Ambra Joinery
Privacy policy
This policy explains what personal data we process when you visit ambrajoinery.com, use the contact form or e-mail us, why we do it, and what rights you have.
1. Who is responsible
Ambra Joinery is a trading name of MB TJ31, a small partnership registered in Lithuania (company code 307520202), V. Nagevičiaus g. 3, LT-08237 Vilnius, Lithuania. MB TJ31 is the data controller for the personal data described here.
Contact: info@ambrajoinery.com · +370 683 80065. We have not appointed a data protection officer; please send any privacy questions to the e-mail address above.
2. What we collect
- Contact form: name, e-mail address, phone number (optional), your message, whether you ticked the marketing box (yes/no), the language version of the page and the time of sending.
- E-mail and phone: when you contact us directly, the content of our correspondence.
- Technical data: to stop spam, the form temporarily stores a hashed (pseudonymised) version of your IP address together with the time of sending. Our hosting provider keeps standard server logs (IP address, browser type, pages requested) for operation and security.
- Cookies and similar technologies: see section 6.
3. Why we use it and our legal basis
- Answering your inquiry, preparing a quote and carrying out an order – GDPR Art. 6(1)(b) (steps before a contract, or performing it) and Art. 6(1)(f) (our legitimate interest in answering inquiries, for example when an interior designer contacts us on behalf of a client).
- Protecting the website against spam and misuse – Art. 6(1)(f).
- Sending offers and news by e-mail – only if you tick the marketing box in the form – Art. 6(1)(a) (consent).
- Google Ads Customer Match – only if you tick the marketing box: we may upload your e-mail address in hashed form to Google Ads so that our ads can be shown to you or to similar audiences – Art. 6(1)(a).
- Measuring how our ads perform (conversion tracking) – only after you click “Accept” in the cookie banner – Art. 6(1)(a).
- Accounting and bookkeeping if you place an order – Art. 6(1)(c) (legal obligation).
- Business contacts: we may send a one-off inquiry about cooperation to interior designers and design studios at their publicly listed business e-mail address – Art. 6(1)(f). Tell us and we will not contact you again.
Giving us your data is voluntary, but without your name, e-mail address and message we cannot reply to you. We do not use automated decision-making or profiling with legal or similar effects.
4. Where the data is stored and who receives it
- Hostinger International Ltd. hosts the website and our e-mail (info@ambrajoinery.com) as our data processor, on servers in the EU/EEA. Messages from the form are delivered to our mailbox and saved in an inquiry log on the server that is not publicly accessible.
- Google Ireland Limited (Google Ads) receives data for conversion measurement only after you accept cookies, and for Customer Match only if you gave marketing consent. Google may process data in the USA; such transfers are covered by the EU–US Data Privacy Framework and the EU standard contractual clauses.
- We do not sell personal data. We disclose data to our accountant or to public authorities only where the law requires it.
5. How long we keep it
- Inquiries and correspondence: up to 24 months after our last contact, unless an order follows.
- Orders: contracts and accounting records for as long as Lithuanian accounting law requires (normally up to 10 years).
- Marketing: until you withdraw your consent. We then remove you from our e-mail and Customer Match lists within 30 days, and may keep a record of the consent and its withdrawal as proof.
- Hashed IP address (spam protection): short-term; only sends from the last hour are taken into account.
- Your cookie choice: stored in your own browser until you clear it.
6. Cookies
Necessary storage. The site saves your cookie choice (ck) and language choice (lang) in your browser’s local storage. This is not sent to us.
Google Ads (gtag.js). We use Google Consent Mode. Before you choose, and if you click “Decline”, no advertising cookies are set. Google’s tag may still send limited signals without cookies (for example that a page was viewed or the form was sent), which Google uses for aggregated statistics and modelling.
If you click “Accept”, Google Ads may set cookies (such as _gcl_au) to measure which ads lead to inquiries. When you then send the form, your e-mail address and phone number are hashed in your browser and sent to Google to match the inquiry to the ad click (enhanced conversions).
You can change your choice at any time:
7. Your rights
You have the right to access your data, to have it corrected or deleted, to restrict processing, to data portability, and to object to processing based on our legitimate interest – and always to object to direct marketing. You can withdraw your consent at any time (for example via the unsubscribe link in our e-mails or by writing to us); this does not affect processing before the withdrawal. Write to info@ambrajoinery.com and we will reply within one month.
8. Complaints
If you think we process your data unlawfully, you can complain to a data protection authority – in Norway Datatilsynet, or in Lithuania, where we are established, the State Data Protection Inspectorate (VDAI). We would appreciate the chance to sort it out with you first.
9. Security
The website uses HTTPS encryption. The inquiry log is not publicly accessible, the download page is protected by a key, and only we have access to the mailbox.
10. Changes
We may update this policy, for example if we start using new services. The date at the top shows when it was last changed.