Privacy

Privacy policy

Updated: 2026-07-14

Your privacy matters to us. This policy explains what personal data we collect, how we use it, and what rights you have.

1. Data controller

  1. The controller of personal data is UAB „Kauen craft“, legal entity code 135774259, registered address Kauno g. 1, Kaunas, Lithuania (the “Controller” or the “Seller”).
  2. The online store is the alife energy drink online point of sale, available at www.alifedrinks.com.
  3. For any questions relating to the processing of personal data, you can contact us by email at hello@alifedrinks.com.

2. What personal data we collect

  1. Order fulfilment data: first name, last name, email address, phone number, delivery address, order number, cart contents, delivery method and order status.
  2. Payment data: payment method, payment status, payment date, amount and other information required to confirm the payment. Payment card details and other sensitive payment instrument data are normally processed by the payment service providers.
  3. Communication data: the content of enquiries, complaints, claims, returns, warranty or quality matters and the related contact details.
  4. Account data, if you have created an account in the online store: login details, order history, delivery addresses and account settings.
  5. Newsletter and marketing data, if the Buyer gives consent: email address, phone number, date of consent, source of consent and communication preferences.
  6. Website usage and technical data: IP address, browser type, device information, date and time of the visit, pages viewed, cookie identifiers and other information required for analytics or for the website to function.

3. Purposes and legal bases for processing

Purposes of personal data processing, the data processed and the legal bases
Purpose Data processed Legal basis
Receiving, fulfilling and delivering the order First name, last name, contact details, delivery address, order information Performance of the contract or steps prior to entering into the contract
Administration of payments Payment amount, status, payment method, invoice details Performance of the contract and legal obligation
Accounting and compliance with legal obligations Purchase documents, invoices, payment and order data Legal obligation
Customer service, handling of complaints and claims Contact details, content of enquiries, order information Performance of the contract, legal obligation
Sending newsletters and direct marketing Email address, phone number, consent data Consent
Ensuring the operation, security and analytics of the website Technical data, IP address, cookie information, browsing data Legitimate interest, or consent where consent is required

Where the email address of a legal entity was obtained when entering into a purchase–sale contract, the Seller may send information about its similar goods in the cases permitted by the Law on Electronic Communications of the Republic of Lithuania. The recipient can unsubscribe from such messages free of charge in every email.

Direct marketing messages may be sent to a consumer if the consumer separately ticks the relevant box on the website consenting to receive information from UAB „Kauen craft“ about alife products, campaigns, discounts and other offers by email. Such consent can be withdrawn at any time.

4. Who we share personal data with

  1. Delivery service providers, to the extent necessary to deliver the parcel, administer a return or track the delivery status.
  2. Payment service providers and banks, where this is necessary to initiate or confirm payments or to refund funds.
  3. Providers of the online store platform, IT maintenance, customer service, email, accounting and other services that help administer the online store and fulfil orders.
  4. State institutions, courts, supervisory authorities or other persons, where disclosure is mandatory under legislation or necessary to defend the legitimate interests of the Seller.
  5. Data is transferred only to the extent necessary to achieve the specific purpose and only to recipients who have a lawful basis to receive it.

5. Transfers of data outside the European Economic Area

  1. As a rule, personal data is processed within the European Economic Area.
  2. If certain service providers were to process data outside the European Economic Area, the Controller would ensure that such a transfer takes place only under the safeguards provided for in the GDPR, for example the standard contractual clauses approved by the European Commission or another lawful transfer mechanism.

6. How long we store personal data

  1. Order and contract performance data is stored for as long as necessary to fulfil the order and to resolve warranty, return, claim or dispute matters (data related to claims — 3 years after the claim has been handled).
  2. Accounting documents and payment-related information are stored for the periods set out in legislation (10 years).
  3. Newsletter and marketing data is stored until consent is withdrawn, or for as long as it is needed for marketing communication, unless legislation provides otherwise.
  4. Retention periods for cookie and analytics data are set out in clause 8.6 of this Policy.
  5. Once the retention periods expire, the data is deleted, destroyed or anonymised so that the person can no longer be identified.

7. Rights of the data subject

  1. You have the right to receive information about how your personal data is processed.
  2. You have the right to access your personal data and to obtain a copy of it.
  3. You have the right to request rectification of inaccurate data or completion of incomplete personal data.
  4. You have the right to request erasure of personal data where there is a basis for it in legislation.
  5. You have the right to request restriction of the processing of personal data.
  6. You have the right to object to the processing of personal data where it is processed on the basis of legitimate interest.
  7. You have the right to data portability where this applies under the GDPR.
  8. Where data is processed on the basis of consent, you have the right to withdraw your consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
  9. To exercise your rights, please contact us by email at hello@alifedrinks.com. A reply is normally provided no later than within 30 days of receiving the request, unless legislation allows this period to be extended.

