Last updated: 25 October 2026

Privacy policy

This policy explains the handling of personal data when you visit alexwebdev.com or contact its operator.

1. Website operator and contact

AlexWebDev is operated by an individual based in Poland. For questions about this policy or your personal data, contact contact@alexwebdev.com.

2. Contact enquiries and email

When you use the free contact form or send an email, we receive the details you provide, including your name, email address, optional company or website, project type and message. Please do not send sensitive personal data or information about other people unless necessary.

We use these details to answer your enquiry and discuss a possible project. Processing necessary to take steps at your request before entering into a contract is based on Article 6(1)(b) GDPR. Other correspondence is handled on the basis of our legitimate interest in responding to messages (Article 6(1)(f)). Providing the details is voluntary, but a reply requires a working email address and enough information to address your enquiry.

3. Hosting and website security

Cloudflare provides website hosting and forwards contact-form messages to our Google Workspace inbox. Handling website requests may involve technical data such as IP addresses, request details, browser information and timestamps. These data are used to deliver the website, prevent abuse and investigate technical problems, on the basis of our legitimate interest in operating and protecting the website (Article 6(1)(f) GDPR).

4. Providers and international processing

The providers involved are Cloudflare for hosting, security and contact-form email forwarding, and Google for Google Workspace email and Google Analytics 4 (GA4). Data relevant to each service may be processed by that provider and its service partners.

These services may involve processing outside the European Economic Area. The applicable transfer mechanism depends on the provider, receiving entity and service arrangements, including an applicable adequacy decision or standard contractual clauses where required. Contact us to request information about the safeguards applicable to your data.

5. Retention

Enquiries that do not lead to a project are kept for up to six months after the last contact. If an enquiry becomes a project, separate retention rules apply to client records. Relevant correspondence is kept longer only where necessary for a legal obligation or a specific dispute.

Technical and security data are retained only for the period needed for their operational or security purpose, subject to the provider’s applicable settings and retention arrangements. GA4 is configured to retain event-level data for 2 months and user data for 14 months. The user-data period may restart with new activity if that option is enabled in the property. These controls do not limit retention of standard aggregated reports. The enquiry retention period does not apply to provider logs or analytics.

6. Cookies, local storage and analytics

The website remembers your privacy preferences in local storage on your device, including the consent version, the time of your choice and whether you allow analytics or advertising. This storage is necessary to remember your choice; it is not an analytics cookie.

We use Google Analytics 4 (GA4), measurement ID G-4LJW2SX46J, to understand website visits and usage. The Google tag loads only after you allow analytics. Before consent, or if you reject analytics, this integration sends no analytics requests or cookieless measurement pings to Google. Optional analytics processing is based on your consent (Article 6(1)(a) GDPR). After consent, GA4 processes information such as pages viewed, visit timing, traffic sources, interactions and device or browser characteristics. We do not configure the contact form to send names, email addresses or message contents to GA4. Avoid including personal information in page URLs, which analytics can collect.

GA4 uses the first-party cookies _ga and _ga_4LJW2SX46J to distinguish browsers and maintain session state. We configure these cookies to expire after 180 days without extending their expiry on each visit. Cookie lifetime is separate from retention of data already received by Google. Google Signals and advertising personalisation are disabled, advertising consent signals remain denied, and no advertising tags are installed.

You can accept all optional categories, reject them, or save selected preferences. You can change or withdraw your choice at any time using Cookie settings. When you withdraw analytics consent, this integration disables collection, removes its accessible GA cookies and reloads the page to unload the Google tag. Withdrawal stops future collection; it does not automatically erase information already received by Google or affect the lawfulness of processing before withdrawal. Contact us to exercise applicable data rights.

7. Your rights

Depending on the circumstances and applicable GDPR conditions, you may request access to your data, rectification, erasure, restriction of processing or data portability. You may object to processing based on legitimate interests and withdraw consent where consent is the basis for processing. Send requests to contact@alexwebdev.com; we may need proportionate information to verify your identity.

You may lodge a complaint with a supervisory authority, particularly in the country of your habitual residence, place of work or alleged infringement. In Poland, the authority is the President of the Personal Data Protection Office (UODO), uodo.gov.pl.

8. Updates

This policy may be updated when the website’s services or data-handling arrangements change. The date above identifies the current version. Questions and requests can be sent to contact@alexwebdev.com.