Privacy policy
This policy explains what personal data we collect, why we collect it, and the rights you have over it.
Who we are
MB The Special Something (“The Special Something”, “we”, “us”) is a product design studio registered in Lithuania under company code 304485059 (VAT code LT100012830516), at Perkūnkiemio g. 13-91, LT-12114 Vilnius, Lithuania. We are the controller of the personal data described in this policy.
Questions about this policy or your data: email [email protected] or message us on Telegram.
What we collect
- When you get in touch. Your name, email address, company, role and anything you choose to tell us, whether you write by email, use the chat form on this site (including any voice message you choose to record), message us on Telegram or book a call through Calendly.
- When you work with us. Contact and billing details for you and your colleagues, and the project correspondence we exchange.
- When you visit this site. Our hosting provider processes technical data such as your IP address, browser type, the pages you request and the time of the request, to deliver the site and keep it secure. Everything on the site, including its fonts, is served from our own domain, so no other company receives your visit. We do not run analytics or advertising tracking.
- When we reach out. If you work in product or lead a company that could use our services, we may hold your name, role, company and publicly available business contact details to contact you.
Why we use it, and on what basis
- To answer your enquiry and prepare a proposal: steps taken at your request before a contract, or our legitimate interest in replying to you.
- To deliver our services and manage the engagement: performance of our contract with you or your company.
- To invoice and keep accounting records: our legal obligations under Lithuanian law.
- To keep this site running and secure: our legitimate interest in a working, protected website.
- To contact business prospects: our legitimate interest in telling relevant people about our work. Every message offers an easy way to opt out, and we stop when you ask.
Who we share it with
We never sell personal data. We share it only with the services and advisers we need to run the studio:
- Cloudflare, which hosts and protects this site, stores chat conversations so we can reply to you in the chat, and checks chat messages for bots with Turnstile. Turnstile looks at technical signals from your browser and does not use them for advertising. See Cloudflare’s Turnstile Privacy Addendum.
- Calendly, if you book a call, and Telegram, if you message us there. Messages, voice recordings and files sent through the chat, and your email replies to us, are also delivered to us through Telegram. Each handles your data under its own privacy policy.
- Resend, which sends our emails to you (such as the confirmation of your chat message and our replies) and receives your email replies to them.
- Our accountants, legal advisers and payment providers, where needed.
- Public authorities, when the law requires it.
International transfers
Some of these providers process data outside the European Economic Area, mainly in the United States. Where they do, the transfer is covered by the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long we keep it
- Enquiries that don’t lead to a project: up to 24 months after our last contact.
- Client, contract and invoicing records: for as long as Lithuanian accounting and tax law requires.
- Prospect details: until you opt out, or until they are no longer relevant.
- Technical logs: for the period set by our hosting provider.
Your rights
You can ask us to access, correct or delete your personal data, to restrict or object to how we use it, or to send it to you in a portable format. Where we rely on your consent, you can withdraw it at any time. Write to [email protected] and we will answer within one month.
You can also complain to the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija) at vdai.lrv.lt, or to the data protection authority where you live.
Client project data
When a project involves personal data that belongs to a client, for example their users’ data in research or analytics, we process it on the client’s behalf and only on their instructions. We will sign a data processing agreement on request.
Changes
We may update this policy. The date at the top shows when it last changed.