1. Introduction

  1. MB "Tactical shop" respects your privacy and ensures that Customers' and Visitors' personal data is collected, stored and processed only as set out in this Privacy Policy. The Website operates at tacshop.eu.
  2. The Seller ensures the security and confidentiality of the personal data provided and acts in accordance with the provisions of this policy.
  3. The data controller is MB "Tactical shop", company code 306165339, VAT code LT100015506319, registered office A. J. Greimo g. 77, LT-77165 Šiauliai, Lithuania, email info@tacticalshop.lt, phone +370 648 67788.
  4. This Privacy Policy applies to all Visitors and Customers of the Website and supplements the Terms and Conditions. It explains what data we process, for what purposes and on what legal bases, to whom we transfer it, how long we keep it and what rights you have.
  5. We process data in the European Economic Area (EEA). Some of the service providers listed in Section 6 (e.g. Google, Meta, Stripe) belong to groups of companies operating outside the EEA and may transfer data to third countries, such as the United States. In such cases, data is transferred only with the safeguards provided for in Chapter V of the GDPR — a European Commission adequacy decision (EU-U.S. Data Privacy Framework) or standard contractual clauses approved by the European Commission.
  6. If you have any questions or complaints, please write to: info@tacticalshop.lt or to the address: MB "Tactical shop", A. J. Greimo g. 77, LT-77165 Šiauliai, Lithuania. We will respond within 14 calendar days.

2. Definitions

Terms used in this Privacy Policy have the meaning given to them in the Terms and Conditions, unless stated otherwise in this document:

  • Personal data — any information about an identified or identifiable natural person (e.g. name, surname, email, IP address).
  • Cookies — small files stored on your device to improve browsing experience and website functionality.
  • GDPR — Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 (General Data Protection Regulation).

3. Browsing data collected automatically

  1. You can browse the Website without creating an account or placing an order — in that case, only the technical browsing data listed below is collected.
  2. The Website automatically collects the following data (IP addresses and cookie identifiers are personal data, so we process them in accordance with this Privacy Policy):
    • Information from cookies — analytics and marketing cookies only with your consent (see the Cookie Policy for details);
    • Login log data (IP address, browser, device, provider, referring page);
    • Web beacons (used to assess advertising effectiveness, only with your consent to marketing cookies).

4. Collection and use

  1. When you visit the Website without logging into an account, technical information about your device, connection and browsing is collected automatically (see Section 3).
  2. When you create an account or place an order, the following Personal information is collected:
    • Name, surname, email address, phone number, address;
    • Financial data required for invoicing;
    • Purchase history and behaviour on the website;
    • Technical information about the device used for browsing;
    • Login information, page view statistics, etc.;
    • Information from your enquiries or communication with the Seller;
    • Your choice to receive (or not receive) promotional offers.
  3. Your Personal information is used for:
    • Customer identification and account administration;
    • Fulfilling orders and delivering goods;
    • Improving services and the website;
    • Handling complaints and ensuring security;
    • Statistical analysis and internal audit;
    • Preventing and investigating improper conduct;
    • Sending information about goods, services or news (with your consent);
    • Other lawful purposes stated in this Privacy Policy.
  4. We process your data on the following legal bases (Article 6(1) GDPR):
    • conclusion and performance of a contract (point b) — account administration, order fulfilment, payment, delivery of goods, returns and warranty service;
    • legal obligation (point c) — preparing and keeping invoices and other accounting documents, ensuring consumer rights, responding to public authorities;
    • legitimate interest (point f) — security of the Website and data, preventing and investigating improper conduct, handling complaints, defending legal claims, administrative notices, internal audit and order statistics;
    • consent (point a) — newsletters and other promotional messages, analytics and marketing cookies, surveys. You may withdraw your consent at any time; this does not affect the lawfulness of processing carried out before the withdrawal.
  5. Providing the data required for an order (name, surname, delivery address, phone number, email address) is a condition for concluding the contract — without it we cannot fulfil the order. Providing other data is voluntary.
  6. Purchase history is stored in your account; it is visible to you and to the Seller to the extent necessary to fulfil orders and serve you.
  7. Data provided during registration or surveys is used to improve the Website and for direct marketing (only with your consent).
  8. Personal data may be used to inform you about material changes to the Website or the Terms and Conditions; about new products — only with your consent (see 5.2).
  9. We do not make decisions based solely on automated processing, including profiling, that would produce legal effects concerning you or similarly significantly affect you.

5. Advertising and online surveys

  1. The Seller does not sell your Personal information. It discloses it to third parties only in the cases set out in Section 6.
  2. We send commercial/promotional information (newsletters, SMS, etc.) only after obtaining your explicit consent (e.g. a checkbox ticked during registration). This consent is voluntary and can be withdrawn at any time by emailing info@tacticalshop.lt or by clicking the unsubscribe link in any newsletter.
  3. You cannot opt out of receiving administrative information (about purchased goods, services, or Terms changes), except by deleting your account.
  4. To understand Customer needs, we may conduct optional surveys. Your answers will remain anonymous unless stated otherwise. Information collected in surveys is not shared with third parties, unless explicitly stated in the survey conditions.

