Privacy Policy

1. Who is responsible for your information?

AllFroPix Digital is a digital-services business currently being established by Alexandra Koppová Khan, based in County Cork, Ireland. Alexandra is the data controller responsible for the personal information described in this policy.

For privacy questions or requests, email [email protected].

2. Information we collect

When you contact us, we receive the information you provide, including your name, email address, enquiry type, service of interest and message. You may also provide your business name and, for a consultation, your website, goals, timeline and budget.

We also keep correspondence relating to your enquiry. Please do not include passwords, payment-card details, medical information or other sensitive personal information.

Our hosting and form providers may process technical information such as IP addresses, browser information, requested pages and request times to deliver their services and protect against misuse.

3. Why we use your information

• Responding to general enquiries: our legitimate interest in answering questions and managing communications with people interested in our services.
• Discussing a service you request: taking steps at your request before entering into a contract, where this basis applies. For enquiries made on behalf of a business, we may instead rely on our legitimate interest in managing business communications.
• Operating and protecting the website: our legitimate interest in maintaining a reliable website, preventing spam and investigating misuse.
• Advertising measurement: your consent, which you can refuse or withdraw through Cookie settings without affecting your ability to contact us.
• Meeting legal requirements: compliance with applicable legal obligations where necessary.

We do not automatically add people who enquire to a marketing mailing list. The privacy acknowledgement on our form confirms that you have read this policy; it is not marketing consent.

Providing information is voluntary. However, without the required contact and enquiry details, we may be unable to respond or assess your request. Optional consultation details help us tailor our response.

4. Who can access your information?

Alexandra primarily manages enquiries. Afroz Khan may also access them when needed to assist with responses and service discussions.

We use the following providers:

• Formspree: receives and processes contact-form submissions, provides spam filtering and sends enquiry notifications.
• Google Gmail: receives, stores and sends our email correspondence.
• Google Ads: measures advertising visits and successful enquiries when you accept advertising measurement. See Google’s Privacy Policy.
• Cloudflare: provides website hosting, delivery, security and traffic statistics.

We do not sell your personal information. Information may also be disclosed where legally required or necessary to establish, exercise or defend legal claims.

5. International processing

Our providers operate internationally. Personal information may be processed outside the European Economic Area (EEA), including in the United States.

• Cloudflare: its Self-Serve Agreement incorporates a Data Processing Addendum for relevant personal information. The addendum includes European Commission Standard Contractual Clauses and additional safeguards for transfers where required. See the Cloudflare Data Processing Addendum .
• Google Gmail: Google describes its international transfer arrangements in its data transfer frameworks information . These include Google LLC's certification under the EU–US Data Privacy Framework for covered transfers, and Standard Contractual Clauses where applicable. We currently use ordinary Gmail, rather than Google Workspace.
• Formspree: Formspree states that it relies on Standard Contractual Clauses as a data processor. See its security and data-protection information and Privacy Policy . We have requested confirmation of the processing agreement and transfer terms applicable to our account.

Standard Contractual Clauses are contractual safeguards for personal information transferred internationally. The EU–US Data Privacy Framework is an adequacy arrangement for transfers to participating US organisations within the scope of their certification.

To request further information or a copy of applicable safeguards, email [email protected].

6. How long we keep information

For enquiries that do not become client projects, we retain enquiry information for up to 12 months after our last contact, then delete it from our Gmail correspondence and Formspree submissions.

Relevant records may be retained longer where necessary to meet a legal obligation or deal with a dispute. If an enquiry becomes a client project, we will explain the retention arrangements for project and accounting records.

Providers may retain technical logs and backup copies under their own retention arrangements. Our 12-month enquiry period does not describe every provider's technical retention period.

7. Traffic statistics and advertising

Cloudflare provides traffic statistics that help us understand requests to our website and monitor performance and security. These figures may include automated traffic.

With your consent, Google Ads measures advertising visits and whether they lead to successfully accepted form submissions. Google may receive your IP address, browser and device information, page information, advertising identifiers and conversion events. Our tracking code does not send your name, email address or enquiry contents, and does not enable enhanced conversions or personalised advertising.

The Google tag stays blocked until you accept advertising measurement. You can reject it or withdraw consent using Cookie settings. The form works regardless of this choice. Withdrawal does not affect processing already carried out with consent.

Our browser preference lasts 180 days; Google advertising cookies generally last 90 days. Google’s retention of measurement records is separate from our 12-month enquiry period and is described in its retention information. See the Cookie Policy for storage and controls.

Google Ads information may be processed outside the EEA. Google describes applicable transfer safeguards in its data transfer frameworks information and the Google Ads Controller–Controller Data Protection Terms. These advertising arrangements are separate from our Gmail use.

8. Your privacy rights

Depending on the circumstances, you can request access to your personal information, correction, deletion, restriction of processing or transfer of information to you or another provider. You may also object to processing based on legitimate interests.

Where we rely on consent, you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

Email [email protected] to exercise your rights. We may request proportionate information to confirm your identity. We normally respond within one month; if a lawful extension is necessary, we will explain it.

You can also complain to Ireland's Data Protection Commission , or your local supervisory authority.

9. Automated decisions

We do not use your enquiry information to make solely automated decisions that have legal or similarly significant effects on you.

10. Changes to this policy

We will update this policy when our services, tools or handling of personal information change, including when the business operator changes. The date above identifies the latest revision.