Privacy Policy

andreimalai.com is operated by Andrei Malai, an independent web designer and developer based in Larnaca, Cyprus. I am the data controller for any personal information collected through this site. You can reach me at hi@andreimalai.com.

When you submit the contact form, I collect your name, your email address, and whatever you choose to write in the message field. That is all. There are no hidden fields.

If you consent to analytics, the site uses Google Analytics and Microsoft Clarity. These record which pages you visit, how you arrived, your approximate location, your device and browser, and how you move and scroll through the page. Microsoft Clarity also records anonymised session replays, which show interaction with the page but do not capture what you type into form fields.

If you decline analytics, none of this runs and no analytics cookies are set.

I do not collect payment card details. Payments are processed by Stripe and Revolut, and your card information goes directly to them. It never touches this site.

Contact form data is used for one purpose, to reply to you and to discuss a possible project. The legal basis is legitimate interest, specifically responding to an enquiry you initiated.

Analytics data is used to understand which pages are working and where visitors lose interest. The legal basis is your consent, which you give or refuse when you first arrive, and can withdraw at any time.

I do not sell your data. I do not share it with advertisers. I do not add you to a mailing list without asking. I do not run retargeting pixels or advertising trackers on this site.

A small number of service providers process data on my behalf. Form submissions are delivered by email and stored in my inbox. Payments are processed by Stripe, Inc. and Revolut Ltd, who handle your card data under their own privacy policies. Analytics is processed by Google LLC and Microsoft Corporation. Hosting providers process technical data such as IP addresses in the course of serving the site.

Each of these is bound by contract to process data only on my instructions.

Enquiries that do not become projects are deleted within twelve months. Records relating to actual client work, including invoices, are retained for six years, as required by Cyprus tax law.

Under the GDPR you can ask me to show you the data I hold about you, correct it, delete it, restrict how I use it, or send it to you in a portable format. You can also object to processing based on legitimate interest.

Email hi@andreimalai.com and I will respond within thirty days. There is no charge.

If you believe I have handled your data improperly, you can complain to the Office of the Commissioner for Personal Data Protection in Cyprus at dataprotection.gov.cy.

The site sets no analytics or tracking cookies until you consent to them. When you first arrive you are asked to accept or decline. Declining is a real choice and the site works exactly the same either way.

If you accept, Google Analytics and Microsoft Clarity set cookies to recognise a returning visit and to group your activity into a session. You can withdraw consent at any time by clearing your cookies for this site, or by emailing hi@andreimalai.com.

There are no advertising cookies on this site and no retargeting pixels.

If this policy changes, the date at the top of this page changes with it. Material changes will be noted here rather than made quietly.