Privacy policy
Last updated: August 12, 2026
This Privacy Policy explains how MB Modus E-Commerce, trading under the M17 Balance brand (“M17 Balance”, “we”, “us” or “our”), collects, uses, stores and discloses your personal data when you visit M17BALANCE.COM, make a purchase, create an account, contact us, use our online withdrawal function, subscribe to marketing communications or otherwise interact with our website and services (the “Services”).
Our online store is powered by Shopify, which provides the e-commerce infrastructure that enables us to offer our Services.
We process personal data in accordance with applicable data protection laws, including the General Data Protection Regulation (EU) 2016/679 (“GDPR”).
1. Data Controller
For the purposes of the GDPR and other applicable data protection laws, the controller responsible for your personal data is:
MB Modus E-Commerce
Šilutės pl. 21A
Klaipėda, 91107
Lithuania
Email: info@m17balance.com
Website: M17BALANCE.COM
2. Personal Data We Collect
Depending on how you interact with our Services, we may collect and process the following categories of personal data.
Contact and identification information
This may include your name and surname, email address, telephone number, billing address, delivery address and other information you provide when contacting us.
Order and transaction information
This may include products purchased, order number, order history, payment status, delivery information, returns, refunds, cancellations and information related to the exercise of your right of withdrawal.
Payment information
Payments are processed through Shopify and/or third-party payment service providers.
Depending on the payment method used, payment providers may process information such as payment card details, bank account information, transaction information and payment confirmation data.
We generally do not directly store complete payment card details.
Account information
If you create a customer account, we may process information such as your login credentials, account settings, preferences, saved addresses and order history.
Communications
When you contact us, we may process the information contained in your communications, including customer service enquiries, complaints, return requests and other correspondence.
Technical and usage information
When you use our website, certain information may be collected automatically, including your IP address, browser type, device information, operating system, unique device or browser identifiers, pages viewed, interactions with our website, referring URLs and approximate location derived from technical information.
Some of this information may be collected through cookies and similar technologies.
3. How We Collect Personal Data
We may collect personal data directly from you when you place an order, create an account, contact us, submit a return or withdrawal request, or otherwise provide information to us.
We may collect personal data automatically when you visit or interact with our website.
We may receive personal data from Shopify and our service providers.
We may receive personal data from payment processors.
We may receive personal data from shipping and fulfilment providers.
We may receive personal data from advertising and analytics providers where permitted by applicable law and subject to your consent where required.
We may also receive personal data from other third parties where permitted by law.
4. Purposes and Legal Bases for Processing
We only process personal data where we have a valid legal basis under applicable data protection law.
Processing and fulfilling your order
We process personal data to process purchases and payments, confirm orders, arrange delivery, provide order updates, manage returns and refunds and provide customer support related to your purchase.
Legal basis: performance of a contract or taking steps at your request prior to entering into a contract.
Compliance with legal obligations
We may process and retain personal data where necessary to comply with legal obligations, including accounting, taxation, consumer protection, product safety and other regulatory requirements.
Legal basis: compliance with a legal obligation.
Customer service and business operations
We may process personal data to respond to enquiries, manage customer relationships, protect our business and improve our Services.
Where this processing is not necessary for performing a contract or complying with a legal obligation, we may rely on our legitimate interests in operating and improving our business, provided that those interests do not override your fundamental rights and freedoms.
Legal basis: performance of a contract and/or legitimate interests.
Fraud prevention and security
We may process personal data to detect, investigate and prevent fraud, abuse, security incidents and other unlawful activity, and to protect our website, customers and business.
Legal basis: legitimate interests and, where applicable, compliance with legal obligations.
Marketing communications
Where required by applicable law, we send electronic marketing communications only with your consent.
You may withdraw your consent at any time by clicking the unsubscribe link contained in our marketing emails or by contacting us.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Legal basis: consent, where required by applicable law, or legitimate interests where electronic marketing is otherwise permitted by law.
