Levamen is operated by a single-person business registered and operating lawfully in Lithuania. For the purposes of GDPR, this business is the data controller for the personal data described in this policy. You can reach us at hello@levamen.me for any request relating to your data — legal entity details are set out in our Terms.
Levamen is built to need as little about you as possible. When you send a booking request, the form transmits:
Once a session is confirmed, we also keep the single-use link generated for it until the session has taken place.
If you contact us by email, the correspondence exists in our inbox. You may use a separate contact address, but that does not eliminate technical, contact, or payment records.
When you visit the site, our hosting provider necessarily processes technical data such as your IP address and browser type in order to deliver the pages and protect them from abuse. We do not use cookies, and we don't use this data to identify or profile you.
We process your data on the following bases: performance of a contract, to arrange and hold the session you've booked (Art. 6(1)(b) GDPR); legitimate interest, in delivering the website and keeping the service secure and discreet (Art. 6(1)(f) GDPR); and consent, wherever you choose to share optional details in the note field — which you can withdraw at any time by writing to us (Art. 6(1)(a) and, where the note touches on health, Art. 9(2)(a) GDPR).
Payment is handled by a third-party processor, which processes transaction data under its own terms. Levamen receives the information needed to confirm payment, issue invoices, and handle refunds. We do not store card details or include session content in payment records.
Your bank statement will typically show a neutral billing descriptor rather than a description of the service itself. The exact wording is set by our payment processor's settings, not chosen per transaction — write to us beforehand if you'd like to confirm what it currently shows.
We agree the text or voice communication channel before payment and explain the provider, any account or installation requirement, and relevant privacy and retention settings. We do not record sessions or create transcripts. Written messages exist in the chosen channel while the conversation takes place; their deletion and retention depend on the agreed channel and its settings. We do not create a written case file about what you share.
Booking requests are deleted from our form service and scheduling records within 30 days after the session concludes, or within 30 days of the request if no session is arranged. Payment records are kept by our payment processor, and invoices by us, only for as long as tax and accounting law requires. Emails are retained only as long as a normal inbox retains them, and you're welcome to ask us to delete a specific thread at any time.
We rely on a small number of providers, each of which receives only what it needs to do its job — never the content of a session:
We do not sell or share information with advertisers, data brokers, or anyone else.
Some of these providers are based in, or use infrastructure in, the United States. Where personal data leaves the European Economic Area, the transfer relies on the safeguards the provider offers under GDPR, such as certification under the EU–US Data Privacy Framework or the European Commission's Standard Contractual Clauses. You can ask us for details of the safeguard that applies.
You have the right to access the data we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent at any time. Because so little is stored, there is usually very little to request — but write to us and we'll respond directly, within one month. You also have the right to lodge a complaint with a data protection supervisory authority. In Lithuania, this is the State Data Protection Inspectorate (VDAI) — ada@ada.lt, vdai.lrv.lt.
Questions about this policy can go to hello@levamen.me.