Privacy Policy

Last updated: February 24, 2026

This Privacy Policy explains how MB Kryptingi Projektai (company code 304844804), operating under the brand 1D.works, collects, uses, and protects your personal data when you use our website https://1d.works ("Website") or engage our services.

We process personal data in accordance with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and applicable Lithuanian data protection law.

1. Data Controller

MB Kryptingi Projektai Taikos g. 150-30, Vilnius, Lithuania Email: [email protected]

2. What Data We Collect

Data	Source	Purpose
Name, email, subject, message	Contact form	Responding to your inquiry
Name, email, company	Proposals & SOWs	Providing our services
Payment information	Wise (payment processor)	Processing payments
Page views, referrer (anonymised)	Simple Analytics	Understanding website usage

We do not collect data through cookies or tracking pixels. Our analytics provider, Simple Analytics, is privacy-first and does not use cookies or collect personal data.

3. Legal Basis for Processing

Purpose	Legal basis (GDPR Art. 6)
Responding to inquiries	Legitimate interest
Performing a contract	Contract performance
Invoicing & payments	Legal obligation / Contract
Website analytics	Legitimate interest (anonymised data)

4. Data Recipients

We share personal data only with the following categories of recipients, and only to the extent necessary:

Slack Technologies (Salesforce) — contact form messages are delivered via Slack for internal processing.
Wise Payments Limited — payment processing for card and bank transfer payments.
Simple Analytics BV — anonymised website analytics (no personal data shared).

We do not sell personal data. We do not transfer data outside the EU/EEA except where processors maintain adequate safeguards (e.g., Standard Contractual Clauses).

5. Data Retention

Contact form submissions: retained for up to 2 years, then deleted.
Contractual data: retained for the duration of the business relationship plus 10 years (Lithuanian statutory retention for accounting records).
Analytics data: anonymised; no personal data retained.

6. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Rectify inaccurate data
Erase your data ("right to be forgotten")
Restrict processing
Data portability
Object to processing based on legitimate interest
Lodge a complaint with the Lithuanian State Data Protection Inspectorate (ada.lt)

To exercise any of these rights, email [email protected].

7. Security

We implement appropriate technical and organisational measures to protect personal data, including encrypted communications (TLS), access controls, and secure hosting.

8. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with a revised "Last updated" date.

9. Contact

For any data protection questions, contact us at [email protected].