Privacy Policy

1. Data Controller

MangalKing, Stanevičiaus g., Vilnius, Lithuania. Contact: info@mangalking.lt. For data protection queries: privacy@mangalking.lt (if not yet active, use info@mangalking.lt).

2. Data we collect

We collect only what we need to fulfil your order and run our service:

• Identification: first name, last name
• Contact: email address, phone number
• Order history: items, totals, timestamps, pickup choices, notes
• Payment transaction reference (we never see or store card numbers — those stay within SEB / EveryPay PCI scope)
• Technical: IP address, device/browser type, cookies (see §8)

3. Purpose of processing

We use your data to (a) fulfil the food orders you place, (b) manage your customer account, (c) communicate about orders and required service notices, (d) prevent fraud, and (e) meet legal record-keeping obligations.

4. Legal basis (GDPR Art. 6)

We process your data on the following legal grounds:

• Performance of a contract — taking, preparing and fulfilling your order
• Legal obligation — invoicing and accounting records kept for 5 years per Lithuanian law
• Legitimate interest — fraud prevention, service improvement, security
• Consent — optional marketing communications (opt-in only)

5. Retention period

We retain your data only as long as needed for the purposes above:

• Order and invoice records: 5 years (statutory)
• Customer account: while active, then 3 years from last sign-in
• Non-essential cookies: up to 12 months
• Marketing data: until consent is withdrawn

6. Data sharing

We share data only with the processors needed to run the service, under written agreements that bind them to GDPR-equivalent terms:

• SEB / EveryPay — payment processing
• Courier provider (Phase 2 delivery, if/when introduced)
• Cloud hosting and operational tooling (EU-resident infrastructure)

7. Your rights

Under GDPR Art. 15–22 you have the right to access, rectify, erase, port, restrict and object to the processing of your personal data, and to withdraw consent at any time. To exercise these, contact privacy@mangalking.lt (or info@mangalking.lt). We respond within 30 days.

8. Cookies

We use essential cookies to run the site (session, authentication, cart). With your consent we may also use analytics and marketing cookies. See the cookie banner or the "Manage cookies" link in the footer to review and change your preferences at any time.

9. Right to lodge a complaint

If you believe your data is being mishandled, you may complain to the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija, VDAI) at vdai.lrv.lt or +370 5 271 2804.

10. Changes to this policy

We may update this policy occasionally. Material changes will be announced on the site at least 14 days in advance. The date at the top reflects the most recent revision.