Introduction

This Privacy Policy describes how Paulius Glavickas, trading as Right Hook ("Right Hook", "we", "us", "our"), Individual Activity Certificate No. 841455, Republic of Lithuania, collects, uses, stores, and protects personal data in connection with the website righthook.ad (the "Site") and the advertising creative services we provide.

We are committed to protecting your privacy and processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the law of the Republic of Lithuania on the legal protection of personal data.

This policy applies to personal data collected through the Site, including contact forms and the client onboarding quiz. It does not apply to information collected through channels other than the Site (e.g. direct email correspondence or contractual engagements), which are governed separately.

If you have any questions, contact us at admin@righthook.ad.

Data Controller

The data controller responsible for your personal data is:

Paulius Glavickas
Individual Activity Certificate No. 841455
Republic of Lithuania
admin@righthook.ad

What Data We Collect and Why

We only collect personal data that is necessary for the purposes described below.

Contact and enquiry data

When you contact us through the Site (e.g. via a contact form or email link), we may collect your name, email address, company name, and the content of your message. We use this information to respond to your enquiry and, if relevant, to discuss the provision of our services.

Legal basis: Legitimate interests (responding to business enquiries); pre-contractual steps at your request.

Onboarding quiz data

If you complete our client onboarding quiz, we collect information such as your name, email address, company name, industry, monthly advertising budget, advertising platforms used, current challenges, and any other details you voluntarily provide. This information is used to assess your needs and prepare a relevant service proposal.

Legal basis: Pre-contractual steps at your request; legitimate interests in evaluating potential client engagements.

Technical data collected automatically

Like all websites, our hosting infrastructure may automatically collect standard server log data when you visit the Site. This may include your IP address, browser type, operating system, referring URL, pages visited, and date and time of access. This data is collected and processed by our hosting provider and is not used by us to identify individual visitors.

Legal basis: Legitimate interests in maintaining the security and proper functioning of the Site.

Payment and invoicing data

When you engage our services, we collect the information necessary to issue invoices and process payments. This includes your name, company name, billing email address, and — where payments are made via bank transfer — the transaction reference visible on our end. Where payments are made via PayPal, we receive confirmation of payment and basic account identification from PayPal but do not store your PayPal credentials or payment card details. We retain payment and invoicing records as required by Lithuanian accounting and tax legislation, which may require retention for up to 10 years.

Legal basis: Contract performance; legal obligation (financial record-keeping).

Cookies

The Site may use cookies — small text files placed on your device — to ensure basic functionality and improve user experience. We do not use cookies to track you across third-party websites or to serve targeted advertising. You may disable cookies through your browser settings at any time; doing so may affect the functionality of certain parts of the Site.

Legal basis: Consent (where required by applicable law); legitimate interests in site functionality.

How We Use Your Data

We use the personal data we collect solely for the following purposes:

We will never sell, rent, or otherwise distribute your personal data to third parties for their own marketing purposes.

How We Store Your Data

Data submitted through the Site's onboarding quiz and contact forms is transmitted to and stored in Notion, a third-party productivity and database platform provided by Notion Labs, Inc. (USA), which we use as our client relationship management system. Notion is subject to its own privacy policy and GDPR data processing commitments.

Email communications sent to or from admin@righthook.ad are processed and stored via our email service provider. Email data is retained for as long as it is relevant to an ongoing or potential business relationship, and then deleted or anonymised.

We retain personal data only for as long as necessary for the purpose for which it was collected, or as required by applicable law (including Lithuanian accounting and tax regulations, which may require retention of certain records for up to 10 years).

International transfers: Notion Labs, Inc. is based in the United States. By submitting data through our Site, you acknowledge that your data may be transferred to and processed in the US. Notion maintains GDPR-compliant data processing agreements and appropriate safeguards for such transfers. For more information, see Notion's Privacy Policy.

Third-Party Data Processors

We use a limited number of third-party services that may process personal data on our behalf. We have selected these providers carefully and rely only on those that offer adequate data protection guarantees.

We do not use third-party advertising networks, marketing automation platforms, or analytics tools that track individual users across websites.

Your GDPR Rights

As a data subject under the GDPR, you have the following rights in relation to your personal data. To exercise any of these rights, contact us at admin@righthook.ad. We will respond within one month of receiving your request.

Right of access You may request a copy of the personal data we hold about you.
Right to rectification You may ask us to correct inaccurate or incomplete personal data.
Right to erasure You may ask us to delete your personal data, subject to any legal retention obligations we have.
Right to restrict processing You may ask us to limit how we use your data in certain circumstances.
Right to data portability You may request your data in a structured, machine-readable format.
Right to object You may object to processing based on legitimate interests or for direct marketing.

Please note that exercising certain rights may limit our ability to provide services to you. We reserve the right to verify your identity before responding to any data subject request.

If you believe we have handled your data unlawfully, you have the right to lodge a complaint with the Lithuanian supervisory authority:

State Data Protection Inspectorate (VDAI)
L. Sapiegos g. 17, LT-10312 Vilnius, Lithuania
vdai.lrv.lt

Children

The Site and our services are directed exclusively at businesses and business representatives. We do not knowingly collect personal data from individuals under the age of 18. If you believe that a minor has submitted data through our Site, please contact us immediately at admin@righthook.ad and we will delete the relevant data promptly.

Third-Party Links

The Site may contain links to external websites or platforms (such as social media profiles or advertising platform pages). We are not responsible for the privacy practices or content of those external sites. We encourage you to review their respective privacy policies before providing any personal data.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal obligations, or the services we offer. When we do, we will update the "Last updated" date at the top of this page. We encourage you to review this page periodically. Continued use of the Site following any changes constitutes acceptance of the updated policy.


Contact

For any questions, requests, or concerns regarding this Privacy Policy or how we handle your data:

Paulius Glavickas
Individual Activity Certificate No. 841455
admin@righthook.ad
righthook.ad