Legal

Privacy Policy

Last updated: 1 July 2026

Aplink(“we”, “us”, or “our”) is committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our website and services, how we use it, and your rights under the General Data Protection Regulation (GDPR) and applicable Lithuanian law.

1. Who We Are

Aplink is a digital marketing agency registered in the Republic of Lithuania, providing local SEO, paid advertising, and web development services to small and medium-sized businesses. We act as the data controller for personal data collected through our website and client engagements.

Contact us at: [email protected]

2. Data We Collect

We collect the following categories of personal data:

  • Contact information — name, email address, phone number, submitted via our consultation request form.
  • Business information — website URL, Facebook page URL, business description, and goals you provide in the form.
  • Usage data — IP address, browser type, pages visited, and time spent on our site, collected via analytics tools.
  • Communication data — emails, messages, and any information exchanged with our team.

We do not collect payment card details directly. All payment processing is handled by third-party processors.

3. How We Use Your Data

We process your personal data for the following purposes and legal bases:

PurposeLegal Basis
Responding to consultation requestsLegitimate interest / Pre-contractual steps
Providing and managing our servicesContract performance
Sending service updates and invoicesContract performance
Improving our website and servicesLegitimate interest
Complying with legal obligationsLegal obligation

4. Cookies

Our website uses essential cookies required for the site to function correctly. We do not use third-party tracking or advertising cookies.

You may disable cookies through your browser settings at any time, though this may affect certain site functionality.

5. Third-Party Services

We share data with the following categories of third parties only to the extent necessary to provide our services:

  • SendGrid (Twilio) — used to transmit consultation request emails. Data is processed in accordance with their privacy policy.
  • DigitalOcean — our website hosting provider. Infrastructure is operated in accordance with their data processing agreement.
  • Google — for Google Ads and Google Analytics services we operate on behalf of clients.
  • Meta — for Meta Ads services we operate on behalf of clients.

We do not sell your personal data to third parties.

6. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected:

  • Consultation request data is retained for up to 12 months unless a contract is formed.
  • Client data is retained for the duration of the contract plus 7 years to comply with Lithuanian tax and accounting obligations.
  • Analytics data is retained in anonymised form for up to 24 months.

7. Your Rights Under GDPR

As a data subject, you have the following rights:

  • Right of access — request a copy of the personal data we hold about you.
  • Right to rectification — request correction of inaccurate data.
  • Right to erasure — request deletion of your data where there is no overriding legal reason to retain it.
  • Right to restrict processing — request that we limit how we use your data.
  • Right to data portability — receive your data in a structured, machine-readable format.
  • Right to object — object to processing based on legitimate interest.
  • Right to withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, contact us at [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the State Data Protection Inspectorate of Lithuania (Valstybinė duomenų apsaugos inspekcija) at vdai.lrv.lt.

8. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, or destruction. All data transmitted via our website is encrypted using TLS.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the “Last updated” date at the top of this page. Continued use of our website after changes constitutes acceptance of the revised policy.

10. Contact

For any questions about this Privacy Policy or how we handle your data, please contact us at [email protected].