Privacy Policy

1. Who We Are

Oktomise (“we”, “us”, or “our”) operates the website oktomise.com and provides digital agency services including web development, app development, AI automation, digital marketing, and SEO. We are responsible for the personal data you share with us.

Contact: andrija@elez.rs

2. What Data We Collect

We collect data in the following ways:

• Contact form submissions: name, email address, phone number (optional), selected service, budget range, and project description.
• Analytics data: pages visited, time spent on site, device type, browser, approximate location (country/city), referral source. This data is collected only after you consent via our cookie banner.
• Cookies: session cookies for site functionality and analytics cookies (Google Analytics) only with your consent. See Section 7 for details.

We do not collect sensitive personal data (health, financial, racial, or political data).

3. How We Use Your Data

• To respond to your enquiry and provide the services you request.
• To send project updates or follow-up communications related to your enquiry.
• To analyse website performance and improve user experience (analytics, with consent only).
• To comply with legal obligations.

We do not sell, rent, or share your personal data with third parties for marketing purposes.

4. Legal Basis for Processing

We process your personal data under the following lawful bases (GDPR Article 6):

• Legitimate interest — responding to contact form submissions and maintaining business communications.
• Consent — analytics cookies and any marketing communications. You can withdraw consent at any time.
• Legal obligation — retaining records as required by law.

5. Data Sharing

Your data may be processed by the following third-party service providers, solely to deliver our services:

• Resend (resend.com) — email delivery for contact form submissions. Data processed in the EU/US under their privacy policy.
• Google Analytics — website analytics, only activated with your cookie consent. Google may process data in the US under Standard Contractual Clauses.
• Vercel — website hosting and infrastructure. Data processed under Vercel's data processing agreement.

All processors are bound by data processing agreements and must comply with applicable data protection laws.

6. Data Retention

We retain personal data only as long as necessary:

• Contact enquiries — up to 3 years, or until you request deletion.
• Analytics data — as configured in Google Analytics (default: 14 months).
• Email delivery records — up to 90 days via Resend.

7. Cookies

We use the following cookies:

You can withdraw your analytics consent at any time by clearing your browser cookies or using the cookie settings in your browser.

8. Your Rights

Under GDPR, you have the right to:

• Access — request a copy of the data we hold about you.
• Rectification — ask us to correct inaccurate data.
• Erasure — request deletion of your personal data.
• Restriction — ask us to limit how we use your data.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any right, contact us at andrija@elez.rs. We will respond within 30 days.

9. Security

We take appropriate technical and organisational measures to protect your data against unauthorised access, loss, or disclosure. Our site uses HTTPS/TLS encryption for all data in transit. Contact form data is transmitted securely and email delivery is handled by Resend, a SOC 2-compliant provider.

10. International Transfers

Some of our service providers (e.g. Google Analytics) may process data outside the European Economic Area. In such cases, data transfers are governed by Standard Contractual Clauses approved by the European Commission, or equivalent safeguards.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The “effective date” at the top of this page will reflect the most recent revision. We encourage you to review this policy periodically.

12. Contact

For any privacy-related questions, requests, or complaints, contact us at:

Oktomise
andrija@elez.rs

If you are unsatisfied with our response, you have the right to lodge a complaint with your local data protection authority.