1. Who we are
Sales Haven, MB, trading as Cofactor.
Company code: 307657457
Registered address: Girios g., LT-47338 Kaunas, Lithuania
Email: cofactor.agency@gmail.com
We are the data controller for the personal data described here. We have not appointed a Data Protection Officer, as the GDPR does not require one for an organisation of our size and activity.
2. What we collect
We only collect what you give us, plus limited technical data needed to run the website.
| Source | Data |
|---|---|
| Contact form | Your full name, email address, phone number, website URL, the type of business you operate, and the monthly revenue and advertising budget ranges you select. |
| Email and job applications | Anything you choose to send us, including a CV or portfolio if you apply for a role. |
| Website analytics | Pages viewed, approximate location derived from IP, device and browser type, referring source. Only if you consent to statistics cookies. |
| Server logs | IP address and request details, recorded by our hosting provider for security and reliability. |
The revenue and advertising budget ranges are commercial information about your business, not special category personal data. We do not collect special category data, and we do not use automated decision-making or profiling that produces legal effects.
3. Why we process it, and on what basis
- Answering your enquiry and preparing a proposal — performance of a contract, or steps taken at your request before entering one (Art. 6(1)(b) GDPR).
- Running and securing the website — our legitimate interest in operating a functioning, secure site (Art. 6(1)(f)).
- Analytics and marketing measurement — your consent, given through the cookie banner (Art. 6(1)(a)). You can withdraw it at any time.
- Accounting and tax records — compliance with a legal obligation (Art. 6(1)(c)).
- Recruitment — steps taken at your request before a possible employment relationship, and your consent if we keep your application on file.
4. How long we keep it
| Data | Retention |
|---|---|
| Enquiries that do not become clients | 24 months from our last contact |
| Client records and correspondence | Duration of the engagement, then as required for accounting purposes |
| Accounting documents | 10 years, as required by Lithuanian law |
| Job applications | 6 months after the process ends, unless you agree to a longer period |
| Analytics data | Per our Google Analytics retention setting, currently 14 months |
5. Who else receives your data
We do not sell your data and we do not share it for anyone else's marketing. We do use service providers who process data on our behalf:
| Provider | What they handle |
|---|---|
| Typeform (Typeform S.L., Spain) | Hosts our contact form and stores your answers. Receives everything you enter into it. |
| FormSubmit | Fallback only. If the Typeform embed cannot load, a simple built-in form takes over and FormSubmit delivers it to our inbox. |
| Google (Gmail, Workspace) | Hosts the mailbox where enquiries and applications arrive. |
| Google Analytics & Google Tag Manager | Website usage measurement, only with your consent. |
| Google Fonts | Serves the site's typefaces. Your IP address reaches Google when a page loads. |
| Meta Platforms | Advertising measurement, only with your consent to marketing cookies. |
| Cookiebot (Usercentrics A/S, Denmark) | Records and stores your cookie choice. |
| Vercel | Hosts the website and processes server logs. |
6. International transfers
Some of these providers are based outside the European Economic Area, or use infrastructure that is. Where that happens, transfers rely on the European Commission's Standard Contractual Clauses or, for US providers, certification under the EU–US Data Privacy Framework. You can ask us for details of the safeguards that apply to a specific provider.
7. Cookies and tracking
Necessary cookies are always active because the site cannot work without them. Statistics and marketing cookies load only after you accept them. Declining does not restrict any part of the site.
Cookie declaration
The list below is generated by our consent tool and updates automatically as the site changes. You can change or withdraw your choice at any time from the cookie banner.
8. Your rights
Under the GDPR you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct data that is wrong or incomplete;
- delete your data, where we have no overriding reason to keep it;
- restrict how we use it while a question is being resolved;
- send you, or another provider, a portable copy of data you gave us;
- stop processing based on legitimate interest, by objecting to it;
- withdraw consent at any time — this does not affect processing already carried out.
Write to cofactor.agency@gmail.com. We answer within one month. There is no charge unless a request is clearly unfounded or excessive.
9. If you want to complain
Please raise it with us first — most things are quickest to fix directly. You also have the right to complain to the Lithuanian supervisory authority:
Valstybinė duomenų apsaugos inspekcija (VDAI)
L. Sapiegos g. 17, 10312 Vilnius, Lithuania
ada@ada.lt · vdai.lrv.lt
10. Security
The site is served over HTTPS. Access to enquiries is limited to team members who need it for their work. We review the tools we use and remove those we no longer need.
11. Changes to this policy
If we change how we handle personal data we will update this page and the date below. Material changes will be made obvious rather than slipped in quietly.
Last updated: 8 September 2026