How ComeSeeBuy handles personal data

This policy applies to the ComeSeeBuy website and controlled early-access service.

1. Who is responsible

UAB „Verslo titanas“, company code 304554181, registered office at Vilkpėdės g. 9-100, LT-03157 Vilnius, Lithuania, email info@comeseebuy.com, is the controller for ComeSeeBuy account, security and contractual data.

When a merchant uses ComeSeeBuy to handle buyer purchase requests and reservations, the merchant normally determines the purposes of that buyer-data processing and ComeSeeBuy processes the data on the merchant’s instructions under the applicable data-processing agreement.

2. Data we receive

• merchant account, contact and company information;
• authorised Page, account and public-profile identifiers supplied by Meta;
• supported comment-event data needed to recognise a product code and purchase request;
• delivery status for the public reply and first permitted private cart link;
• cart, reservation, event-status and audit information created by ComeSeeBuy;
• information a person voluntarily includes in an email to us;
• necessary security and diagnostic information.

We do not request or store payment-card numbers.

3. Purposes and legal bases

We use data to provide the service and contract, connect a Page, recognise eligible comments, prevent repeated delivery of the same event from creating an extra reservation and prevent abuse, deliver reservations and carts, provide support, meet legal duties and handle legal claims. Depending on context, the legal basis is performance of a contract, legitimate interests, legal obligations or consent.

4. Recipients and infrastructure

We do not sell personal data or use Platform Data for unrelated advertising. The service uses Meta Platforms Ireland Limited integration and Hetzner Online GmbH server infrastructure in Finland. Business email is provided by Google Cloud EMEA Limited (Google Workspace / Gmail) and is used to receive and handle enquiries, including privacy and data-deletion requests. PostgreSQL runs within the same managed server environment. The public website currently uses no advertising or behavioural-analytics tracker.

5. Retention

Access credentials are kept only while a Page is lawfully connected and as needed for revocation and secure deletion. Event data and technical audit records are retained by default for up to 90 days. To prevent an old event from being processed again after those records are deleted, we keep a minimal duplicate-prevention record consisting of a merchant workspace identifier and a hash of the event key until that workspace is deleted, unless earlier erasure is required. This record contains no comment or message content. These are pseudonymous records and remain subject to applicable erasure rights and lawful merchant instructions. Active cart and reservation data follow merchant instructions, the contract and legal duties; after account termination, eligible data is deleted or irreversibly anonymised without undue delay, normally within 30 days. If a copy of that data temporarily remains in restricted disaster-recovery material, it is unavailable to the ordinary service and remains protected until removed through the applicable backup lifecycle. If a restore is required, completed deletions are reapplied before affected data returns to ordinary service. Accounting or dispute records required by law may be retained longer.

6. Transfers outside the EEA

Where a service provider transfers data outside the EEA, applicable safeguards such as European Commission Standard Contractual Clauses are used. Meta’s own terms and privacy information govern its international transfers.

7. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction and portability, object to processing, or withdraw consent. Where we have reasonable doubts about your identity, we may ask only for the additional information necessary to confirm it. You may also complain to the Lithuanian State Data Protection Inspectorate.

8. Automated operation

Recognising a product code may automatically create a temporary reservation. The merchant can view the reservation record in the workspace and remains responsible for its fulfilment. ComeSeeBuy does not make decisions about credit, employment, insurance or another similarly significant legal matter.

9. Contact and deletion

Email info@comeseebuy.com or follow our data-deletion instructions. We respond without undue delay and within one month of receiving your request. If necessary because of the complexity or number of requests, we may extend this by up to two further months and inform you of the extension and reasons within the first month.