Privacy

ULULU is not a company — it is two people making portraits by hand. The data controller is Emilija Birbilaitė, trading as ULULU, based in Vilnius, Lithuania. For anything on this page, including a request for our full postal address, write to info@ululuhome.com.

When you place an order we collect:

• Photos of your dog, plus your dog’s name, breed if you give one, and any note you add.
• Contact and delivery details: name, email, optional phone number, and shipping address.
• Payment metadata from Stripe — the identifiers for your checkout session and payment, and whether it succeeded.

We never see or store your card number. Card details are entered on Stripe’s own checkout page and are handled entirely by Stripe.

To make and deliver the portrait you ordered, and to contact you about that order — for example if a photo is not clear enough to work from. The legal basis is performance of our contract with you.

Uploaded photos are stored in a private bucket that is not publicly browsable and is not indexed by search engines. They are readable only by our own systems and by the people who need them to produce your portrait. We do not sell them, publish them, or use them for anything other than making your order — unless you separately give us permission, for example to show finished work.

• Stripe — payment processing.
• Supabase — database and file storage.
• Vercel — website hosting.
• Our courier — your name, address and phone number, so the parcel can reach you. Nothing else is shared, and never your photos.

We make every portrait ourselves. No third party ever receives your photos.

Your photos and order details are stored in Ireland (EU), so the data itself stays inside the EU. The website is served by Vercel from the United States, which means a request travels there while you are using the site; Vercel does not store your order. That transfer runs on the European Commission’s standard contractual clauses.

Your photos are deleted 12 months after your portrait ships. We keep them that long only so we can remake the piece if it arrives broken or something turns out to be wrong with it. Ask us and we will delete them sooner.

The order record — what you bought, when, what you paid and where it was sent — is kept for 10 years, because accounting law requires it. This is the one thing we cannot delete on request, and it does not include your photos.

If you upload photos but never complete your order, we do not keep them. Everything from an unfinished order — the photos and the details you entered — is deleted automatically within 7 days.

You can ask for a copy of your data, ask us to correct it, or ask us to delete it. Email info@ululuhome.com and we will respond within 30 days. If you are unhappy with our response you can complain to the State Data Protection Inspectorate in Lithuania, or to the data protection authority in the EU country where you live.

This site does not use analytics or advertising cookies. Your in-progress order is kept in your browser’s session storage so you do not lose it on a reload; it is cleared when the order is complete. Stripe may set its own cookies on its checkout page.