Privacy Policy

Who we are

Balian Web Dev Co. is a web design and development business based in Limassol, Cyprus. In this policy, "we", "us", and "our" refer to Balian Web Dev Co., and "you" refers to anyone who visits this website or gets in touch with us.

We are the data controller responsible for the personal data described here. If you have any questions about this policy or how we handle your information, you can reach us at [email protected].

What this policy covers

This policy explains what personal data we collect when you use this website or contact us, why we collect it, how we use and protect it, and the rights you have over it. It applies to the balian.cy website and to enquiries you send us by the contact form, email, or WhatsApp.

Information we collect

Information you give us

When you fill in the contact form, message us on WhatsApp, or send us an email, we collect the details you choose to share. Through the contact form this is typically your name, email address, phone number (if you provide it), the type of project you are interested in, and the contents of your message.

Information we collect automatically

When you visit the site, we collect limited technical and usage information through analytics, such as the pages you view, how you arrived at the site, the approximate region you are visiting from, and general details about your device and browser. Google Consent Mode sends limited cookieless measurements before you choose and if you reject cookies. Analytics and advertising cookies are enabled only after you choose Allow Cookies. Cookieless requests still send data to Google for basic measurement and modeling; rejecting cookies does not erase information already sent. We do not send contact-form contents, names, email addresses, phone numbers, or URL fragments to Google Analytics. URL queries are removed except for the Google ad click ID (gclid), which is retained only after you choose Allow Cookies under our current cookie settings. This helps associate successful enquiries with our Google Ads campaign. An older analytics choice does not automatically allow ad attribution. Google Search Console separately provides aggregated search reports. Some of this information is collected using cookies and similar technologies, which are explained in our Cookie Policy.

How we use your information

We use the information we collect to:

• Respond to your enquiries and provide quotes and information you ask for.
• Communicate with you about a potential or ongoing project.
• Understand how the site is used so we can improve it.
• Keep the site secure and working as intended.

Our legal bases

Under the General Data Protection Regulation (GDPR), we rely on the following legal bases to process your personal data:

• Your consent where required for non-essential cookies and analytics. Our current analytics setting is on by default with an opt-out. Choose Reject Analytics in Cookie Settings to stop future collection and remove our analytics cookies.
• Taking steps at your request before entering into a contract when you contact us about a project and we respond.
• Our legitimate interests in running, securing, and improving our website and business, where these are not overridden by your rights.

Session recordings and heatmaps

After you choose Allow Cookies, Microsoft Clarity captures clicks, scrolls and pointer movements to help us understand usability. Contact-form content is masked. Reject Analytics stops recordings and removes Clarity cookies. We do not send enquiry contents or personal identifiers to Clarity. Microsoft may process usage data to provide Clarity and improve its products and services, including on servers outside Cyprus. Recordings are normally retained for 30 days; labeled or favorited recordings, heatmaps and aggregate data for up to 9 months. See the Microsoft Privacy Statement.

Analytics and third-party services

We use Google Analytics 4 to understand how visitors use the site, and Google Search Console to see how the site performs in Google Search. These services are provided by Google, which processes the data on our behalf. You can read how Google handles data in the Google Privacy Policy.

Booking a call

Calendly handles call bookings and the details you enter there. Our server reads confirmed booking details to send a preparation email and a reminder through Resend. These are service messages about the call you requested.

After you allow analytics and ad measurement, we attach a random reference to the booking link. This lets our server match a completed booking to your website visit and report a booking event to Google Analytics and Google Ads. We do not include your name, email address or booking answers in that event. The matching information expires after 72 hours. A delivery record containing hashes and timestamps is kept for up to 30 days to prevent duplicate messages.

Who we share your information with

We do not sell your personal data. After you allow analytics and ad measurement, Google Analytics shares click attribution and successful enquiry events with our Google Ads account. Enquiry contents and contact details are excluded. We do not enable personalized advertising or remarketing. We share it only with service providers who help us run our website and business and who process it on our instructions, such as our website hosting provider and Google for analytics. We may also disclose information if we are required to by law.

International transfers

Some of our service providers, including Google, may process data on servers located outside the European Economic Area. Where that happens, we rely on safeguards approved under GDPR, such as the European Commission's Standard Contractual Clauses, to make sure your data stays protected.

How long we keep your information

We keep enquiry details for as long as needed to respond to you and, where it leads to a project, for the duration of our working relationship and a reasonable period afterwards for our records and legal obligations. Analytics data is kept for the retention period set in Google Analytics. When we no longer need your information, we delete it or anonymise it.

Your rights

Under GDPR, you have the right to:

• Access the personal data we hold about you.
• Ask us to correct information that is inaccurate or incomplete.
• Ask us to delete your personal data.
• Object to or ask us to restrict how we use your data.
• Withdraw your consent at any time where we rely on it.
• Ask for a copy of your data in a portable format.

To exercise any of these rights, email us at [email protected]. If you believe we have not handled your data properly, you have the right to lodge a complaint with the Office of the Commissioner for Personal Data Protection in Cyprus (dataprotection.gov.cy).

How we protect your information

The site is served over a secure HTTPS connection, and we take reasonable technical and organisational measures to protect your personal data against loss, misuse, and unauthorised access. No method of transmission over the internet is completely secure, so we cannot guarantee absolute security.

Children

This website is intended for businesses and adults. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to this policy

We may update this policy from time to time as our website and services change. When we do, we will revise the "Last updated" date at the top of this page.

Contact us

If you have any questions about this Privacy Policy or your personal data, email us at [email protected].