What we collect, what we refuse to collect, and how long any of it lasts.
The short version. We collect the minimum required to advise you properly, and we are structured so that there is very little to hand over, lose, or be compelled to produce.
This website. No analytics. No advertising pixels. No behavioural tracking. Three technical services are involved: Bunny Fonts for typefaces, Friendly Captcha for bot protection, and Codeberg for our own source code, which never touches visitor data.
During an engagement. We are confidential, not anonymous: your identity is verified in person, as our AML obligations require, and held securely. Day-to-day correspondence uses an engagement reference rather than your name, on channels we do not operate.
Retention. Engagement records are held for ninety days after termination, then removed. Backups follow the same clock.
Your rights. Access, correction, erasure, portability and objection, as provided by the GDPR. Our supervisory authority is the Lithuanian State Data Protection Inspectorate.
Who else sees it. No sale of data, ever. Disclosure only where a lawful order compels it, and only the narrow item compelled.
This summary is written for clarity and is not the agreement. The full text below is the binding document, and it governs wherever the two differ.