Privacy policy

I respect your privacy and I don’t take your data lightly. This policy explains what information I collect, why I collect it, and what rights you have under the General Data Protection Regulation (GDPR).

If anything feels unclear, you’re always welcome to get in touch.

Who is responsible for your data

bolkas.com is operated by:

Apostolos Bolkas
Digital strategist and consultant
Website: bolkas.com
Email: hello@bolkas.com

I am the data controller for any personal data processed through this website.

What data I collect

I collect only the data that’s necessary.

This may include:

• Your name and email address, when you contact me or subscribe
• Any information you choose to share in a message
• Limited technical data needed to keep the site secure and running

This website does not use tracking cookies.

To understand where enquiries come from, I temporarily keep the first page visited, referring website, and campaign labels in your browser tab. This context expires after 30 minutes of inactivity and is included with any form you submit. It does not contain your form answers or a tracking identifier. Campaign context submitted with an enquiry is kept with it in my CRM.

Website analytics

This website uses Plausible Analytics, a privacy-focused analytics service hosted in the European Union.

Plausible:

• Does not use cookies
• Does not collect or store personal data
• Does not track visitors across websites or devices
• Does not create personal profiles
• Collects only aggregated, anonymised usage data, kept within the EU

Analytics are loaded through this domain rather than a third-party script, which avoids third-party cookies and cross-site tracking. The purpose is simply to understand how the website is used and to improve its performance.

How and why your data is used

Your data is used to:

• Respond to enquiries and messages
• Provide requested information or services
• Communicate with you, where you’ve chosen to do so
• Meet legal and contractual obligations

I don’t use your data for advertising or profiling.

Legal basis for processing

Under GDPR, your data is processed on the basis of:

• Consent, when you contact me or opt in to communication
• Legitimate interest, to respond to enquiries and maintain the website
• Contract, when delivering agreed services
• Legal obligation, where required by law

How long data is kept

I keep personal data only for as long as it’s genuinely needed:

• Contact enquiries. Up to 12 months
• Newsletter subscriptions. Until you unsubscribe
• Client-related data. For the duration of our work and any required legal retention periods
• Analytics data. Stored only in aggregated, anonymised form by Plausible

Who your data is shared with

I do not sell or trade personal data.

These services process data on my behalf, each only for the purpose listed:

• Cloudflare hosts this website and briefly holds form submissions until they reach my CRM
• Formspark receives the forms on this site and emails me a copy of each submission
• Cal.com runs the booking calendar. If you book a call after an intake form, your name, email, role, company, website, and context are passed to the calendar so you don’t have to type them twice. Cal.com may set its own cookies inside the calendar
• Resend holds the newsletter mailing list, and only if you subscribe
• Plausible counts visits, as described above

Enquiries are stored in a CRM that I host myself, so they aren’t shared with a CRM provider.

All providers are selected for GDPR compliance and process data under appropriate safeguards.

International data transfers

Some service providers may process data outside the EU. Where this happens, appropriate safeguards, such as Standard Contractual Clauses, are in place.

Your rights

You have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data
• Restrict or object to processing
• Withdraw consent at any time
• Lodge a complaint with a supervisory authority

To exercise your rights, email hello@bolkas.com.