Privacy Policy
Last updated: 21 October 2026
This policy explains what personal data we process, why, for how long, and what rights you have under the General Data Protection Regulation (EU) 2016/679 (GDPR) and Lithuanian law.
1. Data controller
- Provider
- MakeItOnline
- Contact
- Contact form on this website
2. What we process and why
| Situation | Data | Purpose and legal basis | Retention |
|---|---|---|---|
| You send a message through the contact form | Full name, email address, phone number (optional), message content | To answer your enquiry and provide an offer (GDPR Art. 6(1)(b) – steps before entering into a contract; otherwise Art. 6(1)(f) – legitimate interest in answering enquiries) | Up to 12 months after the last correspondence, if no contract is concluded |
| We enter into a contract | Name, contact details, order details, payment information (no full card data) | Performing the contract (GDPR Art. 6(1)(b)) and meeting legal obligations such as accounting (Art. 6(1)(c)) | For the contract period and as long as accounting and other laws require |
| A dispute or claim arises | Correspondence, contract and payment data | Establishing or defending legal claims (GDPR Art. 6(1)(f)) | Until the dispute is resolved and the limitation period ends |
| You visit the website | The hosting provider (Hostinger) may automatically log technical data (IP address, time, page requested, browser type) | Website security and operation (GDPR Art. 6(1)(f)). We do not analyse this data or use it to profile you | As set by the hosting provider |
| You consent to statistics cookies (Google Analytics) | Cookie identifiers, device and browser data, approximate location, pages visited, visit length and actions on the site | Website usage statistics and improvement (GDPR Art. 6(1)(a) – consent; consent is also required by the Lithuanian Law on Electronic Communications) | No longer than 14 months |
| You consent to behaviour analysis (Hotjar) | Cookie identifiers, device and browser data, approximate location, clicks, cursor movement, scrolling, screen recordings of pages. Text typed into form fields is not recorded | Analysing and improving how usable the site is (GDPR Art. 6(1)(a) – consent) | No longer than 12 months |
You can withdraw consent at any time as easily as you gave it, by clicking “Cookie settings” at the bottom of the page. Withdrawal does not affect the lawfulness of processing before it. If you do not consent, the site works the same and the statistics and behaviour-analysis tools stay off.
Providing data is voluntary (for enquiries) or necessary to conclude a contract and meet legal obligations (for contracts). Without contact details we cannot reply to you or conclude a contract.
3. What we do not do
- We switch on statistics (Google Analytics) and behaviour-analysis (Hotjar) tools only after you consent (see the cookie policy). We use no advertising or social-media tracking tools (e.g. Meta Pixel, TikTok Pixel); Google signals and ad personalisation are switched off.
- The contact form asks only for what we need to reply; what you type is not sent to analytics or advertising companies, and Hotjar does not record text typed into form fields.
- We do not sell your data and do not use it for direct marketing without your consent.
- We make no automated decisions with legal effects for you.
4. Who we may share data with
- Your form message is sent through the server of our hosting provider (Hostinger) to our mailbox; its content is visible to our email provider, which we use for correspondence.
- Only if you consent – analytics providers Google (Google Analytics; Google Privacy Policy) and Hotjar Ltd. (Malta; Hotjar Privacy Policy), who act as our processors.
- Data may be transferred outside the European Economic Area (e.g. to the US) under GDPR safeguards: the European Commission’s adequacy decision (EU–US Data Privacy Framework) or standard contractual clauses.
- Hosting, accounting and payment providers and other processors, as needed to provide the service.
- Public authorities or courts where the law requires.
5. Your rights
You have the right to: access your data and get a copy; have inaccurate data corrected; have data erased; restrict processing; object to processing based on legitimate interests; data portability where applicable; and withdraw consent at any time (where processing is based on consent; see “Cookie settings” at the bottom of the page). These rights are set out in the GDPR. Contact us through the contact form. We normally reply within 48 hours; the maximum period set by law is one month.
You may lodge a complaint with the State Data Protection Inspectorate of Lithuania (VDAI), vdai.lrv.lt. We encourage you to contact us first, as we can likely resolve the issue faster.
6. Security
We apply reasonable organisational and technical measures to protect data and give access only to those who need it for their work.
7. Our clients' data
When we build websites or manage advertising for clients, we may process the clients' own customers' data on the client's behalf. In that case we act as a processor on the client's instructions and conclude a data processing agreement with the client.
8. Changes
We may update this policy. The current version is always published on this page with its update date.