this policy. The date at the top shows the latest version; if a change is important, we'll tell you by email or on the site.