Privacy Policy

This Privacy Policy explains how Web Kosovo L.L.C (“KosovoWeb”, “we”, “us”, “our”) collects, uses, stores, and protects personal data when you use kosovoweb.com (the “Website”), contact us, or interact with our services.

Controller: Web Kosovo L.L.C, 57 Bashkim Krasniqi, 14000 Lipjan, Kosovo. Email: info@kosovoweb.com. Phone: +383 48 477 066.

For privacy-related requests, contact info@kosovoweb.com.

This policy covers your visits to our Website, the enquiry forms on the Contact and Work pages, and our correspondence with you by email, phone or WhatsApp. You can choose whether to allow website analytics.

Third-party websites and services opened through links on this Website have their own privacy notices. This policy describes KosovoWeb's processing, not those providers' separate processing; review their notices before using their services.

A newsletter is not offered. Advertising tags, Google Tag Manager, Hotjar, and payment processors are not used on this Website at present.

3.1 Information you provide directly

• First name and last name
• Email address
• Phone number (optional)
• Company or organisation (optional)
• Service interest
• Approximate budget range (optional)
• Expected timeline (optional)
• Preferred contact method (optional)
• Project message
• Locale of the page you used (English or Albanian)

To send the form, enter your first and last name, email, service interest and message. You can also contact us by email or phone. When the form loads, your browser connects to hCaptcha for an anti-spam check. Our server verifies the resulting token with hCaptcha. The token and the hidden anti-spam field are excluded from the enquiry email.

3.2 Information collected automatically

The hosting platform (Vercel) may generate ordinary request logs (for example IP address, user agent, and URL). When configured, optional Google Analytics 4 loads only after Analytics consent. It measures page visits, device/browser information and selected actions. The site sends only known page paths, referral origins and predefined event fields; enquiry contents, contact details, query strings and fragments are excluded. Google receives network information when its service is used.

3.3 Communications data

If you email or call us, we may keep the correspondence needed to respond. hCaptcha checks enquiry submissions for automated abuse. Resend delivers your enquiry to our monitored team mailbox, which uses Zoho Mail.

Our domain's DNS configuration requests email-authentication reports (DMARC) with Brevo (formerly Sendinblue) as the reporting destination. This is separate from optional Website Analytics and does not subscribe Website enquirers to marketing communications.

Opening the WhatsApp panel on our site does not open a chat. Following the WhatsApp link opens the external service. If you send us a message there, we receive the message and the contact details visible to us in WhatsApp. The website does not send your enquiry form to WhatsApp.

3.4 Data we do not seek to collect

Please do not send sensitive personal data (for example health, biometric, national ID, bank or other special-category data) unless we specifically request it in a clearly defined context.

• The Website contact form
• Emails or messages you send to our published addresses
• Phone or WhatsApp if you contact those published numbers
• Cookie/local storage choices in the consent banner
• hCaptcha on the enquiry form
• Google Analytics 4 only after you allow Analytics
• If a scheduling link is available, it opens an external booking page. The website does not load an embedded calendar

5.1 Enquiries and pre-contract steps

To receive, review, and respond to Website enquiries, prepare proposals, and arrange a conversation if useful.

5.2 Operating and securing the Website

Hosting, abuse detection (rate limits, honeypot, captcha), troubleshooting, and security logging.

5.3 Optional analytics

The public website offers optional Google Analytics 4 (GA4). If you allow Analytics, the website measures page visits, clicks on links to its Contact page and successful enquiry acceptance responses. Acceptance counts can include retries and are not unique enquiry totals. An acceptance is counted as a new lead only when the delivery pipeline explicitly identifies it as new. Rejected, known duplicate and test submissions are excluded. Advertising features are disabled.

5.4 Marketing tags

Advertising and remarketing tags are not active. Marketing is unavailable in Cookie Settings; advertising consent remains denied.

5.5 Legal and compliance

Recordkeeping, responding to lawful requests, and protecting our legal rights.

Depending on context and applicable law, we may rely on: pre-contractual steps or contract necessity (responding to your enquiry); legitimate interests (operating and securing the Website); consent (optional analytics cookies, if activated); and legal obligation where recordkeeping duties apply.

If we rely on consent, you may withdraw it through Cookie Settings. Withdrawal does not affect processing already completed.

Kosovo's Law No. 06/L-082 on Protection of Personal Data provides the local legal framework for processing personal data. Other mandatory rules may apply according to the circumstances.

