Last updated: May 14, 2026

1. Data Controller

This Privacy Policy applies to the website visualidentity.studio, operated by:

MB Milda Style
Company code: 306622987
VAT code: LT100020104910
Tilto str. 19, Vilnius, Lithuania
Phone: +370 600 786 31
Website: visualidentity.studio

We are committed to protecting your personal data and processing it in accordance with the EU General Data Protection Regulation (GDPR) and the Law on Legal Protection of Personal Data of the Republic of Lithuania.

2. What Data We Collect

We collect personal data only when you interact with our website directly or through our services.

Contact form — when you submit an enquiry, we collect:

• Full name
• Email address
• Service interest and budget range
• Your message

Website usage data — collected automatically through cookies and analytics tools:

• IP address (anonymised)
• Browser type, language, and device information
• Pages visited, time on site, referral source
• Cookie identifiers and session data

3. Purposes & Legal Basis

We process personal data for the following purposes, each based on a lawful ground under GDPR:

• Responding to enquiries — processing your contact form submission to provide a proposal or reply. Legal basis: legitimate interest (Art. 6(1)(f)).
• Service provision — managing client relationships and project delivery. Legal basis: performance of a contract (Art. 6(1)(b)).
• Website analytics — understanding how visitors use our site to improve performance and content. Legal basis: consent (Art. 6(1)(a)), obtained via the cookie consent banner.
• Legal obligations — retaining business records in compliance with Lithuanian accounting and tax law. Legal basis: legal obligation (Art. 6(1)(c)).

4. Cookies

Our website uses cookies to function correctly and to improve your browsing experience. You may manage your preferences at any time via the cookie consent panel displayed on your first visit.

• Functional — strictly necessary for the site to operate (WordPress session, consent state).
• Preferences — remember your settings between visits (language, display preferences).
• Statistics — anonymous analytics to understand website usage (Google Analytics, Google Site Kit).
• Marketing — used to deliver relevant advertising and track campaign performance (Google Ads).

You may withdraw consent for non-essential cookies at any time. Withdrawing consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. Third-Party Services

We use the following third-party tools, which may process your data on our behalf:

• Google Analytics / Google Site Kit — website traffic analysis. Data may be processed in the US under standard contractual clauses. Google Privacy Policy.
• Google Ads — advertising performance tracking.
• Hostinger — website hosting. Servers are located in the EU.
• WordPress & Elementor — CMS and page builder. No additional personal data is transmitted beyond what is described here.

We do not sell, rent, or share your personal data with third parties for their own marketing purposes.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purpose for which it was collected:

• Contact form enquiries — up to 3 years from the date of last communication.
• Client project data — up to 10 years in accordance with Lithuanian accounting law requirements.
• Analytics data — as per Google Analytics default retention settings (up to 26 months).
• Cookie consent records — 1 year from the date of consent.

7. Your Rights

Under GDPR, you have the following rights regarding your personal data:

• Right of access — request a copy of the data we hold about you.
• Right to rectification — request correction of inaccurate or incomplete data.
• Right to erasure — request deletion of your data, where no legal obligation requires its retention.
• Right to restriction — request that we limit how we process your data.
• Right to data portability — receive your data in a structured, machine-readable format.
• Right to object — object to processing based on legitimate interests.
• Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting prior processing.

To exercise any of the above rights, please contact us using the details in Section 10. We will respond within 30 days.

You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania: vdai.lrv.lt.

8. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or alteration. Our website uses SSL/TLS encryption. Access to personal data is restricted to authorised team members only, on a need-to-know basis.

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The most current version will always be published on this page with the date of the last update. We encourage you to review this page periodically.

10. Contact

For any questions, requests, or concerns regarding this Privacy Policy or the processing of your personal data, please contact us:

MB Milda Style
Tilto str. 19, Vilnius, Lithuania
+370 600 786 31
visualidentity.studio