Wood Architects LogoWood Architects Logo
Back to Home
Legal Information

Privacy Policy

Last updated: 6 March 2026

1. Data Controller

Wood Architects MB (hereinafter “Wood Architects”, “we”, “us”, or “our”) is the data controller responsible for your personal data.

2. Personal Data We Collect

We may collect the following categories of personal data depending on how you interact with our website and services:

Identity & Contact Data

  • Full name, email address, telephone number
  • Company name, job title, website URL
  • Country and business address

Business Data

When you submit our B2B distributor questionnaire, we collect information about your business, including business type, years of operation, annual revenue range, number of employees, distribution channels, market segments, and product interest.

Technical & Usage Data

  • IP address, browser type and version, operating system
  • Pages visited, time and date of visit, time spent on pages
  • Referring website, click behaviour, and navigation paths
  • Device identifiers and screen resolution

3. Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data on the following legal grounds:

  • Consent — When you submit a contact form, distributor application, or accept analytics cookies.
  • Contractual necessity — When processing is required to fulfil a distributor agreement, quotation request, or product order.
  • Legitimate interest — For website analytics, fraud prevention, and improving our services, provided these interests do not override your fundamental rights.
  • Legal obligation — Where we are required to retain data for tax, accounting, or regulatory compliance.

4. How We Use Your Data

We use the personal data we collect to:

  • Respond to your enquiries and provide customer support
  • Process distributor applications and exclusive territory requests
  • Send quotations, order confirmations, and delivery updates
  • Analyse website traffic and improve user experience
  • Send marketing communications (only with your explicit consent)
  • Comply with legal and regulatory obligations

5. Third-Party Service Providers

We share personal data only with trusted third-party providers who assist us in operating our website and business. Each provider processes data on our behalf under appropriate data processing agreements:

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

6. Cookies

Our website uses cookies — small text files stored on your device — to enhance your browsing experience. We use the following categories of cookies:

  • Essential cookies — Required for the website to function (e.g., session management, cookie consent preferences). Cannot be disabled.
  • Analytics cookies — Google Analytics cookies that help us understand how visitors use our site. These are placed only with your consent.

You can manage your cookie preferences at any time through our cookie consent banner or your browser settings. Disabling analytics cookies will not affect your ability to use the website.

7. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact and enquiry data: Up to 24 months after the last interaction
  • Distributor application data: For the duration of the business relationship, plus 5 years for legal compliance
  • Analytics data: Up to 26 months (Google Analytics default retention)
  • Transaction and invoice data: 10 years as required by Lithuanian tax law

8. Your Rights Under the GDPR

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

  • Right of access — Request a copy of the personal data we hold about you.
  • Right to rectification — Request correction of inaccurate or incomplete data.
  • Right to erasure — Request deletion of your personal data (“right to be forgotten”).
  • Right to restriction — Request that we limit how we process your data.
  • Right to data portability — Receive your data in a structured, machine-readable format.
  • Right to object — Object to processing based on legitimate interest or direct marketing.
  • Right to withdraw consent — Withdraw consent at any time where processing is based on consent.

To exercise any of these rights, please contact us at info@woodarchitects.eu. We will respond to your request within 30 days.

9. International Data Transfers

Your personal data is primarily processed within the European Economic Area (EEA). Where data is transferred to service providers outside the EEA (e.g., Vercel, Resend), we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses or the service provider's participation in an approved data transfer framework.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include HTTPS encryption, secure hosting infrastructure, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. Children's Privacy

Our website and services are intended for business professionals and are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a child has provided us with personal data, please contact us and we will promptly delete such information.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. The updated policy will be posted on this page with a revised “Last updated” date. We encourage you to review this page periodically. Material changes will be communicated via email or a prominent notice on our website.

13. Contact & Complaints

If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:

You also have the right to lodge a complaint with the Lithuanian State Data Protection Inspectorate (Valstybinė duomenų apsaugos inspekcija — VDAI) at vdai.lrv.lt or with your local supervisory authority if you are located in another EU/EEA member state.