Privacy Policy.
Last updated: 23 October 2026
1. Who we are
MB Deeps Solutions (“Deeps Solutions”, “we”) runs this website, deeps.solutions. We are the controller of the personal data described in this policy.
MB Deeps Solutions, company code 307095477, VAT code LT100017596517, Vėjo g. 12-2, Gindulių k., LT-91276 Klaipėdos r., Lithuania. Email: hi@deeps.solutions. Phone: +370 631 91610.
We have not appointed a data protection officer. For any question about your data, write to hi@deeps.solutions.
This policy covers our website and our own business contacts. When we work in a client’s HubSpot account, we process that data on the client’s behalf, under our agreement with the client. The client’s own privacy policy applies to that data.
2. What data we collect and why
Enquiries through our forms
When you send a form on our website, we collect your first and last name, work email, company, your answers about team size, CRM and the help you need, and your message. We also record the page you sent it from, the time, your IP address and your browser type.
We use this data to reply to you and to discuss a possible project. Legal basis: steps you asked for before a possible contract (GDPR Article 6(1)(b)), and our legitimate interest in answering business enquiries (Article 6(1)(f)).
We need your email address to reply. The other fields help us prepare.
Spam protection on our forms
When you start filling in a form, Cloudflare Turnstile checks that a person, not a bot, is sending it. Cloudflare receives your IP address and technical data about your browser and device. We also keep a coded form of your IP address for up to 24 hours, to limit how many forms one connection can send. Legal basis: our legitimate interest in protecting our website and inbox from spam (Article 6(1)(f)).
How you found us
If you accept analytics cookies, we also record how you reached our website: the first page of your visit, the website you came from, and campaign tags in the link, for example utm_source or ad click IDs from Google, Meta or LinkedIn. We save this with your enquiry, so we know which channels bring enquiries. Legal basis: your consent (Article 6(1)(a)). If you decline, we do not record it.
Website analytics
If you accept analytics cookies, HubSpot and Google Analytics record which pages you visit, when, and how you reached our website. Google Analytics also records your device, browser, approximate location, and some actions on the page, for example scrolling, link clicks, a sent form or a booked call. We use this to see how the website is used and which pages and channels bring enquiries. Google Analytics does not receive your name, email address or the content of your forms. Google Tag Manager loads Google Analytics on our website. Legal basis: your consent (Article 6(1)(a)).
Booking a call
If you book a call, our scheduling tool (HubSpot) collects your name, email, the time you chose and any notes you add. It sends you a calendar invitation with a video call link (Google Workspace). We use this to hold the call. Legal basis: Article 6(1)(b).
Videos
The videos on our blog page come from YouTube (Google). A video loads from YouTube only when you click to play it. YouTube then receives your IP address and may set its own cookies, under Google’s privacy policy.
Emails and calls with us
When you email or call us, we keep the conversation and your contact details to answer you and to manage our business relationship. Legal basis: Article 6(1)(b), or our legitimate interest in managing business relationships (Article 6(1)(f)).
Clients
For clients, we also keep contract, project and invoicing data. Legal basis: the contract (Article 6(1)(b)) and our legal obligations, for example under accounting law (Article 6(1)(c)).
We do not sell your data. We do not make automated decisions about you.
3. Who receives your data
These service providers process data for us, only on our instructions and under data processing agreements:
- HubSpot (HubSpot Ireland Ltd. and HubSpot, Inc.): our CRM, website analytics and call scheduling. Our HubSpot data is stored in the EU.
- Brevo (France): sends the notification emails from our website forms.
- Hostinger: hosts our website.
- Google (Google Ireland Ltd.): our business email, calendar and video calls (Google Workspace), and, only if you accept analytics cookies, website analytics (Google Analytics and Google Tag Manager).
- Cloudflare (Cloudflare, Inc.): protects our forms against spam (Turnstile).
Two other services provide content on our website. Your browser loads it directly from them:
- Clutch (Clutch, USA): our client rating. Clutch receives your IP address and sees which page of our website you are on.
- YouTube (Google): the videos on our blog page, only when you play one.
We may also share data with our professional advisers, such as accountants and lawyers, and with authorities when the law requires it.
4. Transfers outside the EU
Some of our service providers, such as HubSpot, Inc., Google and Cloudflare, are based in the USA or use staff and subprocessors there. These transfers are protected by the EU-U.S. Data Privacy Framework where the provider is certified, and by the European Commission’s Standard Contractual Clauses. You can ask us for a copy of these safeguards.
Clutch and YouTube receive data directly from your browser, under their own privacy policies.
5. How long we keep data
- Contacts who do not become clients (form enquiries, booked calls and emails): 24 months after our last contact.
- Website analytics about a contact’s visits: kept with the contact and deleted with it.
- Google Analytics data about your visits: 14 months. Reports with totals, which do not identify you, are kept longer.
- Backup copies of form submissions on our website server: 12 months.
- Coded IP addresses used to limit form spam: 24 hours.
- Client data: for the duration of our work together, then as long as Lithuanian accounting and tax law requires.
- Cookies and browser storage: see the list in section 7.
6. Your rights
You can ask us to:
- give you a copy of your data
- correct it
- delete it
- limit how we use it
- send it to you in a portable format
You can also object to processing based on our legitimate interest, and withdraw your consent at any time. Withdrawing consent does not affect what we did before.
To use these rights, write to hi@deeps.solutions. We reply within one month. If a request is complex, we can extend this by up to two more months, and we tell you why within the first month.
If you think we handle your data wrongly, you can complain to the State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija), L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania, ada@ada.lt, vdai.lrv.lt. You can also complain to the data protection authority in your own country.
7. Cookies
Cookies are small files a website stores in your browser. Some services also use similar browser storage. We use both only as described here.
On your first visit, a window asks for your choice. You can accept all cookies, decline them, or choose by category. If you decline, you can still use the whole website. Necessary cookies are always on. All other cookies are set only after you accept them, and the services that set them load only then.
You can change your choice at any time with the “Cookie settings” link at the bottom of every page. If you withdraw your consent, we remove the cookies of that category from your browser. You can also delete cookies in your browser settings.
Session cookies are deleted when you close your browser.
Necessary cookies
- deeps_consent (Deeps Solutions, 6 months): remembers your cookie choice.
- __cf_bm, __cfruid, __cfuvid (HubSpot’s network provider, 30 minutes or session): protect HubSpot’s services on our website against bots.
- __cf_bm (Clutch’s network provider, 30 minutes): protects the Clutch rating widget against bots.
- elementor (browser storage, Elementor): lets our website builder show menus and pop-ups correctly. The data stays in your browser.
- Cloudflare Turnstile (only when you fill in a form): may use browser storage to check that a person, not a bot, sends the form.
Analytics cookies, only with your consent
- __hstc (HubSpot, 6 months): recognises your browser and counts your visits.
- hubspotutk (HubSpot, 6 months): links your visits to your enquiry when you send a form.
- __hssc (HubSpot, 30 minutes): follows the current visit.
- __hssrc (HubSpot, session): detects a new browser session.
- _ga (Google Analytics, 13 months): recognises your browser and counts your visits.
- _ga_QD0DDG5620 (Google Analytics, 13 months): keeps track of the current visit.
- deeps_attr (Deeps Solutions, session): remembers the first page of your visit, the website you came from and campaign tags, so we can save them with your enquiry.
HubSpot may also keep analytics data in your browser’s storage, only if you accept analytics cookies.
Cookies from videos
If you play a video on our blog page, YouTube may set its own cookies. See Google’s privacy policy for details.
8. Changes to this policy
We update this policy when our use of data changes. The date at the top shows the latest version.