Privacy Policy.
This notice explains what personal data Orebai Digital handles when you browse this website, contact us or ask us about a project.
Last updated 29 August 2026
1. Who controls your data
MB Orebai Digital, established in Lithuania, is the controller of personal data described in this notice. Questions and data-rights requests can be sent to info@orebai.com.
2. Data we collect
Depending on how you use the website, we may process:
- your name, email address and telephone number;
- project details, service interests, approximate budget and messages you send;
- your language selection and cookie-consent choice;
- technical request information such as IP address, browser, device and server logs;
- newsletter consent, where you actively choose to subscribe.
Please do not send sensitive personal data through the project enquiry form unless we specifically ask for it and explain why it is required.
3. Why we use it and our legal basis
| Purpose | Legal basis |
|---|---|
| Responding to enquiries and preparing a proposal | Steps requested before entering a contract and our legitimate interest in managing enquiries |
| Delivering and administering agreed services | Performance of a contract and applicable legal obligations |
| Securing, diagnosing and improving the website | Our legitimate interest in operating a secure and effective service |
| Sending an optional newsletter | Your consent, which you may withdraw at any time |
| Optional analytics, if introduced and accepted | Your cookie consent |
4. Who receives personal data
Access is limited to Orebai personnel and service providers that help us host, secure, maintain or communicate through the website. Providers act under appropriate contractual and confidentiality obligations. We do not sell personal data.
If a provider processes data outside the European Economic Area, we use an applicable lawful transfer mechanism, such as an adequacy decision or approved contractual safeguards.
5. How long we keep it
Enquiry records are normally kept for up to 24 months so we can follow up and understand prior conversations. Project and financial records may be kept longer where required for contracts, accounting, dispute management or other legal duties. Newsletter data is kept until consent is withdrawn. Security logs are retained only for the period reasonably required to protect and diagnose the service.
6. Your rights
Subject to the conditions in applicable law, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. Where processing relies on consent, you may withdraw it without affecting earlier lawful processing.
Contact info@orebai.com to exercise a right. You may also lodge a complaint with Lithuania's State Data Protection Inspectorate .
7. Automated decisions and children
We do not use submitted personal data to make solely automated decisions with legal or similarly significant effects. This business website is not directed at children, and we do not knowingly request children's personal data.
8. Changes to this policy
We may update this notice when our services, providers or legal obligations change. The current version and its revision date will remain available on this page.