beribus
Legal

Privacy Policy

Last updated 2026-10-20.

This policy applies to both of our websites: beribus.com (website maintenance plans) and design.beribus.com (website design). Where the two sites differ, this is stated separately.

1. Data controller

The controller of personal data collected through these websites is Karolis Mikulėnas, operating as a sole trader (individuali veikla) under the brand beribus (individual activity certificate No. 1550724), correspondence address: Lazdynų g. 6-22, LT-04131 Vilnius, Lithuania. Enquiries are handled together with Ričardas Plančiūnas. For questions about personal data, contact help@beribus.com.

2. What data we collect

We only collect data you submit yourself:

  • Call booking and plan order (beribus.com). Your chosen plan; company name or website address (we use it to recognise your transfer); website address; full name; email address; your description of what needs to be done; the chosen call length, date and time; the page language. During booking your IP address is used only to limit request frequency (abuse protection) and is stored not in plain form but only as an HMAC hash.
  • Order form (design.beribus.com). Name; email address; business name (optional); chosen plan; message content; the form language and the page it was filled in on. Your IP address is included in the enquiry sent to us, and for rate limiting it is temporarily (15 minutes) recorded on the server.
  • Payment. When you transfer the plan fee, we see the payer's details, the amount and the reference on our bank statement and use them to check that the payment has arrived.
  • Email correspondence - your email address, name and the content of your emails when you write to us.
  • Chat assistant Džekis (design.beribus.com) - currently switched off. If it is switched on and shown on the page, writing to it involves processing message content, timestamp and IP address.

3. What we use it for

Booking and providing the service. We use booking data to arrange the Zoom call, check the payment, and enter into and perform the maintenance plan contract. Legal basis - entering into and performing a contract (GDPR Art. 6(1)(b)). When you submit a booking, we receive a notification at our email address help@beribus.com, and an automatic confirmation with the call time and bank transfer details is sent to you (from no-reply@beribus.com; replies to it reach help@beribus.com). Before the call we email you the Zoom link.

Order form. We use form data to answer your enquiry and discuss a possible website design project. Legal basis - taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)). The enquiry is sent to our email address help@beribus.com, and a short automatic confirmation that we received it is sent to you (from no-reply@beribus.com; it contains only your name and chosen plan). The form has no marketing consent checkbox.

Correspondence. We use emails to answer your questions and discuss possible or ongoing work.

Chat assistant Džekis (when switched on). Legal basis - our legitimate interest in answering visitor questions quickly (GDPR Art. 6(1)(f)) for general questions (e.g. prices); where the conversation concerns a specific possible project, the basis is taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)). Chat content is never used for marketing.

We don't use your data for marketing and don't sell it to third parties.

4. Who receives the data

  • Hosting provider Namecheap - the server that runs the websites, stores booking data and sends enquiry and confirmation emails.
  • Zoom - the call takes place on Zoom; when you join, Zoom processes your connection data under its own terms.
  • Google Analytics (GA4) - design.beribus.com only - used to collect visitor statistics (which pages are viewed, where visitors come from). It only loads after you give consent via the cookie banner - without consent, no data is sent to Google at all. beribus.com does not use Google Analytics.
  • Google Fonts - on the main pages of both websites, fonts are loaded from our own server; only some design style sample pages on design.beribus.com load fonts from Google's servers, so when you open them your IP address may reach Google's infrastructure.
  • Džekis's AI provider – Anthropic Ireland, Limited (Ireland) - applies only when Džekis is switched on. So that Džekis can answer, chat messages are sent to Anthropic's "Claude" model. Anthropic processes them as a data processor under its commercial terms and data processing addendum: messages are not used to train models and are deleted within 30 days (except where linked to a breach of Anthropic's usage policy, when they are kept longer). Data may also be processed in the USA (by Anthropic group companies and sub-processors); such transfers rely on the European Commission's standard contractual clauses.

5. Data retention

Bookings. In the booking system on our server, records whose call date is more than 120 days old are removed automatically when new bookings are saved. Booking notifications and email correspondence are kept in our email inbox for as long as needed to provide the service and perform the contract. HMAC hashes of IP addresses used for rate limiting are kept for no longer than 24 hours - older entries are discarded automatically.

Order form. Enquiries are kept in our email inbox for as long as needed to answer them and discuss a possible project (and, if a contract is concluded, to perform it). IP entries used for rate limiting are discarded from the server after 15 minutes. If an enquiry cannot be sent, its content is written to the server error log so that it is not lost.

We do not store the content of your conversation with Džekis on our server - it stays only in your browser's temporary memory ("sessionStorage") and disappears once you close the browser tab or window.

6. Your rights

Under the GDPR, you have the right to access your data, request correction or deletion, restrict its processing, or object to it. Contact us at the email above to exercise these rights. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt). None of the processing described above, including conversations with Džekis, involves any automated decision that produces legal or similarly significant effects for you (GDPR Art. 22).

7. Cookies

beribus.com has no cookie consent banner because it does not use statistics, marketing or tracking cookies.

On design.beribus.com you'll see a cookie consent banner on your first visit. If you choose "Accept", Google Analytics (GA4) is enabled for visitor statistics, which sets _ga and _ga_* cookies (GA4's default retention is up to 14 months). If you choose "Decline", or don't respond, no statistics cookies are set. Your choice is remembered in your browser (localStorage), and you can change it at any time via "Cookie settings" at the bottom of design.beribus.com pages. We don't use marketing or cross-site tracking cookies.

On both websites your browser may separately store technical data needed for the page to work (e.g. cached fonts or stylesheets) - that doesn't require consent.

8. Changes to this policy

This policy may be updated - the current version is always published on this page together with the update date.