Privacy Policy

01Who we are

Altus Digital is a software and web development agency based in Zagreb, Croatia. For the purposes of the GDPR we are the data controller for personal data collected through this website.

You can reach us at info@altusdigital.co or on +385 97 638 7944.

02What we collect

We collect only what you send us. This site has no user accounts, no newsletter and no profiling.

• Contact form - your name and email address and your message, plus company, service and budget range if you choose to provide them.
• Technical data - our hosting provider records standard server logs, including IP address, browser type and the pages requested, for security and reliability.
• Anti-spam - when you submit the contact form, Cloudflare Turnstile verifies that the request comes from a person rather than an automated script.
• Usage data - the page visited, the referring website, your country, and your device, operating system and browser type. This is aggregated and never linked to your enquiry.

03Why we process it, and on what legal basis

• To answer your enquiry and take steps at your request before entering into a contract - Article 6(1)(b) GDPR.
• To keep the site secure and prevent abuse of the contact form, including short-term rate limiting by IP address - our legitimate interest, Article 6(1)(f) GDPR.
• To understand which pages and referrers bring visitors to the site, using cookieless measurement that cannot identify you - our legitimate interest, Article 6(1)(f) GDPR.

04Cookies and tracking

This website sets no cookies for analytics, advertising or profiling, and there is no cookie banner because there is nothing to consent to.

The site sets one strictly necessary cookie, NEXT_LOCALE, which remembers whether you are reading the English or Croatian version. It expires when you close your browser, holds nothing but a language code, and is not used for measurement.

We measure traffic with Vercel Web Analytics and page performance with Vercel Speed Insights. Both are cookieless: they store nothing in your browser and do not record your IP address. Visits are counted using a short-lived hash derived in part from your IP address and browser, with a salt that is rotated daily and then discarded, so you cannot be identified or followed from one day to the next or across other websites.

Cloudflare Turnstile may store a short-lived technical value in your browser while it verifies a contact form submission. It is strictly necessary for that check and is not used to track you across websites.

05Who we share it with

We do not sell personal data and we do not share it for advertising. We rely on a small number of processors to operate the site:

• Vercel Inc. - hosting and delivery of this website, and cookieless traffic and performance measurement.
• Cloudflare, Inc. - bot protection on the contact form (Turnstile).
• Resend - delivery of the enquiry email to us and of the confirmation email to you.

Each of them processes the data on our instructions under a data processing agreement.

06International transfers

Some of these providers are established in the United States. Where personal data is transferred outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an equivalent safeguard.

07How long we keep it

Enquiry emails are kept for as long as we need them to deal with your enquiry and, where it leads to work, for the duration of the business relationship and any statutory retention period that follows.

Rate-limiting data is held in memory for a few minutes and is never written to a database. Server logs are retained by our hosting provider for a limited period.

08Your rights

Under the GDPR you have the right to:

• access the personal data we hold about you
• have inaccurate data corrected
• have your data erased
• restrict or object to our processing
• receive the data you gave us in a portable format

To exercise any of these, email info@altusdigital.co. We will respond within one month.

09Security

The site is served over HTTPS. Contact form submissions are validated on the server, rate limited, and pass a bot check before any email is sent. Access to the mailbox that receives enquiries is limited to Altus Digital.

10Changes to this policy

We may update this policy as the site or the tools behind it change. The date at the top of this page shows when it was last revised.

11Contact and complaints

Questions about this policy or about your data: info@altusdigital.co, or Altus Digital, Zagreb, Croatia.

If you are not satisfied with our response, you may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb - azop.hr.