Privacy Policy

1. Who we are

This website is operated by Muravix, a web development studio based in Vilnius, Lithuania. Muravix is the data controller responsible for the personal data described in this policy — meaning we decide why and how it is processed.

We have not appointed a Data Protection Officer, as we are not legally required to. For any question about this policy or your personal data, please reach us using the contact details below.

2. What data we collect

We only collect data we actually need. Depending on how you use the site, this may include:

• Contact and quote details — the name, email address, and message or project information you provide through our contact and quote forms.
• Communications — the content of emails, calls, or other messages you send us, and our replies.
• Technical data — your IP address, browser type, and device information, processed automatically when you use the site.
• Preferences stored on your device — your chosen colour theme and any quote selections, saved in your browser's local storage so the site remembers them between visits.

3. Why we process it, and our legal basis

Under the GDPR, every use of your data must have a legal basis. Ours are:

• Responding to your enquiry — to reply to your contact or quote request and prepare a quote. Legal basis: your consent and steps taken at your request before entering a contract (Art. 6(1)(a) and (b)).
• Providing our services — to design, build, host, and maintain websites for our clients. Legal basis: performance of a contract (Art. 6(1)(b)).
• Security and abuse prevention — to keep the site available and protect it from misuse — for example, temporarily rate-limiting form submissions by IP address. Legal basis: our legitimate interest in operating a secure service (Art. 6(1)(f)).
• Legal compliance — to meet our accounting, tax, and other legal obligations. Legal basis: compliance with a legal obligation (Art. 6(1)(c)).

4. How long we keep it

We keep personal data only as long as needed for the purpose it was collected for:

• Enquiry and quote messages — kept while we handle your request and for our records afterwards, typically up to 24 months, unless we enter a client relationship that requires keeping them longer.
• Client and contract records — retained for as long as required by applicable accounting and tax law in Lithuania.
• Technical and security data — IP addresses used for rate-limiting are held only in server memory and cleared automatically; server logs are kept for a short period for security and troubleshooting.
• Data stored on your device — your theme and quote preferences remain in your browser until you clear them.

5. Who we share it with

We do not sell your personal data and we do not use it for advertising. We share it only with service providers who help us run the site, and only as far as necessary:

• Email delivery — we use Amazon Web Services (Amazon Simple Email Service) to deliver form submissions to our inbox.
• Hosting and infrastructure — providers that host and serve this website on our behalf.
• Professional advisers and authorities — accountants, legal advisers, or public authorities where we are required to share data by law.

6. International data transfers

Form submissions sent by email are processed by Amazon Web Services in the EU (the Stockholm region, eu-north-1), which is within the European Economic Area (EEA).

If any personal data is transferred outside the EEA by our providers, we rely on appropriate safeguards required by the GDPR, such as the European Commission's Standard Contractual Clauses, to keep your data protected to EU standards.

7. Cookies and local storage

This website does not use tracking, analytics, or advertising cookies, and it does not profile you.

We store two items in your browser's local storage: your colour theme preference and your saved quote selections. These stay on your device, are essential to how the site works, and are never sent to third parties. The website fonts are self-hosted, so loading the site does not share any data with external font services.

8. Your rights

Under the GDPR you have the following rights over your personal data:

• Access — ask for a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure — ask us to delete your data (the “right to be forgotten”) where there is no overriding reason for us to keep it.
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive the data you provided in a structured, commonly used, machine-readable format, or have it sent to another controller.
• Objection — object to processing based on our legitimate interests.
• Withdraw consent — where we rely on your consent, withdraw it at any time — this does not affect processing already carried out.

9. How to exercise your rights

To exercise any of these rights, contact us using the details below. We will respond within one month, as required by the GDPR. There is normally no charge, and we may need to verify your identity before acting on your request.

10. Your right to complain

If you believe we have handled your personal data unlawfully, you have the right to lodge a complaint with a data protection authority. In Lithuania this is the State Data Protection Inspectorate (Valstybine duomenu apsaugos inspekcija), L. Sapiegos g. 17, Vilnius — vdai.lrv.lt. You may also complain to the supervisory authority in your own EU country of residence.

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. The “last updated” date at the top shows when it was last revised. For significant changes, we will take reasonable steps to make them clear.

12. Contact us

For any question about this policy or to exercise your data protection rights, contact us: