Who we are

This website is run by Pumpkin Abroad Consulting, MB (company code 307132445) (“Pumpkin Abroad”, “we”, “us”). We are the data controller for the personal information described here.

Address: Perkūnkiemio g. 19, 12120 Vilnius, Lithuania
Email: info@pumpkinabroad.com
Phone / WhatsApp: +370 623 43108

What we collect and why

When	What we collect	Why and legal basis
You send an enquiry or book a consultation	Name, surname, email, phone, the service and destination you’re interested in, your preferred contact method, enrolment year and anything you write in the message	To answer you and prepare the help you asked for. Steps taken at your request before a contract (GDPR Art. 6(1)(b)).
You become a client	The details and documents needed for your application, visa or accommodation, which we ask you for directly	To deliver the service you signed up for (Art. 6(1)(b)) and meet legal obligations such as accounting (Art. 6(1)(c)).
You comment on an article	Name, email, website (optional), your comment, IP address and browser details	To publish and moderate comments and prevent spam. Our legitimate interest (Art. 6(1)(f)).
You visit any page	IP address, browser and device details, pages requested, in server and security logs	To keep the site secure and working. Our legitimate interest (Art. 6(1)(f)).

We do not use advertising or analytics tracking on this website, and we never sell your personal information.

Who we share it with

Hostinger hosts the website and its content delivery network, and processes server logs.
Google delivers the email we receive from our forms (Gmail), the website fonts (Google Fonts) and the map on our Contact page (Google Maps). When a page loads fonts or the map, your browser connects to Google, which receives your IP address.
Gravatar (Automattic) shows a profile picture next to comments, based on a coded version of the commenter’s email address.
Wordfence protects the site from attacks and checks visitor IP addresses against known threats.
Universities, employers, accommodation providers and authorities receive your information only when you are our client and only what is needed for the service you asked for, with your agreement.

Some of these providers may process data outside the European Economic Area, for example in the United States. Where that happens, transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.

How long we keep it

Enquiries that don’t lead to a service: up to 24 months after our last contact, then deleted.
Client files: for as long as needed to deliver the service, then 5 years after the service ends. Invoices and other accounting records are kept for as long as Lithuanian accounting and tax law requires.
Comments: for as long as the comment is published.
Server and security logs: a limited period set by our hosting and security providers.

Cookies

We only use cookies the site needs to work: for example to remember your name and email if you choose that when commenting, and security cookies set by Wordfence. We don’t use cookies for advertising or analytics. You can block or delete cookies in your browser settings.

Your rights

Under the EU General Data Protection Regulation (GDPR) you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct information that is wrong or incomplete;
delete your information, or limit how we use it;
send your information to you or another organisation in a common format;
stop using it where we rely on our legitimate interests.

To use any of these rights, email info@pumpkinabroad.com. We reply within one month. If you’re unhappy with how we handle your information, you can complain to Lithuania’s State Data Protection Inspectorate (vdai.lrv.lt).

Changes to this policy

We’ll update this page if the way we handle personal information changes, and change the “last updated” date at the top.

Privacy Policy