Privacy policy.

1. Data controller

Eigenvector, MB, company number 306983471, Partizanu g. 61, LT-49282 Kaunas, Lithuania, is the data controller responsible for the personal-data processing described in this policy. Email: support@blupreme.com.

2. Information we process

We process identity and contact details, billing and delivery addresses, order contents, payment status and transaction identifiers, carrier and tracking data, invoices, support correspondence, withdrawal requests, device and security data, and consent or preference records. Complete card and wallet credentials are processed by our payment provider and are not stored by us.

3. Purposes and legal bases

• To provide quotes, accept and fulfil orders, arrange delivery, provide order support, handle returns, and issue refunds because this processing is necessary for the contract.
• To issue invoices, maintain accounting records, respond to authorities, and meet product or consumer-law duties because processing is required by law.
• To prevent fraud, protect the website, diagnose failures, preserve evidence, and improve operations based on our legitimate interests in running a secure and reliable store.
• To answer pre-sale or general enquiries based on steps requested before a contract and our legitimate interest in providing support.
• To send optional marketing only where you have consented or another lawful basis applies. You can opt out at any time.

4. Required information

Checkout fields marked as required are needed to form and fulfil the contract or comply with law. If they are not provided, we may be unable to accept or deliver the order. Contact-form fields are needed to investigate and answer the enquiry.

5. Recipients and service providers

Relevant data can be shared with service providers supporting website hosting, payment processing, transactional communication, fraud prevention, order delivery, and professional advice, and with public authorities where legally required. Each recipient receives only the data required for its function.

6. International transfers

Some providers may process data outside the European Economic Area. Where EU adequacy rules do not apply, we rely on safeguards such as the European Commission’s standard contractual clauses and supplementary measures where required. Provider privacy notices describe their processing locations and safeguards in more detail.

7. Retention

Order, invoice, and accounting records are retained for the period required by Lithuanian tax and accounting law. Support and withdrawal correspondence is retained while the matter is active and afterwards for a proportionate period needed to establish or defend claims. Security logs are kept for a shorter operational period unless an incident requires longer preservation. Data is deleted or anonymised when its purpose and mandatory retention period end.

8. Cookies and local storage

The store uses necessary cookies or browser storage to maintain the cart, checkout session, security controls, language choice, and administrative functions. Optional analytics or advertising storage must not be enabled without the consent required by law. The checkout and payment provider can set necessary anti-fraud and payment cookies.

9. Automated decisions

Payment and anti-fraud providers can automatically assess transaction risk. A failed automated check can prevent a payment from completing. Contact us if you believe a decision was made incorrectly. We do not otherwise make decisions producing legal or similarly significant effects solely through our own automated processing.

10. Your rights

Subject to GDPR conditions, you may request access, correction, deletion, restriction, portability, or objection, and may withdraw consent without affecting earlier lawful processing. Email support@blupreme.com. We may request information needed to verify identity. You also have the right to lodge a complaint with a competent supervisory authority.

11. Security and changes

We use access controls, encrypted transport, service isolation, updates, and operational logging appropriate to the risks. No internet service can guarantee absolute security. Material changes to this notice will be posted here with a revised date.

Advertising measurement and cookie choices

Added 11 September 2026. With your consent, we use Google Analytics, Google Ads, Meta and Reddit to measure website activity and advertising performance. We retain campaign and ad-click identifiers for up to 90 days and your cookie choice for six months.

If you accept enhanced matching, we normalize and SHA-256 hash your checkout email and phone number before sending the hashes to Google and Meta with purchase information. They use these identifiers to match purchases with their users and advertising interactions. Hashing does not make this data anonymous. This permission is optional and is not a subscription to marketing emails.

You can change your browser choice below. Withdrawal stops future optional browser collection and enhanced matching on new checkouts. For data already sent or recorded on an earlier order, contact support@blupreme.com to request withdrawal or deletion.