Privacy & cookies

Updated 8 October 2026. Small Changes is operated by Robertas Rudys, the controller of enquiry data. Contact sales@robertasrudys.com about privacy or your request.

What we collect

Your email and requested change, optional downstream workflow, deadline, quoted cost and tool being considered, the offer shown, submission time and campaign tags. We count page loads and offer-button clicks, not unique visitors. The application accepts only utm_source, utm_medium and utm_campaign tags, not arbitrary query parameters. Never put personal details in campaign tags. Do not submit customer records, credentials, sensitive information or confidential business data.

Purpose and legal basis

We use enquiries to assess fit, reply and manage relevant follow-up. Our basis is legitimate interests in handling business enquiries and evaluating this product concept; where applicable, we take steps at your request before a contract. Basic campaign counts help assess the market test. Submitting does not create an account, purchase or marketing subscription. We do not sell your data, run advertising trackers or use this form for automated decisions. Only email and a description are required to handle your enquiry.

Providers and security

Sites hosting and Cloudflare infrastructure process and store requests. The private CRM requires owner sign-in. Resend sends an alert containing only a request reference and CRM link; prospect details are not included. Separate replies and invoices use email. Hosting and security providers may process IP addresses and request metadata.

We have not verified EU-only storage or every provider’s retention and international-transfer arrangements. Do not assume the service is confined to the EU. Provider information: Resend data processing and Cloudflare database location. Contact us for the current status of these arrangements.

Cookies

Necessary cookies support security and owner sign in. Cloudflare’s __cf_bm cookie helps detect automated traffic and expires after 30 minutes of inactivity. Owner sign in uses authentication cookies. We do not add advertising or visitor analytics cookies; our page and button counts do not use an analytics cookie. Blocking necessary cookies in your browser may affect security checks or owner sign in. See Cloudflare’s cookie information.

Retention and deletion

Our policy is to review enquiries at 90 days and delete those no longer needed. This is a manual review, not an automatic deletion deadline. Archiving does not delete a record. The owner can permanently delete an enquiry from the active CRM; separate exports, emails and provider backups require separate handling and may persist under provider retention rules. Records required for a paid engagement or legal obligations may be retained separately.

Your rights

Email us to request access, correction, deletion, restriction or, where applicable, a portable copy, or to object to processing based on legitimate interests. We may need to verify your identity. You can complain to your local data protection authority; in Lithuania this is the State Data Protection Inspectorate (VDAI). This notice describes the current market-test site; it is not a claim of independent certification.