Privacy policy
Last updated: 6 November 2026
This policy explains what personal information is handled when you visit this portfolio, prepare an enquiry or contact Maksim Kanavalau, why it is needed and what choices you have.
The contact form prepares an email draft on your device. It does not submit the enquiry to a website server. I receive your message only if you send it through your email service or contact me through another channel.
1. Who is responsible for your data
The controller for enquiries and client correspondence is Maksim Kanavalau, a marketing professional based in Vilnius, Lithuania. Contact me at maksim.kanavalau@gmail.com or +370 605 78228 with questions about your information or this policy.
2. What information is handled and why
| Situation | Information | Purpose |
|---|---|---|
| Preparing an enquiry | Name, email and message; optional phone, Telegram username, timing, selected services and call preference. | Prepare a draft for you to review. These fields are processed in your browser, without a form database, local storage or automatic submission. |
| Email, messages and calls | Contact details, correspondence and information you choose to share. | Answer your enquiry, discuss scope, pricing and timing, or manage an engagement. |
| Working together | Contact, project, contractual and billing information as necessary. | Deliver the agreed work, administer the relationship and meet legal obligations. |
| Website visits | Technical request information, such as IP address, browser information, requested page and time, processed by hosting infrastructure. | Deliver and secure the website. This portfolio has no added visitor analytics or advertising pixels. |
Please do not include passwords, payment-card details, identity documents, health information or other sensitive information in an enquiry. Enquiries do not subscribe you to marketing emails. I do not sell enquiry details or make decisions with legal or similarly significant effects based solely on automated processing.
3. Legal bases
- Steps before a contract and contract performance — Article 6(1)(b) GDPR: enquiries about engaging my services personally and delivery of an agreed engagement.
- Legitimate interests — Article 6(1)(f): handling professional correspondence, including enquiries from representatives of organisations, managing business relationships and protecting the website.
- Legal obligations — Article 6(1)(c): records required for accounting or other applicable legal duties.
The form checkbox acknowledges this policy; it is not consent to advertising. If a future activity requires consent, it will be requested separately, with a way to withdraw it.
4. How the email draft works
“Continue in email” passes a prepared draft to the email application configured on your device. You can edit or discard it before sending. The website cannot verify whether an email app opened or a message was sent. “Copy enquiry” copies a version without email headers to your device clipboard. The WhatsApp and Telegram links open a chat with me; you paste, review and send the text yourself. Opening these links does not pass the filled-in form to the messenger. You may also paste the text into webmail.
The website does not receive, save or email the filled-in form. There is no background form-submission service. Your email application or provider may save a draft according to its settings. Once sent, your message is handled by your provider and received in my Gmail inbox. You can also contact me directly by phone, email, Telegram or LinkedIn.
5. Cookies and tracking
No analytics, advertising cookies, tracking pixels or third-party media embeds have been added to this portfolio. The form does not store its fields in cookies or browser local storage. Cloudflare hosting and security infrastructure may use essential technologies under its service policies.
There is no optional-cookie preference banner because this portfolio does not load optional analytics or advertising tools. You can manage cookies through your browser settings; blocking essential platform cookies may affect access. If optional tracking is introduced later, this policy and the relevant choice controls will be updated before it is activated where consent is required.
6. Service providers and international processing
The website is hosted on Cloudflare Pages. Received email correspondence is handled through Google Gmail. These providers process information necessary for hosting, security and communication. If you choose Telegram, LinkedIn or your own email service, those services also handle your information under their own terms.
Provider information is available from Cloudflare and Google.
These services may process information outside the European Economic Area, including in the United States. Transfer arrangements depend on the provider and service, and may include an applicable adequacy decision or standard contractual clauses. Contact me for details of the arrangements applicable to your enquiry and how to obtain information about safeguards. Information may also be disclosed to public authorities where legally required.
7. How long information is kept
| Information | Retention |
|---|---|
| Unsent form fields | Not saved by the website. They remain in the current page while it is open; your browser may restore fields using its own settings. Drafts and clipboard copies are controlled by your device and email service. |
| Enquiries that do not lead to an engagement | Deleted from my correspondence within six months of the last substantive contact, unless needed for a specific legal claim or obligation. |
| Client, project, contract and accounting records | For the engagement and applicable contractual or statutory retention period. The period depends on the type and legal purpose of the record. |
| Hosting and service operational records | Under the provider’s service terms and settings. This app does not set a separate technical-log retention period. |
8. Your rights
Depending on the legal basis and circumstances, you may request access to or a copy of your information, correction, erasure, restriction or data portability. You may object to processing based on legitimate interests. Where an activity relies on consent, you may withdraw it without affecting earlier lawful processing.
Write to maksim.kanavalau@gmail.com. I will respond without undue delay and normally within one month. If proportionate identity checks or a lawful extension are needed, I will explain them. You can also complain to Lithuania’s State Data Protection Inspectorate or another competent supervisory authority.
9. Your choices, security and updates
Using the form is optional. Name, email and a message are required to prepare a useful enquiry; phone, Telegram and timing are optional. You can instead email or call directly. Optional contact details are used in connection with your request.
The website uses HTTPS. No attachments or documents are uploaded through the form. Email and messaging services have their own security measures. This portfolio is intended for professional enquiries, not services directed at children; contact me if a child’s information has been sent unintentionally.
This policy will be updated when the way this website or correspondence handles information changes. The current version and its update date remain available on this page.