6. Disclosure of information

  1. The Seller may disclose your Personal information:
    • where required by law or other legal acts;
    • where necessary to protect the rights, interests or property of other persons;
    • with your consent — for direct marketing purposes (see 4.3 and 5.2).
  2. Information may also be transferred to:
    • partners (e.g. couriers, payment processors, service providers);
    • third parties, at your instruction or with your consent;
    • law enforcement — in accordance with legislation;
    • the Seller's related companies, divisions, or in the event of business transactions (mergers, sales, etc.).
  3. We currently use the following service providers (processors or independent controllers):
    • delivery — Omniva: name, surname, delivery address, phone number, email address;
    • payments — Stripe (card payments; card details are processed by Stripe, we do not see or store them);
    • newsletters — MailerLite (email address and name, if you provide it; only with your consent);
    • analytics and advertising — Google (Google Analytics 4, Google Ads) and Meta (Facebook) — only with your consent to analytics or marketing cookies. Google Analytics data is first sent through a server-side tag manager operated by us. If you have consented to marketing cookies, the email address and phone number given in your order are sent to Google in hashed form to measure ad conversions;
    • consent management — Cookiebot (your cookie choices);
    • website hosting and IT service providers.
  4. Information is transferred only to the extent necessary and only in accordance with applicable legislation. The Seller never sells your data.
  5. Your data is seen only by the Seller and its authorised partners (see 6.3). They are obliged to ensure its confidentiality.
  6. The Seller ensures that Customer data will not be made public, unless you publish it yourself (e.g. in comments).

7. Customer rights and obligations regarding processing of their Personal information

  1. When registering on the Website (creating an Account), you are asked to provide Personal information.
  2. Logged into your Account, you can:
    • view and edit your data,
    • update or delete it,
    • request all data held about you,
    • object to direct marketing.
    To do so, contact us at info@tacticalshop.lt.
  3. Your password is the key to your account's security. We recommend using a unique password with numbers, letters and symbols, and never sharing it with anyone.
  4. If you lose your password or suspect it has been compromised, contact the Seller immediately at info@tacticalshop.lt and change it.
  5. If you log into the Website from a public or shared computer, be sure to log out when finished. Otherwise, third parties may be able to view or change your data.
  6. If you do not wish your data to be processed, you may notify us at any time. In such a case, you will lose your Customer status and will not be able to use your account.
  7. The Seller stores data until the Account is deleted or for a maximum of 2 years from the last login (unless legislation requires longer retention). Newsletter subscriber data is kept until you withdraw your consent; cookie lifetimes are listed in the Cookie Policy.
  8. Orders and accounting documents (including orders placed without an account) are kept for as long as accounting and tax legislation requires. Data about Customers removed for violations is kept only as long as necessary to establish, exercise or defend legal claims.

8. Data protection

  1. The Seller applies technical and organisational security measures to protect Customer and Visitor data from loss, unauthorised use, disclosure, or alteration.
  2. A secure connection is used between the user and the website during payment.
  3. Although all reasonable security measures are applied, the Seller cannot fully guarantee that information transmitted over the internet will be protected — security also depends on your own actions.
  4. We recommend:
    • using a strong password,
    • using antivirus software,
    • not disclosing login details to third parties.
  5. You have the right to:
    • obtain information about your processed data and a copy of it,
    • request correction, updating or deletion of data,
    • request restriction of processing,
    • receive the data you provided in a structured, machine-readable format and transmit it to another controller (data portability),
    • object to processing based on legitimate interest,
    • object to processing of data for direct marketing purposes,
    • withdraw your consent at any time.
    Submit requests to info@tacticalshop.lt.
  6. If you believe that your data is processed in breach of the law, please contact us first — we will try to resolve the issue. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija; L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania, email ada@ada.lt, phone +370 5 271 28 04, vdai.lrv.lt) or with the data protection supervisory authority of your EU country of residence.

9. Cookie Policy

  1. The Seller uses cookies for the following purposes:
    • to support website functionality,
    • to maintain the user's session,
    • for advertising and direct marketing,
    • for statistical analysis (using Google Analytics, etc.).
  2. Cookies are divided into:
    • session cookies — active until the browser is closed,
    • persistent cookies — stored after the session (e.g. to keep you logged in).
  3. Necessary cookies are always used. Analytics and marketing cookies are set only after you consent in the cookie banner (Cookiebot). You can change or withdraw your consent at any time by clicking "Cookie settings" in the website footer.
  4. You can delete or block cookies in your browser settings. This may affect the website's functionality.
  5. Cookies used:
    • Necessary: required for basic operation (e.g. cart, login);
    • Preferences: remember your choices;
    • Statistics (analytics): used to analyse user behaviour and improve the website;
    • Marketing (remarketing): used for personalised advertising.
  6. For third-party cookies (e.g. Meta (Facebook), Google), we recommend reviewing their privacy policies.
  7. More information:

10. Third parties

  1. This Privacy Policy applies only to information collected by the Seller via the Website. If you disclose your data to other parties, their policies and terms apply.
  2. The Website may contain links to third-party websites. The Seller is not responsible for their content or privacy policies — we recommend reviewing their documents separately.
  3. The Seller does not collect information about Customers from third parties, except where necessary for compliance with legislation or investigation of Terms violations.
  4. We use the services of advertising providers (Meta (Facebook), Google). Their privacy policies can be found at:
  5. Data from analytics and marketing cookies is not anonymous: it is processed pseudonymously (using random device or browser identifiers), so Google and Meta may link it to your device or account in their systems. This data is collected only with your consent.

11. Final provisions and dispute resolution

  1. Applicable law and dispute resolution procedures are set out in the Website's Terms and Conditions.
  2. The Seller reserves the right to amend this Privacy Policy. We will inform you of any material changes via a notice on the Website or other means, as necessary.

12. Effective date and amendments

  1. This Privacy Policy is effective from 1 December 2022 (last updated 1 October 2026).
  2. All amendments take effect on the date they are published on the website tacshop.eu, unless stated otherwise.