Privacy

Last updated: 31 October 2026.

What the enquiry form collects

Five things, all of them typed by you: your name, your business name, your email address, the business type you pick from the list, and the message you write. There is also a hidden anti-spam field that you never see and a browser leaves empty. There is no account to create, no payment taken on this site, and no newsletter to be added to.

We use it to reply to you, and to keep a record of the conversation if you become a client. That is the whole of it. What you send is not sold, not shared with advertisers, not added to a marketing list, and not fed into any automated decision or profile.

Right now the form has no backend. When you press send it opens your own email program with the answers in the body, so the enquiry travels through your email provider and ours, and no form-processing company sees it on the way. If that ever changes, this page is updated before the change goes live.

Why we are allowed to collect it

We operate under Kosovo's Law No. 06/L-082 on the Protection of Personal Data, which is the law of the place the studio is registered. It asks us to say not just what we do but on what basis, so: we handle what you send through the enquiry form in order to take the steps you have asked us to take towards a possible contract. You asked us for a quote; this is us answering.

Cookies and analytics

This site uses Google Analytics to count page views and see which links get used, so we know what to write more of. It is configured to store nothing on your device: no cookies, and no identifier kept between visits. One consequence is that we cannot tell a returning visitor from a new one, and we would rather have the weaker numbers than the identifier.

It counts more than page views. Alongside the page address and the page you came from, we ask it to record when someone clicks an email link, clicks a phone link, clicks one of the buttons on the site - including the words on the button - and when someone presses send on the enquiry form. That last one tells us an enquiry happened and which page it came from. It does not carry anything you typed. Google Analytics also records some events of its own accord, such as how far down a page someone scrolls; those are switched on in Google's console rather than written into this site.

One thing is stored on your device, and only if you actually make a choice in Privacy choices: a single entry called altaris:analytics holding the word on or off. That is how your decision survives you closing the tab. It is not an identifier, it is not sent anywhere, and nothing is written for someone who simply reads a page.

The tag is configured with Google Signals and ad personalisation switched off. Those are the features that would let measurement data be used to advertise to you elsewhere. We run no advertising or social pixels, and we do not sell what we collect.

Where your data goes

The site is served by a third-party hosting provider, which handles request data such as IP addresses in order to serve pages and block abuse. We do not name our provider publicly. Enquiries reach us as email, so our email provider handles whatever you send us. Analytics is provided by Google. Fonts are served from this site rather than from a font company, so no font provider sees your IP address. No third party collects information about your browsing on other sites through this one.

Our hosting provider also runs its own page-view measurement on this site, separately from the Google Analytics described above. It sets no cookies and builds no profile, but it is added by the provider at the point the page is served rather than by anything in the site's own code - so, unlike Google Analytics, the control below does not switch it off. We would rather tell you that than let the control imply more than it does.

Google receives your IP address, because every request to every server carries one. Google says it uses it to work out an approximate location - a city or a region, not an address - and to filter spam. It is never shown to us. We only ever look at the totals.

Some of this is handled outside Kosovo, including in the United States. Kosovo's rules on sending personal data abroad are stricter than the European ones they are modelled on: as we read them, a transfer is allowed where the Information and Privacy Agency has found the destination country adequate, or where the Agency has authorised that specific transfer, and there is no do-it-yourself alternative. We are having our position checked rather than printing a reassurance we have not verified.

How long we keep it

Enquiries arrive as email and sit in a mailbox. We keep one while the conversation is live, and for as long as you are a client, so that we have the history of what was agreed. We have not set a fixed number of months beyond that, and we would rather say so than publish one we have not decided on. Ask us to delete your enquiry and we will, whenever you ask.

Analytics data sits on Google's servers rather than ours, for a limited period set on the Analytics property. Google says that setting does not affect its standard aggregated reports, so the totals outlast the event data. We hold no database of visitors, no accounts and no profiles of our own.

Your choices

You can switch analytics off whenever you like from in the footer. It applies as you flip it - there is nothing to confirm and nothing to save. Because the tag already stores nothing, switching it off is about what gets sent: it stops anything further going to Google, and stops the tag loading at all on any later visit.

If your browser sends a Global Privacy Control signal, analytics is off before you arrive and stays off unless you turn it on yourself. We read that signal because it is the right behaviour, not because we are claiming a law obliges a studio our size to.

We do not act on the older Do Not Track browser setting. Global Privacy Control is the signal this site reads, and it is the one worth sending.

Your rights

Under Kosovo's data protection law you can ask us to:

tell you what personal data we hold about you, and give you a copy
correct it if it is wrong
delete it
restrict what we do with it while something is in dispute
hand it to you, or to someone else, in a portable form
stop processing it, where you object to what we are doing

Where we ever rely on your consent for something, you can withdraw it at any time. To use any of these, email hello@altarisdev.com. We will answer within one month and we will not charge you for it. If the request is unusually complex we may need longer, and we will tell you so inside that month rather than going quiet.

If you are in the United States, your state may give you similar rights - to know what is held, to have it deleted or corrected, and to opt out of analytics. The footer control does the last one immediately and no request is needed. For the others, email us and we will action it rather than argue about which statute applies to a company our size.

If you are not happy with how we have handled it, you can complain to the Information and Privacy Agency of the Republic of Kosovo, which supervises us. You do not need our permission and you do not need to come to us first.

Children

This is a business-to-business site. We sell websites to restaurants, hotels, garages and security firms, and nothing here is aimed at children. We do not knowingly collect personal data from a child. If you think a child has sent us something through the enquiry form, email us and we will delete it.

Security

The site is served over HTTPS and has very little to attack: no login, no customer database, no card details, and no copy of anything you have sent us beyond the email itself. That is a deliberate choice rather than a claim about how good our defences are. No one can promise a system is secure, and we are not going to be the first.

Changes to this page

If we change what we collect or who it goes to, we change this page and update the date at the top. There is no mailing list to notify you through, so the date is how you tell. If a change is material - a new third party receiving your data, say - we will say what changed rather than quietly reissuing the page.

Who is responsible

Altaris is a trading name of InnovX L.L.C., company number 812114164, registered in the Republic of Kosovo. InnovX L.L.C. is the data controller for this site, and the law it answers under is Kosovo's Law No. 06/L-082 on the Protection of Personal Data. Our team is in Kosovo. We do not have a US office and we do not claim one.

Email hello@altarisdev.com with any question about how your data is handled, or to use any of the rights above. Email is the only contact route we publish.