Personalised advertising and analytics
We may use analytics, advertising cookies and similar technologies to understand how visitors interact with our website and, where applicable, to provide personalised advertising.
Where consent is required under applicable law, these technologies will only be activated after you have provided the relevant consent.
Legal basis: consent where required by law and, where applicable, legitimate interests for limited non-consent-based processing permitted by law.
5. Cookies and Similar Technologies
Our website uses cookies and similar technologies to enable essential website functionality, maintain security, remember preferences, process shopping carts and checkout, measure website performance, perform analytics and provide advertising and marketing functionality.
Cookies that are strictly necessary for the operation of the website may be used without consent where permitted by law.
Non-essential cookies, including certain analytics, advertising and personalisation cookies, are used only after obtaining your consent where required by applicable law.
You can manage or withdraw your cookie preferences through the cookie consent settings available on our website.
Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.
6. Marketing
If you have subscribed to our marketing communications, we may use your contact details to send you information about M17 Balance products, promotions and offers.
You may unsubscribe at any time by clicking the unsubscribe link in our marketing emails or by contacting us at info@m17balance.com.
You may continue to receive transactional communications relating to orders, payments, deliveries, returns, refunds or other Services even after opting out of marketing communications.
7. How We Share Personal Data
We may disclose personal data to third parties where necessary to operate our business and provide our Services.
This may include Shopify, which provides our e-commerce platform and related services.
It may include payment processors used to process transactions.
It may include shipping, logistics and fulfilment providers necessary to deliver your orders.
It may include IT, hosting and cloud service providers.
It may include customer support providers.
It may include accounting, tax, legal and other professional advisers.
It may include analytics providers.
It may include advertising and marketing providers, subject to applicable consent requirements.
We may also disclose personal data to public authorities or other parties where disclosure is required by applicable law.
We only disclose personal data where there is an appropriate legal basis for doing so.
Service providers acting on our behalf may process personal data only as necessary to provide their services and subject to applicable contractual and legal safeguards.
8. Shopify
Our online store is powered by Shopify.
Shopify processes certain personal data when you access and use our store and may process information relating to your device, browsing activity, transactions and interactions with our Services.
In certain circumstances, Shopify may act as our processor, while for some processing activities Shopify may act as an independent controller.
For further information about Shopify's processing of personal data and the privacy rights available to you, please refer to Shopify's Consumer Privacy Policy and Privacy Portal.
9. International Data Transfers
Some of our service providers may process personal data outside the European Economic Area (“EEA”).
Where personal data is transferred outside the EEA, we ensure that an appropriate transfer mechanism is used where required by law.
This may include an adequacy decision adopted by the European Commission, Standard Contractual Clauses approved by the European Commission or another legally recognised transfer mechanism.
Where required, additional safeguards may be implemented to ensure an appropriate level of protection.
You may contact us for further information about the safeguards applicable to international transfers of your personal data.
10. Data Retention
We retain personal data only for as long as reasonably necessary for the purposes for which it was collected and to comply with applicable legal, accounting, tax, consumer protection and regulatory obligations.
The applicable retention period depends on the nature of the data and the purpose for which it is processed.
Order, invoice and transaction information may be retained for the period required by applicable accounting and tax laws.
Customer service and complaint records may be retained for as long as necessary to resolve the matter and establish, exercise or defend legal claims.
Account information may be retained while your account remains active and for an appropriate period thereafter.
Marketing information is retained until you withdraw your consent or object to the relevant processing, unless continued retention is required for legal or compliance purposes.
Cookie and analytics data is retained in accordance with the applicable cookie settings and the retention periods of the relevant service providers.
When personal data is no longer required, we delete or anonymise it where appropriate.
