Privacy Policy

Last updated: March 2026

1. Data controller

The data controller for this website and related services is:

MB Nesisuksi-negyvensi (trading as "Lobster Pack")
Taikos g. 164-23, LT-05229 Vilnius, Lithuania
Email: linas@lobsterpack.com

When we say "we," "us," or "Lobster Pack," we mean MB Nesisuksi-negyvensi. "You" means any person who visits our website or engages our services.

2. What data we collect

We collect different types of data depending on how you interact with us:

Website analytics (PostHog)

We use PostHog for website analytics. PostHog is hosted in the EU. When you consent to analytics cookies, we collect:

  • Pages visited and time spent on each page
  • Referring website
  • Browser type, device type, and screen resolution
  • Approximate location (country/city level, derived from IP address)
  • Session duration and interaction events (clicks, scrolls)

PostHog does not track you across other websites. We don't sell this data or share it with advertisers.

Calendly bookings

When you book a call through Calendly, Calendly collects your name, email address, and any information you provide in the booking form. Calendly is a third-party service with its own privacy policy. We receive the booking details to schedule and prepare for our call.

Email correspondence

If you email us, we'll have your email address, name (if provided), and the content of your message. We use this only to respond to your inquiry and manage our business relationship.

Client engagement data

If you become a client, we'll also process billing information (company name, address, VAT number), project-related communications, and any data you share with us as part of the engagement. This is covered by the terms of the specific engagement and any Data Processing Agreement we enter into.

3. Legal basis for processing

Under the GDPR, we process your personal data based on the following legal grounds:

  • Consent — for analytics cookies (PostHog). You can grant or withdraw consent at any time through the cookie banner on our website.
  • Legitimate interest — for understanding how visitors use our website (aggregate, anonymised data), responding to inquiries you send us, and managing our business operations. We've balanced our interests against your rights and believe the processing is proportionate and expected.
  • Contractual necessity — for processing data required to deliver our consulting services when you're a client.
  • Legal obligation — for keeping invoices and financial records as required by Lithuanian tax law.

4. Cookie consent

When you first visit our website, you'll see a cookie consent banner. Analytics tracking (PostHog) only activates after you give consent. If you decline, no analytics cookies are set and no tracking data is collected.

You can change your cookie preferences at any time by clicking the cookie settings link in our website footer.

Essential cookies: We use a small number of cookies that are strictly necessary for the website to function (e.g., remembering your cookie preference and theme choice). These don't require consent under EU law.

5. Data retention

We keep your data only as long as we need it:

  • Analytics data: Retained in PostHog for 12 months, then automatically deleted.
  • Email correspondence: Kept for the duration of our business relationship, plus 2 years after the last contact.
  • Client engagement data: Kept for the duration of the engagement, plus 3 years for warranty and liability purposes.
  • Invoices and financial records: Kept for 10 years as required by Lithuanian tax law.
  • Calendly bookings: Managed by Calendly per their retention policy. We keep our own records of bookings for up to 12 months.

6. Your rights under GDPR

You have the following rights regarding your personal data:

  • Right of access — You can request a copy of the personal data we hold about you.
  • Right to rectification — If your data is inaccurate or incomplete, you can ask us to correct it.
  • Right to erasure — You can ask us to delete your personal data. We'll comply unless we have a legal obligation to keep it.
  • Right to data portability — You can request your data in a structured, commonly used, machine-readable format.
  • Right to restrict processing — You can ask us to limit how we process your data in certain circumstances.
  • Right to object — You can object to processing based on legitimate interest. We'll stop unless we can demonstrate compelling legitimate grounds.
  • Right to withdraw consent — Where processing is based on consent (e.g., analytics cookies), you can withdraw it at any time.

To exercise any of these rights, email us at linas@lobsterpack.com. We'll respond within 30 days, as required by law.

7. Data transfers

We make every effort to keep your data within the European Economic Area (EEA).

  • PostHog: We use PostHog's EU Cloud, hosted in Frankfurt, Germany. Your analytics data doesn't leave the EU.
  • Calendly: Calendly is a US-based service. They transfer data under the EU-US Data Privacy Framework. See Calendly's privacy policy for details.
  • Email: Depending on your email provider, messages may pass through servers outside the EEA. We can't control that, but our own email infrastructure is EU-based.

8. Data security

We take reasonable technical and organisational measures to protect your data, including encrypted connections (TLS), access controls, and regular security reviews. No system is 100% secure, but we take this seriously.

9. Third-party services

This website uses the following third-party services that may process your data:

  • PostHog (analytics) — EU-hosted, only loaded with your consent
  • Calendly (scheduling) — loaded when you visit the contact page
  • Cloudflare (hosting and CDN) — processes requests to deliver the website

Each service has its own privacy policy. We've chosen providers that take data protection seriously and offer EU hosting or adequate safeguards for international transfers.

10. Children's data

Our services aren't directed at anyone under 16. We don't knowingly collect data from children. If you believe we've inadvertently collected such data, contact us and we'll delete it promptly.

11. Supervisory authority

If you believe we've handled your data improperly, you have the right to lodge a complaint with a data protection authority. Our lead supervisory authority is:

State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija)
L. Sapiegos g. 17, 10312 Vilnius, Lithuania
Phone: +370 5 271 2804
Email: ada@ada.lt
Website: vdai.lrv.lt

You may also contact the data protection authority in your country of residence if you're located in another EU/EEA member state.

12. Changes to this policy

We may update this privacy policy as our practices or the law changes. We'll note the "last updated" date at the top. For significant changes, we'll make reasonable efforts to notify you (e.g., a notice on our website).

13. Contact us

For any privacy-related questions or to exercise your data rights:

MB Nesisuksi-negyvensi
Taikos g. 164-23, LT-05229 Vilnius, Lithuania
Email: linas@lobsterpack.com

We'll do our best to resolve any concern directly. Most issues can be sorted out with a quick email.