We use cookies and similar technologies as described in the Cookie Policy. Necessary storage remembers your consent choice. Optional analytics cookies may be set only after Analytics consent when GA4 is configured.

We use service providers to host the website, protect the enquiry form and deliver enquiries to our team. Optional Analytics is used only when configured and with your consent.

What we use today

• Your browser stores your cookie-consent choices and their timestamp
• Optional measurement: Google Analytics 4, only when configured and with Analytics consent; no advertising tracking
• Website processing for form validation, abuse prevention and redacted outcome logs
• Hosting: Vercel, which serves kosovoweb.com
• Bot protection: hCaptcha on the enquiry form
• Email delivery: Resend delivers your enquiry to our monitored team inbox in Zoho Mail
• Domain name resolution: Cloudflare DNS

Depending on the service you use, data may be processed outside Kosovo by Vercel for hosting, hCaptcha for form protection, Resend and Zoho Mail for enquiry email, and Google if you allow Analytics. Cloudflare handles DNS queries. Our domain designates Brevo as the destination for email-authentication reports. WhatsApp processes data under its own terms when you choose to use it.

Resend stores enquiry email content and delivery logs in the United States, even when the email is sent through a European region. See Resend’s information on storage and retention.

We have not verified every processing country or the safeguards for each transfer. For information about where a particular service processes your data and how to obtain a copy of any applicable safeguards, write to info@kosovoweb.com.

When our mailbox retention tool is connected, it runs on Vercel. It reads folder names and checks message identifiers, conversation membership and dates in Zoho Mail. Zoho’s message listings can also include senders, subjects and previews. The tool uses the checks to identify expired non-client enquiries. Its activity logs contain counts and outcomes only.

• For enquiries that do not lead to a client relationship, our retention policy sets a limit of 24 months from our last substantive contact. It calls for deletion or anonymisation at that point unless a legal obligation or substantiated legal claim requires us to keep particular records longer.
• Contracts, invoices, payment records and other required accounting documents: for the periods required by applicable tax and accounting law, and longer only where necessary to meet a legal obligation or establish, exercise or defend legal claims. Other personal data in project files is kept only while needed for the agreed work and applicable legal obligations
• Analytics data: GA4's event-data retention setting is 2 months, and its user-data retention setting is 14 months. The user identifier's retention period resets with new activity. These settings do not set an expiry for standard aggregated reports. Cookie lifetime is separate: this site sets its first-party GA cookies for up to one year without refreshing their expiry
• Security and application logs are kept as needed to investigate faults and abuse. The application records submission outcomes and request references. Hosting logs may separately include network and request details.

If an expired enquiry email is moved to Trash, it may still be recoverable. Zoho Mail’s cleanup and recovery periods, and any applicable archive or legal hold, determine when the mailbox copy is permanently removed. Resend’s delivery records, exported messages, WhatsApp correspondence and backups have separate retention controls. See Zoho Mail’s deletion and retention policy.

You may request deletion at info@kosovoweb.com. If we must retain particular records, we will explain the reason and applicable retention period. A deletion request does not override a legal record-keeping obligation.

Under Kosovo's data-protection law, you can request access, correction, deletion or restriction of your personal data and object to processing where the legal conditions apply. Portability is available where applicable. You can withdraw optional Analytics consent through Cookie Settings.

Send requests to info@kosovoweb.com. We may ask for information necessary to verify your identity before providing personal data or acting on a request.

You can contact us about privacy concerns or complain directly to Kosovo's Information and Privacy Agency (AIP). Contacting us first is not a condition for making a complaint.

To limit repeated form submissions, each server instance counts attempts using the IP address supplied by our hosting service when available. Each instance keeps its own temporary counter. We also check a hidden anti-spam field and verify hCaptcha responses. Our application logs record the outcome of a submission without the message, email address or captcha token.

The Website may contain links to third-party sites or services. We are not responsible for their privacy practices.

The Website serves businesses and individuals seeking our services. We do not knowingly collect personal data from children. If you believe a child has provided personal data, contact us.

We may update this policy to reflect operational, legal, or technical changes. The updated version will be posted here with a revised “Last updated” date. If cookie purposes or vendors change materially, the consent version in Cookie Settings will be increased so visitors are asked again.

Web Kosovo L.L.C (KosovoWeb), 57 Bashkim Krasniqi, 14000 Lipjan, Kosovo. Email: info@kosovoweb.com. Phone: +383 48 477 066.