Privacy policy

Last updated: October 21, 2026

This Privacy Policy explains how Neckline Society ("we", "us", "our") collects, uses and shares your personal information when you visit [necklinesociety.com] (the "Site"), buy from us, or contact us. Please read it carefully. By using the Site you acknowledge the practices described here.

1. Who we are

The Site is operated by MB Alza Grupė, company code [company code], registered at [registered address], Vilnius, Lithuania. We are the "controller" of your personal information for the purposes of the EU General Data Protection Regulation (GDPR).

Questions about privacy: [support@necklinesociety.com]

2. The information we collect

Information you give us

Order details: name, shipping and billing address, email address, phone number and the products you buy.
Payment details: handled directly by our payment providers (Shopify Payments, PayPal and others shown at checkout). We do not see or store your full card number.
Messages: what you write to us by email or through our contact form, including your order number.
Newsletter: your email address if you sign up for emails.
Reviews: your name or initials, location, rating, text and any photos you choose to send us.

Please don't send us medical records or detailed health information. If you mention a skin or health condition in a message, we use it only to answer you.

Information collected automatically

Device and usage data: IP address, browser, device type, pages viewed, time spent, how you arrived at the Site and what you clicked.
Cookies and similar technologies: small files and pixels used to keep your cart, remember preferences, measure visits and show relevant ads. See section 6.

Information from others

Delivery updates from shipping carriers.
Payment confirmations and fraud checks from payment providers.
Ad and audience data from advertising platforms such as Meta (Facebook and Instagram).

3. How we use your information

To process, ship and track your order, and to handle returns and refunds, including our 60-night trial.
To answer your questions and provide customer support.
To send order and shipping emails.
To send marketing emails, only if you signed up. You can unsubscribe at any time with the link in every email.
To show you relevant ads on other websites and apps, and to measure how well our ads work.
To improve the Site, our products and our customer experience.
To prevent fraud and keep the Site secure.
To meet our legal, tax and accounting obligations.

Legal bases (for visitors in the EU, EEA and UK)

Contract: to fulfil your order and provide support.
Consent: for marketing emails and non-essential cookies. You can withdraw consent at any time.
Legitimate interests: to run, secure and improve our store and prevent fraud.
Legal obligation: to keep tax and accounting records.

4. Who we share it with

We do not sell your personal information for money. We share it only with service providers who help us run the store, and only what they need:

Shopify, our e-commerce platform, which hosts the Site and stores order data. Shopify's privacy policy: shopify.com/legal/privacy.
Payment providers (such as Shopify Payments and PayPal) to process payments and prevent fraud.
Fulfilment and shipping partners, including our manufacturing partner and carriers, who receive your name, shipping address, phone number and order contents so they can pack and deliver your order.
Email service providers to send order emails and newsletters.
Advertising and analytics partners such as Meta and Google, through cookies and pixels on the Site, to measure visits and show you relevant ads.
Customer support and review tools we use to answer messages and display reviews.
Authorities and advisers when the law requires it, to protect our rights, or in connection with a sale or transfer of our business.

5. International transfers

We are based in Lithuania (EU), our customers are mainly in the United States, and some of our service providers operate in the United States, China and other countries. Your information may therefore be processed outside your country. When we transfer personal information out of the EU/EEA, we rely on safeguards such as the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework, where applicable.

6. Cookies and ads

We use:

Essential cookies to keep your cart, checkout and security working.
Analytics cookies to understand how the Site is used.
Advertising cookies and pixels (for example the Meta Pixel) to show you our ads on other sites and measure results.

Where required, we ask for your consent before setting non-essential cookies. You can change your choices in the cookie banner, in your browser settings, or through tools such as aboutads.info/choices and your Facebook ad settings. We honor Global Privacy Control (GPC) browser signals as an opt-out of targeted advertising where the law requires it.

7. How long we keep it

Order and accounting records: as long as tax and accounting laws require, usually up to 10 years.
Support messages: up to 3 years after your last message.
Marketing email list: until you unsubscribe.
Cookie data: as described in the cookie settings, typically up to 2 years.

8. Your rights

Depending on where you live, you may have the right to:

access the personal information we hold about you and get a copy;
correct information that is wrong or incomplete;
delete your information;
object to or restrict certain uses, including direct marketing;
receive your information in a portable format;
withdraw consent at any time, without affecting earlier processing;
opt out of targeted advertising, "sale" or "sharing" of personal information as defined by US state privacy laws.

To use any of these rights, email [support@necklinesociety.com]. We may need to confirm your identity first. We will reply within the time the law requires, usually within 30 to 45 days. You can use an authorized agent where your state allows it. We will not treat you differently for using your rights.

United States residents: residents of states with consumer privacy laws (such as California, Colorado, Connecticut, Virginia and others) have the rights listed above as provided by their state's law. If we deny your request, you may appeal by replying to our decision email.

EU, EEA and UK residents: you can also complain to a data protection authority. Our lead authority is the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt). You can also contact the authority where you live.

9. Security

We use reasonable technical and organisational measures to protect your information, and payments are processed by PCI-compliant providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. Children

The Site and our products are intended for adults. We do not knowingly collect personal information from anyone under 16. If you believe a child has given us information, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time, for example when our practices or the law change. We will post the new version on this page with a new "Last updated" date.