Privacy policy

Who handles your data

UAB „Bongo CO“, company code 305403474. Contact: info@bongo.lt, +370 609 67 399.

What we collect

Only what you type into the enquiry form: your name, an email or phone number and, if you like, your company, the service you're interested in and a message. Only your name and one contact are required.

With the enquiry we also record where you came from: an ad tag (e.g. utm_source) or the address of the previous site.

Why we use it

To reply to your enquiry, arrange a consultation and prepare a proposal.

Legal basis: steps taken at your request before entering into a contract (GDPR Article 6(1)(b)), so no separate consent checkbox is needed.

We don't use enquiry data for advertising, send newsletters or sell your data.

How long we keep it

If we don't sign a contract, we delete your enquiry 12 months after our last exchange. If we do, we keep the data for as long as the contract and the law require.

Who we share it with

We share enquiry data only with the providers the site and email can't run without (hosting, database, email service). Enquiries and visitor statistics are stored in a Supabase database in Ireland (EU). Supabase is run by Supabase Pte. Ltd. (Singapore), so its access to the data is covered by the European Commission's standard contractual clauses.

If you accept analytics or advertising cookies, the related data goes to Google Ireland Limited and Meta Platforms Ireland Limited. They may transfer it to the US under the EU-US Data Privacy Framework and standard contractual clauses.

Chat with Bongiukas (AI assistant)

The site has an AI chat assistant called Bongiukas. It only answers questions about Bongo's services, based on the information on this site. Replies are generated automatically and may be inaccurate; the Bongo team gives the final word.

The messages you type are sent to Anthropic, PBC (USA) to generate a reply. We don't store chats. Anthropic processes the data as our service provider under a data processing agreement, doesn't use it to train AI models and keeps it only for a limited time for safety purposes. The transfer to the US is covered by standard contractual clauses.

Legal basis: your request for an answer and our legitimate interest in advising visitors (GDPR Article 6(1)(b) and (f)). Don't share personal data in the chat: use the enquiry form to get in touch.

Abuse protection: if someone tries to get around the assistant's rules, sends spam or is abusive, the chat is closed for 24 hours. For this we keep hashed values of the IP address, browser and device tag for 24 hours; the IP address itself isn't stored. Legal basis: legitimate interest in protecting the service (GDPR Article 6(1)(f)).

Cookieless visitor statistics

To know how many people visit the site, we record the page viewed, where you came from (the previous site or an ad tag), device type, browser, operating system, country and site language.

We use no cookies for this and store nothing on your device. Your IP address is used only to compute an anonymous identifier that changes every day; the IP address itself isn't stored. So we can't tell who you are or link your visits on different days.

Legal basis: our legitimate interest in knowing how the site is used (GDPR Article 6(1)(f)). If you clicked “Reject all” in the cookie banner, your visits aren't counted. The data is kept for 12 months.

Analytics and advertising

Only with your consent, we use analytics and advertising tools: Google Analytics, Meta Pixel and Google Ads. They collect data about your device and how you browse the site: pages viewed, clicks, approximate location, browser, IP address and cookie identifiers.

We use this data to understand how visitors use the site, measure ad results and show ads to people who have visited.

If you accepted advertising cookies and send an enquiry, we pass Meta a hashed (SHA-256) email or phone number, your IP address and browser details (Conversions API) to learn which ad led to the enquiry. Without consent none of this goes to Meta.

Legal basis: your consent (GDPR Article 6(1)(a)). Without it these tools don't load. You can withdraw consent any time via “Cookie settings” at the bottom of the page; this doesn't affect processing before you withdrew.

Retention periods are listed in the cookie policy. We make no automated decisions with legal effects on you.

Your rights

You can ask to access, correct, delete, restrict, object to or move your data. Email info@bongo.lt and we'll reply within one month.

If you think your rights have been breached, you can complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt).