Privacy policy

This policy explains which personal data we process when you visit this website or contact us, why we process it and what rights you have. Kosovo Law No. 06/L-082 on Protection of Personal Data applies and, for visitors from Albania, Law No. 124/2024 On Personal Data Protection.

Controller

ElevateUrBox, Prishtina, Kosovo. The site is run by an individual under the name ElevateUrBox. For any question about your data, write to us at the address at the end of this page.

What data we process

Only what we need to keep the site running and to reply to you:

• Contact form: name, business, email, phone (optional), the service you choose and your message.
• WhatsApp: when you write to us, your number, profile name and messages are processed by WhatsApp (Meta) under its own terms, and by us to reply.
• Technical data created on every visit: IP address, time, page requested and browser type, in server logs.
• Anonymous visit statistics, without cookies and without profiling (Vercel Web Analytics).

Why we process it and on what basis

• To reply to your enquiry and send you an offer: your consent in the form and steps prior to a contract.
• To run and secure the site (server logs, spam protection): our legitimate interest.
• To understand which pages are read (anonymous statistics): our legitimate interest.

Who receives the data

We do not sell your data or share it for advertising. We use these processors:

• Vercel Inc. (USA): website hosting. The server functions that process the form run in Frankfurt, Germany; static pages are served from Vercel's global network. Vercel also provides the anonymous statistics.
• Resend, Inc. (USA): sending the email with your enquiry from the form to our mailbox.
• Cloudflare, Inc. (USA): forwarding the emails you send us to our mailbox (Cloudflare Email Routing).
• Google LLC (USA): the mailbox (Gmail) where we receive and keep email.
• Meta Platforms (WhatsApp): only when you choose to write to us on WhatsApp.

Transfers abroad

Some of these providers are in the USA. Transfers rely on standard contractual clauses or equivalent safeguards offered by these providers.

How long we keep it

We keep form enquiries and emails for up to 12 months after the last contact if no collaboration follows. Server logs are deleted automatically after the hosting provider's retention period.

Cookies

The site uses no advertising or tracking cookies. Statistics work without cookies. A technical cookie may store the language you choose.

Your rights

You may request access to your data, its correction, deletion or restriction, object to processing and withdraw your consent at any time. Write to us at the address below.

You may also lodge a complaint: in Kosovo with the Information and Privacy Agency (AIP), in Albania with the Commissioner for the Right to Information and Personal Data Protection (idp.al).

Changes

When the way we process data changes, we update this page and the date above.

Contact

For questions about your data, write to us at hello@elevateurbox.com.