Privacy Policy

This Privacy Policy explains how Web Kosovo L.L.C (“KosovoWeb”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you use kosovoweb.com (the “Website”), contact us, or interact with our services.

Controller: Web Kosovo L.L.C, 57 Bashkim Krasniqi, 14000 Lipjan, Kosovo. Email: info@kosovoweb.com. Phone: +383 48 477 066.

For privacy-related requests, contact info@kosovoweb.com.

This policy applies to personal data processed through this Website, the contact enquiry form, related business communications, and (when separately activated and documented) scheduling, analytics, or other tools listed below.

It does not automatically apply to third-party websites or services linked from the Website. Review those notices separately.

A newsletter is not offered. Advertising tags, Google Tag Manager, Hotjar, and payment processors are not used on this Website at present.

3.1 Information you provide directly

• First name and last name
• Email address
• Company or organisation (optional)
• Service interest
• Approximate budget range
• Expected timeline
• Preferred contact method (optional)
• Project message
• Locale of the page you used (English or Albanian)

The enquiry form includes a hidden honeypot field and an hCaptcha check. Those values are used only to reject automated abuse. The honeypot must be empty. The captcha token is checked and is not stored with the enquiry.

3.2 Information collected automatically

The hosting platform (Vercel) may generate ordinary request logs (for example IP address, user agent, and URL). Optional analytics (Google Analytics 4) is a planned, consent-gated candidate and is not loaded by the current Website.

3.3 Communications data

If you email or call us, we may keep the correspondence needed to respond. When you submit the enquiry form, hCaptcha checks for automated abuse and Resend emails the enquiry to our monitored team inbox. This website does not write a CRM record. EspoCRM is deferred. Exact processor regions remain for counsel review.

3.4 Data we do not seek to collect

Please do not send sensitive personal data (for example health, biometric, national ID, bank or other special-category data) unless we specifically request it in a clearly defined context.

• The Website contact form
• Emails or messages you send to our published addresses
• Phone or WhatsApp if you contact those published numbers
• Cookie/local storage choices in the consent banner
• hCaptcha on the enquiry form
• Scheduling links, analytics, or a CRM only if those tools are later activated and this policy is updated

5.1 Enquiries and pre-contract steps

To receive, review, and respond to Website enquiries, prepare proposals, and arrange a conversation if useful.

5.2 Operating and securing the Website

Hosting, abuse detection (rate limits, honeypot, captcha), troubleshooting, and security logging.

5.3 Analytics (not currently loaded)

GA4 is the only initial analytics candidate. It will load only after you allow the Analytics category. It is not loaded today.

5.4 Marketing tags

Advertising and remarketing tags are not active. The Marketing category in cookie settings stores a choice only; it does not load a tag.

5.5 Legal and compliance

Recordkeeping, responding to lawful requests, and protecting our legal rights.

Depending on context and applicable law, we may rely on: pre-contractual steps or contract necessity (responding to your enquiry); legitimate interests (operating and securing the Website); consent (optional analytics cookies, if activated); and legal obligation where recordkeeping duties apply.

If we rely on consent, you may withdraw it through Cookie Settings. Withdrawal does not affect processing already completed.

This GDPR-style wording is for transparency. KosovoWeb is established in the Republic of Kosovo. Whether a particular law applies to a visitor depends on facts counsel must review. This page does not claim that any specific statute currently binds every processing activity.

We use cookies and similar technologies as described in the Cookie Policy. Strictly necessary storage includes remembering your consent choice. Optional analytics storage is not written by a third-party tag today.

We share personal data only as needed for the purposes above. The list below matches the processors actually used on this Website today, plus tools that remain deferred.

What we use today

• Visitor browser localStorage for cookie consent (category choices, version 1.0, timestamp)
• The Website application (Next.js) for validation, process-local rate limiting, and redacted outcome logs
• Hosting: Vercel, which serves kosovoweb.com
• Bot protection: hCaptcha on the enquiry form
• Email delivery: Resend sends an operator notice to our monitored team inbox (Zoho Mail is the owner-identified mailbox; Resend delivers the message; this website does not write a CRM record)
• DNS: Cloudflare is used as DNS-only for the domain, not as an orange-cloud traffic proxy or WAF on this site

Planned tools, not yet connected

• EspoCRM or any other CRM as a live store (deferred)
• Optional scheduling link: Calendly (link only if configured; no widget script)
• Analytics: Google Analytics 4 is a later candidate and is not loaded
• Payment processors (Stripe and similar are deferred)
• Cloudflare as a traffic proxy or WAF — not active on this site

Not used for this launch

• Google Tag Manager, Meta Pixel, LinkedIn Insight Tag, Hotjar, advertising tags
• A newsletter is not offered

Vercel, Resend, and hCaptcha may process data outside Kosovo, including in the EU or other regions, depending on their configuration. Exact processor regions and transfer safeguards remain open and must be confirmed by counsel. This page does not claim that a particular transfer law currently applies.

• Enquiry / lead records: working policy of 24 months, unless a longer period is required to establish, exercise, or defend legal claims or to meet a legal duty
• Client / project records: not yet confirmed
• Analytics data: not applicable until GA4 is activated; retention would follow the GA4 setting then documented
• Security and application logs: kept according to operational need; current logs are redacted outcome events, not full form messages

Depending on applicable law and your location, you may have rights to request access, correction, deletion, restriction, objection, withdrawal of consent, and portability.

To exercise a request, email info@kosovoweb.com. We may need to verify your identity. There is no self-service portal in this Website.

Please contact us first so we can try to resolve the issue. You may also have the right to lodge a complaint with a competent authority. For Kosovo-related matters this may include the Information and Privacy Agency (AIP) of the Republic of Kosovo. Complaint-authority wording will be finalised after legal review.

We use reasonable technical and organisational measures, including access control on processors, process-local rate limiting, captcha/honeypot abuse controls, and redacted application logs. No method of transmission or storage is completely secure. Durable rate limiting across hosting instances is not yet in place.

The Website may contain links to third-party sites or services. We are not responsible for their privacy practices.

The Website is intended for business and professional audiences. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us.

We may update this policy to reflect operational, legal, or technical changes. The updated version will be posted here with a revised “Last updated” date. If cookie purposes or vendors change materially, the consent version in Cookie Settings will be increased so visitors are asked again.

Web Kosovo L.L.C (KosovoWeb), 57 Bashkim Krasniqi, 14000 Lipjan, Kosovo. Email: info@kosovoweb.com. Phone: +383 48 477 066.