Privacy Policy

Last updated: September 3, 2026

1. Controller

DriveBotix (company code [company code — to be confirmed]), Eduardo André g. 14-5, Vilnius LT-02232, Lithuania, is the controller of personal data processed through https://drivebotix.com.

For any privacy question or to exercise your rights, contact info@drivebotix.com or write to us at the address above.

2. What we collect and why

Purpose	Data	Legal basis	Retention
Answering enquiries and issuing documentation or quotations	Name, company, email, telephone, message content, model of interest	Legitimate interest in responding to a business enquiry; consent where you tick the enquiry box	Up to 24 months after the last contact
Processing and delivering orders	Name, company, billing and delivery address, VAT number, email, telephone, order contents, payment status	Performance of a contract	Order records kept for the statutory accounting period
Invoicing and tax records	Invoice and payment data	Legal obligation	As required by Lithuanian accounting and tax law
Customer account	Email, name, addresses, order history	Performance of a contract; consent when you create the account	Until you ask us to close the account
Website security and abuse prevention	IP address, technical logs, captcha verification result	Legitimate interest in keeping the site available and free from abuse	Short-term technical logs
Cookies and measurement	See the cookies policy	Consent, except for strictly necessary cookies	See the cookies policy

3. Providing your data

Order and enquiry data is provided voluntarily, but without it we cannot process an order or reply to you.

4. Recipients and processors

We share personal data only as needed to run the business:

Hosting and website infrastructure — to operate the site.
Delivery partners — DPD and Venipak receive the delivery address and contact details required to deliver the parcel.
Payment providers — payment is handled by the provider shown at checkout; we do not store card numbers.
Accounting and audit — invoice records as required by law.
Security services — the captcha provider protecting our forms.

Processors act on our instructions under written agreements. Where a recipient is outside the European Economic Area, transfers rely on an adequacy decision or on standard contractual clauses.

5. Your rights

Subject to the conditions in the GDPR, you may request access to your data, rectification, erasure, restriction of processing, portability, and you may object to processing based on legitimate interests. Where processing is based on consent, you may withdraw it at any time.

We respond to requests within one month. If you are not satisfied, you may complain to the State Data Protection Inspectorate of Lithuania (vdai.lrv.lt).

6. Security

We apply technical and organisational measures appropriate to the risk, including encrypted transport, access control and restricted administrative access.

7. Automated decision-making

We do not make decisions about you by purely automated means that produce legal effects.

8. Children

The website is intended for business and professional users and is not directed at children.

9. Changes

We may update this policy; the current version is always published on this page.

This document is a working draft prepared for the website rebuild. It must be reviewed and approved by qualified legal counsel before the site goes live.