Small site. Deliberately small data appetite.

Ask Vytas and paid enquiries

If you send the Ask Vytas form, I process the details you provide — normally your name, email, question, optional travel dates, group, base, budget and interests — so I can respond, keep the enquiry organised and, where relevant, provide the service you requested. If you open the form through a site-feedback link, the page you came from may also be attached automatically so I can identify what needs correcting; you can remove or omit that context by contacting me directly instead. The legal basis is taking steps at your request before a contract and, when a service is agreed, performance of that contract. Limited records may also be retained where necessary for accounting, dispute handling or other legal obligations.

Valid enquiries are stored in a protected server-side inbox that is not publicly browsable. A low-volume notification copy may be sent to info@lithuaniaunscripted.com. You can ask for an enquiry to be corrected or deleted, subject to any record I am legally required to keep.

Handbook purchases and payments through Stripe

For the Practical Lithuania Handbook, I retain the purchase email, Stripe payment/session reference, amount, edition entitlement and delivery status so I can deliver the purchased Cold-Season Edition, renew a download link, and handle refunds or disputes. A Handbook included with a paid Trip Build uses the same fulfilment record. This purchase record is not a newsletter subscription.

Card and other supported checkout payments are handled on Stripe-hosted payment pages. Lithuania Unscripted does not receive or store your full card number or card security code in the website enquiry inbox. Stripe receives the payment details and the contact or billing information needed to process the transaction under Stripe’s privacy terms and security controls.

For paid services, I may use the email address and Stripe payment reference or status to match a payment to an Ask Vytas enquiry, provide the service, issue a refund where applicable, and keep the records required for accounting or disputes. The family story, itinerary or question you send through Ask Vytas remains in the website’s protected enquiry store; it is not intentionally copied into Stripe as payment metadata.

Lithuania Worth Coming For email updates

The email list is consent-only. The subscription box is never pre-ticked and the capture does not go live until the mailing provider and domain authentication have been configured and tested. The legal basis for marketing email is your consent. You can withdraw it at any time without affecting processing that took place before withdrawal.

MailerLite is used as the email-list and campaign processor. A subscription starts as unconfirmed and is activated only after the confirmation step configured with the provider. Every marketing email must include an unsubscribe mechanism. I do not use the website's PHP mail function to send bulk marketing campaigns.

For consent evidence, the site records the time, consent-text version, source page/slot and the mailing provider's subscriber ID. The website stores a keyed one-way email reference rather than another plain-text copy of the subscriber address. The actual list address is held by MailerLite. Marketing data is kept until you unsubscribe or withdraw consent, after which it is removed or retained only to the limited extent needed to demonstrate compliance or meet a legal requirement.

To withdraw consent, unsubscribe in any email or write to info@lithuaniaunscripted.com. If you ask to be forgotten, the local consent reference can be removed and the provider's GDPR deletion/forget process can be requested.

Planner preferences and saved trips

My Lithuania uses browser storage to remember choices such as your starting base and saved trip. That information normally stays in your browser and is not an account. Clearing site data in your browser removes it. The planner's route estimates are editorial planning aids, not live navigation.

Minimal first-party measurement

To understand whether the site is useful, Lithuania Unscripted records a small set of funnel events such as “email box seen”, “Worth the Detour shown/added”, “planner built”, handbook/preview clicks and paid-help starts. The measurement endpoint does not intentionally store your IP address or browser user-agent. A random identifier exists only for the browser session so aggregate conversion rates can be calculated; it is not an advertising ID and is not used to follow you across websites.

The purpose is service improvement and aggregate business measurement. There is no third-party advertising pixel in this measurement layer and no sale of behavioural data.

Who receives data

Data is shared only where needed to operate the service — for example, the web host for server-side enquiries and MailerLite for consented email delivery — or where disclosure is legally required. Each provider may use its own infrastructure and subprocessors under its contractual data-protection terms. I do not give the mailing list to advertisers.

Retention

• Enquiries: kept while needed to answer, manage the trip/service and meet legitimate legal or accounting needs; otherwise deleted when no longer needed or on a valid deletion request.
• Email list: until you unsubscribe or withdraw consent, subject to limited compliance records.
• Local consent evidence: retained only as long as reasonably necessary to evidence consent/compliance, then deleted or anonymised.
• Aggregate funnel events: reviewed on a rolling basis and may be aggregated or deleted when raw event detail is no longer useful.

Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, obtain portable data, and withdraw consent. Send a request to info@lithuaniaunscripted.com. You also have the right to complain to Lithuania's State Data Protection Inspectorate (VDAI) or another competent supervisory authority.

Changes

This notice is updated when the data flow changes. The current email-capture architecture was prepared on 30 August 2026; the capture remains technically disabled until its launch gate is completed.