11. Online Withdrawal Function
Where you exercise your statutory right to withdraw from a distance contract through the online withdrawal function available on our website, we process the personal data submitted through that function to identify you and the relevant contract or order, receive and record your withdrawal statement, process your withdrawal request, provide confirmation that your withdrawal statement has been received, record the date and time of submission and comply with applicable consumer protection and other legal obligations.
The information processed may include your name, order or contract information, contact details, the content of your withdrawal statement and the date and time it was submitted.
Legal basis: performance of the contract, taking steps relating to termination of the contract and compliance with applicable legal obligations.
Information submitted through the withdrawal function may be retained where necessary to demonstrate compliance with consumer protection requirements and to establish, exercise or defend legal claims.
For more information about your statutory right of withdrawal and how to use the online withdrawal function, please refer to our Right of Withdrawal information available on our website.
12. Security
We implement appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access.
However, no method of electronic transmission or storage is completely secure, and absolute security cannot be guaranteed.
13. Your Rights Under the GDPR
If the GDPR applies to you, you may have the following rights, subject to the conditions and limitations provided by applicable law.
Right of access
You have the right to obtain confirmation as to whether we process your personal data and, where applicable, to receive access to and a copy of that data.
Right to rectification
You have the right to request correction of inaccurate personal data and completion of incomplete personal data.
Right to erasure
You may request deletion of your personal data in circumstances provided for by applicable law.
Right to restriction of processing
You may request that the processing of your personal data be restricted in certain circumstances.
Right to data portability
Where applicable, you may receive certain personal data in a structured, commonly used and machine-readable format and request that it be transmitted to another controller.
Right to object
You may object to processing based on our legitimate interests in circumstances provided for by applicable law.
Right to object to direct marketing
You have the right to object at any time to the processing of your personal data for direct marketing purposes.
Right to withdraw consent
Where processing is based on your consent, you may withdraw that consent at any time.
Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.
Rights relating to automated decision-making
Where applicable, you may have rights concerning decisions based solely on automated processing that produce legal effects or similarly significantly affect you.
To exercise any of these rights, contact us at info@m17balance.com.
We may request information necessary to verify your identity before responding to your request.
We will respond to valid requests within the time limits required by applicable data protection law.
14. Right to Lodge a Complaint
If you believe that your personal data has been processed unlawfully or that your data protection rights have been infringed, you have the right to lodge a complaint with a competent data protection supervisory authority.
As our company is established in Lithuania, you may contact the Lithuanian supervisory authority:
State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija – VDAI)
You may also have the right to lodge a complaint with the supervisory authority in the EEA country where you habitually reside, work or where the alleged infringement occurred.
We encourage you to contact us first at info@m17balance.com so that we have an opportunity to address your concerns.
15. Children's Privacy
Our Services are not intended for children.
We do not knowingly collect personal data from children in circumstances where parental or guardian consent is required by applicable law.
If you believe that a child has provided personal data to us unlawfully, please contact us at info@m17balance.com.
16. Third-Party Websites
Our website may contain links to third-party websites, applications or services.
We are not responsible for the privacy practices, security or content of third-party services that we do not control.
We recommend reviewing the privacy policies of those third parties before providing personal data to them.
17. Automated Decision-Making
We do not make decisions based solely on automated processing that produce legal effects or similarly significantly affect you, unless such processing is permitted by applicable law and appropriate safeguards are implemented.
Certain service providers may use automated systems for purposes such as fraud detection, payment security or advertising.
Where required by law, further information about such processing will be provided.
18. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our Services, processing activities, technologies or applicable legal requirements.
When we make changes, we will update the “Last updated” date at the top of this Privacy Policy.
Where required by law, we will provide additional notice or request renewed consent.
19. Contact Us
If you have questions about this Privacy Policy, how we process your personal data or if you wish to exercise your data protection rights, please contact:
MB Modus E-Commerce
Šilutės pl. 21A
Klaipėda, 91107
Lithuania
Email: info@m17balance.com
For the purposes of applicable data protection law, MB Modus E-Commerce is the controller of your personal data.