In one paragraph
No accounts, no logins, and no advertising cookies on this website. Analytics are aggregated and cookieless. The only personal data I hold is what you give me when you book a call or email me, plus business contact details for outreach. You can have all of it deleted by emailing lukas@growwithlukas.com.
1Who controls your data
Lukas Kalvaitis, operating as Grow With Lukas, established in the Republic of Lithuania, is the data controller for this website and for direct outreach. Contact: lukas@growwithlukas.com.
Where I work inside a client's systems and handle their customers' data, the client is the controller and I act as a processor on their instructions under a separate agreement.
2What is collected
- Booking data. Name, email, business, and anything you type into the booking form when you book a discovery call.
- Correspondence. Emails, messages, and call notes you send or that arise from our conversations.
- Business contact data. Publicly listed business name, website, email, and phone number of companies and creators I contact about my services.
- Usage data. Aggregated, cookieless page analytics: page views, referrer, approximate country, device type. No profiles and no cross-site tracking.
- Email engagement. Whether a link in an email I sent you was clicked. Open tracking is switched off.
- Client engagement data. For active clients, the operational data needed to run the programme, including revenue figures and pipeline records.
No special category data is collected, and this site is not intended for anyone under 18. Any pre-filled parameter in a page link, such as a business name, is used only to personalise what you see and is not stored by the website.
3Why it is held, and the legal basis
- To answer you and run calls. Basis: steps taken at your request before entering a contract.
- To deliver an engagement and get paid. Basis: performance of a contract.
- Business to business outreach. Basis: legitimate interest in offering relevant services to businesses, balanced against your interests, with an opt-out in every message.
- Site analytics and security. Basis: legitimate interest in keeping the site working and understanding aggregate traffic.
- Invoicing, accounting, and tax records. Basis: legal obligation.
4Who processes it
These providers handle data on my behalf, under their own data processing terms:
- Vercel. Website hosting and cookieless analytics.
- Cal.com. Call booking and calendar scheduling.
- Resend. Sending email and link click tracking.
- Google Workspace and Yahoo Mail. Email, documents, and spreadsheets.
- Payment providers and banks. Processing payments and issuing invoices. Card details never reach me.
- Marketing and CRM tools used to run an engagement, named to each client at the start of that engagement.
Your data is never sold, rented, or shared for someone else's marketing. It is disclosed to a third party only where a provider above needs it to do its job, or where the law requires it.
5Transfers outside the EEA
Some providers are based in the United States. Where data leaves the European Economic Area, it is transferred under the European Commission's standard contractual clauses or an adequacy decision such as the EU-US Data Privacy Framework.
6How long it is kept
- Enquiries and bookings that do not become clients: up to 24 months, then deleted.
- Outreach contact records: until you opt out or ask for deletion, then suppressed so you are not contacted again.
- Client records: for the engagement and 3 years after it ends.
- Invoices, accounting, and tax records: 10 years, as Lithuanian law requires.
- Aggregated analytics: retained indefinitely because it identifies no one.
7Cookies
This website sets no advertising or profiling cookies and shows no cookie banner because it does not need one. Analytics are aggregated and cookieless. Pages that embed a booking widget may set cookies from that provider when you interact with it, governed by that provider's own policy.
8Your rights
Under the GDPR you can ask me to:
- Give you a copy of the personal data I hold about you.
- Correct anything inaccurate.
- Delete it, where there is no legal reason to keep it.
- Restrict or object to how it is used, including any outreach.
- Port it to another provider in a machine-readable format.
- Withdraw consent where consent was the basis, without affecting what happened before.
Email lukas@growwithlukas.com and you get a response within 30 days, free of charge. To stop outreach, reply with “unsubscribe” or use the opt-out in the message, and the address is suppressed permanently.
9Complaints
If you think your data has been mishandled, tell me first and I will fix it. You also have the right to complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija, vdai.lrv.lt), or to the supervisory authority in your own EU country.
10Security
Data is held in reputable cloud services with access limited to me and, where needed, the contractors working on your engagement. Connections to this site are encrypted, and strict security headers are enforced. No system is perfectly secure, so if a breach ever affects your data, you and the supervisory authority are notified as the GDPR requires.
11Changes
This policy may be updated. The current version always sits at growwithlukas.com/legal/privacy with the date it was last changed at the top.
Contact
Questions about this document go to lukas@growwithlukas.com. Written notice under any of these documents may be given by email to that address.
Lukas Kalvaitis, trading as Grow With Lukas, Republic of Lithuania.