Privacy policy
Last updated: June 2026
This policy explains what personal data Bespare collects when you use our website, why we collect it, who we share it with, and the rights you have. We only collect what we need to run the shop and fulfil your orders. Questions? Email support@bespare.lt.
1. Who we are
Bespare sells bike spare parts and accessories across the Baltics (Lithuania, Latvia and Estonia). For privacy matters, we are the data controller and you can reach us at support@bespare.lt.
2. What data we collect
We collect only what we need to take and fulfil your order:
- Account details - your name, email address, password and (optionally) phone number when you create an account.
- Addresses - the delivery and billing addresses you save or enter at checkout (name, address, city, postal code, country, phone).
- Order details - the items you buy, your order history, and an optional VAT number for business customers.
- Payment information - handled by our payment providers. We receive confirmation of payment, not your full card number.
- Messages - anything you send us through live chat or email when you contact support.
- Technical data - basic information needed to run the site, set via the cookies listed below.
3. Cookies & local storage
We use a small number of cookies to make the shop work, plus your browser's local storage for a couple of conveniences. You can manage your choices any time through the cookie banner (powered by Cookiebot) or your browser settings.
| Name | Purpose | Type |
|---|---|---|
| _medusa_cart_id | Remembers your shopping cart between visits | Essential |
| _medusa_jwt | Keeps you signed in to your account | Essential |
| _medusa_cache_id | Helps pages load faster | Essential |
| CookieConsent (Cookiebot) | Stores your cookie preferences | Essential / consent |
| Tawk.to cookies | Runs the live-chat widget and remembers your conversation | Functional |
| bespare_wishlist_v1 (local storage) | Your saved wishlist - stays in your browser, not sent to us | Functional (local) |
Your wishlist and a few interface preferences are stored in your browser's local storage - they stay on your device and are not sent to our servers.
4. How we use your data
- To process, fulfil and deliver your orders.
- To take payment and handle returns and refunds.
- To manage your account and saved addresses.
- To answer your questions over chat or email.
- To meet legal and tax obligations (e.g. keeping invoices).
- To keep the site secure and prevent fraud.
5. Who we share it with
We never sell your personal data. We share it only with the partners needed to run the shop:
- Payment providers - to take payment securely (Visa, Mastercard, American Express, Apple Pay, Google Pay, PayPal).
- Delivery partners - couriers and parcel-locker networks (such as DPD / DHL, Omniva and LP EXPRESS) to deliver your order.
- Live chat - Tawk.to, which powers our chat widget and stores chat messages on our behalf.
- Consent management - Cookiebot, which records your cookie preferences.
These partners may process your data outside your country (including outside the EU), in which case appropriate safeguards apply. We may also disclose data where required by law.
6. How long we keep it
We keep your account and order data for as long as you have an account with us and for as long as the law requires us to (for example, tax and accounting rules for invoices). You can ask us to delete your account data when it's no longer needed.
7. Your rights
Under EU and national law (GDPR) in Lithuania, Latvia and Estonia, you have the right to:
- Access the personal data we hold about you.
- Correct data that is wrong or out of date.
- Ask us to delete your data, where we have no legal reason to keep it.
- Object to or restrict certain processing.
- Receive a copy of your data (portability).
- Withdraw your cookie consent at any time.
To exercise any of these, email us at support@bespare.lt. You also have the right to complain to your local data protection authority.
8. How we protect your data
Our checkout is SSL-encrypted, account passwords are stored hashed (never in plain text), and we take reasonable technical and organisational measures to keep your data safe. No system is ever 100% secure, but we work to keep risks low.
9. Children
This site is intended for adults. We do not knowingly collect data from children. If you believe a child has given us their data, please contact us and we'll remove it.
10. Changes & contact
We may update this policy from time to time; the version on this page is the current one. For anything privacy-related, email support@bespare.lt or use our contact page. See also our Terms & conditions.