Privacy Policy
Last updated 8 October 2026
Who is responsible
This site and the tutoring it sells are run by Mindaugas Mečėjus, a sole trader based in Lithuania, who is the data controller for the personal data described here. For any privacy question or request, email mindaugas@mecejus.com.
What is collected and why
- Booking details — name, surname, email, phone number, time zone, subject, level and any notes you add. Used to schedule and deliver your lessons, send confirmations and reminders, and handle rescheduling. Legal basis: performing the contract you enter into when you book.
- Payment records — amount, date and a Stripe payment reference. Card details go directly to Stripe and are never seen or stored by this site. Legal basis: the contract, and the legal obligation to keep accounting records.
- Site usage — pages viewed and steps taken through the booking form, browser and device type, approximate location (country and city, derived from your IP address), referring website and campaign tags in the link you followed. You are recognised only within a single day, by a one-way hash of your IP address and browser that changes every day; your IP address itself is not stored. Used to understand how the site is used and improve it. Legal basis: legitimate interest in running and improving the site. You can object at any time by email.
Your data is never sold, rented or used for advertising profiles, and no decisions about you are made by automated means.
Cookies
This site sets no cookies of its own and stores nothing on your device for analytics. On the payment step, Stripe sets cookies that it needs to process the payment securely and prevent fraud. These are strictly necessary for the service you asked for, so no consent banner is shown.
Who receives your data
Only the service providers needed to run the business, each bound by a data processing agreement:
- Cloudflare — hosting and database.
- Stripe — payments.
- Google — calendar scheduling and Google Meet lessons.
- SMTP2GO — sending booking and reminder emails.
Some of these providers process data outside the European Economic Area, including in the United States. Those transfers rely on the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses.
How long it is kept
- Site usage data — deleted automatically after 13 months.
- Booking and payment records — kept while you are a client and afterwards for as long as Lithuanian tax and accounting law requires (up to 10 years), then deleted.
Your rights
You can ask to access, correct, delete or receive a copy of your personal data, to restrict how it is used, or object to its use. Email mindaugas@mecejus.com and you will get a reply within 30 days. These rights are available to everyone, wherever you live.
If you are in the EU and unhappy with how your data is handled, you can complain to the Lithuanian State Data Protection Inspectorate (vdai.lrv.lt) or to the data protection authority in your own country.
Children
Lessons are for secondary-school students. The site is not directed at children under 13, and no personal data from children under 13 is knowingly collected. Students under 16 should have a parent or guardian make the booking. If you believe a child under 13 has provided personal data, email the address above and it will be deleted.
United States residents
Personal information is not sold or shared for cross-context behavioural advertising, as those terms are used in California and other US state privacy laws. The site does not track you across other websites, so it treats every visitor the same whether or not the browser sends a "Do Not Track" or Global Privacy Control signal.
Changes
If this policy changes, the updated version will be posted on this page with a new date. Significant changes affecting existing clients will also be sent by email.