Privacy Policy
Last updated: 30 September 2026
This policy explains what personal data we collect when you visit minasnirith.com, book a meeting or get in touch, why we collect it, and what rights you have. We keep it deliberately short because we collect very little.
1. Who is responsible for your data
The controller of your personal data is:
We are based in Serbia and serve clients internationally. We handle personal data in line with the EU General Data Protection Regulation (GDPR) and the Serbian Law on Personal Data Protection.
2. What we collect and why
Enquiries by email
If you write to us, we receive your name, email address and whatever you choose to tell us. We use it to reply to you and to discuss possible work together. Our legal basis is taking steps at your request before entering into a contract, and our legitimate interest in answering business enquiries (GDPR Art. 6(1)(b) and (f)).
Booking a meeting
When you book a call through our scheduling page, provided by meetergo, we receive your name, email address, the time you choose and anything you add to the booking. We use it to schedule and hold the meeting. Legal basis: the same as above. meetergo processes this data as our service provider under its own privacy policy.
Visiting the website
Our hosting provider records technical data when a page is requested, such as your IP address, browser type, the page requested and the time. This is needed to deliver the site securely and to detect abuse. Legal basis: our legitimate interest in running a secure website.
What we do not do
- The website does not set cookies and has no analytics, advertising or tracking tools.
- Fonts are hosted on our own site, so no data goes to Google Fonts.
- We do not sell your data or use it for automated decision-making or profiling.
3. Who receives your data
We share personal data only with providers who help us run the site and the business, and only as needed:
- Our website hosting provider, which serves this website.
- Our domain and email provider, through which your emails pass.
- meetergo, which provides meeting booking.
We may also disclose data where the law requires it, for example to tax or other authorities. The website links to LinkedIn; if you follow that link, LinkedIn's own privacy policy applies.
4. Transfers outside the EU
Some of our providers are based outside the European Economic Area and Serbia. Where your data is transferred to such a country, we rely on recognised safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.
5. How long we keep it
- Enquiries and booking details: for as long as needed to handle your request, and up to 24 months after our last contact if no work follows.
- Client records: for the duration of the engagement and as long as accounting, tax or other legal rules require.
- Server logs: for the short period set by our hosting provider.
6. Your rights
You have the right to access your personal data, have it corrected or erased, restrict or object to its use, receive it in a portable format, and withdraw any consent you have given. To use any of these rights, email consulting@minasnirith.com. We will respond within one month.
If you think we have handled your data unlawfully, you can complain to your local data protection authority. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection.
7. Security
The website is served over HTTPS, and we limit access to personal data to what is needed to run the business.
8. Changes to this policy
If we change how we handle personal data, we will update this page and the date at the top.
9. Contact
Questions about this policy or your data: consulting@minasnirith.com.