8. Cookies and similar technologies

  1. The online store may use necessary, analytical, functional and marketing cookies.
  2. Necessary cookies are used so that the website works properly — for example, to save the shopping cart, ensure a secure login or complete an order.
  3. Analytical cookies help us understand how visitors use the website and improve how it works (used on the basis of the visitor's consent).
  4. Marketing cookies may be used for personalised advertising or to measure campaign effectiveness, only after the visitor's consent has been obtained where such consent is required.
  5. Visitors can manage their cookie choices in their browser settings or by selecting Manage cookie settings.
  6. Cookies used in the online store and their retention periods:
Cookies and similar technologies used or potentially used on this website
Provider Name Category Purpose Duration
alife alife_cookie_consent Necessary Prevents the alife cookie banner from appearing again after your choice and acts as a fallback consent record. 180 days
alife alife:age-verified Necessary Remembers that the visitor confirmed they are at least 18 years old. 30 days
Shopify _shopify_essential Necessary Stores information required for the store to function, including session, checkout and anti-tampering information. 1 year
Shopify _shopify_test Necessary Checks whether the visitor's browser supports cookies. 1 minute
Shopify _tracking_consent Necessary Stores the visitor's cookie and tracking choices in regions where privacy rules are configured. 1 year
Shopify cart Necessary Stores information about the visitor's shopping cart. 2 weeks
Shopify cart_currency Necessary Initializes a new empty cart in the same currency after checkout. 2 weeks
Shopify discount_code Necessary Stores a discount code received through a URL parameter for the next checkout. Browsing session
Shopify localization Necessary Localizes the cart to the selected country or region. 2 weeks
Shopify login_with_shop_finalize Necessary Completes the sign-in with Shop flow. 5 minutes
Shopify shopify_pay Necessary Recognizes a returning buyer in Shop Pay checkout on the same store. 1 year
Shopify storefront_digest Necessary Allows access to preview a password-protected storefront. 1 year
Shopify _landing_page Analytics Captures the first page opened when a visitor arrives from another website. 2 weeks
Shopify _orig_referrer Analytics Helps identify the website that referred the visitor. 2 weeks
Shopify _shopify_analytics Analytics Stores analytics data on Shopify buyer surfaces such as the storefront or checkout. 1 year
Shopify _shopify_s Analytics Identifies a particular browser session and store combination for analytics. 30 minutes from the last use
Shopify _shopify_y Analytics Helps Shopify distinguish visitors and produce store usage analytics. 1 year
Shopify shop_analytics Analytics Stores buyer information required for analytics in Shop. 1 year
Shopify _shopify_marketing Marketing Stores marketing and attribution data on Shopify buyer surfaces and is used only with the required consent. 1 year
Shopify shopify_override_user_locale Preferences Remembers the selected Shopify interface locale when this feature is used. 1 year
Google Maps NID, _Secure-ENID, AEC, SOCS Functional / preferences May be set when the interactive Google map loads on the contact page and used for Google preferences, security and service operation. The exact cookies depend on the visitor's Google settings. Up to 13 months, depending on the cookie

The cookies listed in the table may only be set when the corresponding feature is used or the required consent has been given. When new apps, pixels or integrations are installed, the list must be updated. More information is available in the Shopify cookie policy and the Google cookie policy.

9. Data security

  1. The Controller applies reasonable technical and organisational security measures designed to protect personal data against unauthorised access, loss, alteration, disclosure or destruction.
  2. Access to personal data is granted only to those employees or service providers for whom such access is necessary to perform their functions.
  3. Although appropriate security measures are taken, transmission of data over the internet can never be considered completely secure, so visitors and customers must also protect their login details and use secure means of communication.

10. Data of minors

  1. The online store is not intended for children (persons under 18 years of age). Energy drinks must be consumed responsibly and in line with the warnings and recommendations provided on the packaging.
  2. If it were to emerge that personal data of a minor had been submitted in the online store without a proper basis, such data may be deleted or its processing restricted.

11. Complaints and supervisory authority

  1. If you believe that your personal data is not being processed properly, we invite you to contact the Controller first, by email at hello@alifedrinks.com.
  2. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania: L. Sapiegos g. 17, 10312 Vilnius, email ada@ada.lt, website vdai.lrv.lt.

12. Changes to this privacy policy

  1. The Controller has the right to amend this Privacy Policy when legislation, the functionality of the online store, data processing procedures or the service providers used change.
  2. The latest version of the Privacy Policy is published in the online store. The Privacy Policy applies from the day it is published, unless another effective date is indicated in it.
  3. Last updated: 2026-07-14.