Privacy Policy

1. Who is responsible

Cypher d.o.o., Medulinska 2, 31000 Osijek, Croatia, is responsible for the personal data processed through cypher-hub.com. In this policy, Cypher, we, and us refer to Cypher d.o.o. For privacy enquiries or requests, contact info@cypher-hub.com.

2. Information you provide

If you email us, we receive your email address, name if supplied, message, attachments, and related correspondence. Please send only information needed for your enquiry and avoid sensitive personal information unless we have agreed on an appropriate way to receive it.

When you submit the contact form, your name, email address, subject, and message are sent to our server and delivered to info@cypher-hub.com through Namecheap Private Email. A success response confirms acceptance by the mail server, not guaranteed inbox delivery. The separate newsletter field is not connected to a subscription service and does not create a subscription.

3. Technical information and browser storage

The website is hosted by Namecheap. Hosting and network providers may receive an IP address, request time, requested URL, and browser or device information to deliver and protect the site. The contact endpoint uses hashed IP addresses and request timestamps to limit abuse; rate-limit records expire after one hour and are removed during subsequent requests.

The site uses a browser localStorage entry named lightmode to remember your display preference. It is stored on your device and remains until you change the preference, clear site data, or your browser removes it. The website does not use advertising trackers, analytics integrations, account registration, payment collection, or automated decisions with legal or similarly significant effects. Hosting services and third-party content may have separate data practices.

4. Why information is used

We use your enquiry details to respond, discuss your requirements, and take steps you request before entering a contract (GDPR Article 6(1)(b)). For business correspondence that is not a pre-contractual request, we rely on our legitimate interest in communicating with prospective clients (Article 6(1)(f)).

We process technical information to operate, maintain, and protect the website and prevent abuse, based on our legitimate interests in providing a reliable and secure service (Article 6(1)(f)). Where applicable law requires records to be kept or disclosed, we rely on Article 6(1)(c). Where processing requires consent, you may withdraw it at any time without affecting processing carried out before withdrawal.

5. External services and recipients

Website fonts are hosted locally. The Contact page embeds Google Maps; loading the map connects your browser to Google, which can receive technical request information such as your IP address and browser details, and may use its own storage. See Google’s Privacy Policy at https://policies.google.com/privacy.

Namecheap provides website hosting and Private Email delivery for contact enquiries. These providers process information needed to deliver their services. Namecheap describes its data practices at https://www.namecheap.com/legal/general/privacy-policy/. Information may also be disclosed where required by law or necessary to establish, exercise, or defend legal claims. We do not sell your personal data.

6. International transfers

Our hosting, email, and external service providers may process personal data outside the European Economic Area, including in the United States. Cross-border processing is subject to applicable data-protection law. Where required, transfers must be covered by an applicable adequacy decision or appropriate safeguards, such as the European Commission standard contractual clauses. To request information about transfers affecting your data and the relevant safeguards, contact info@cypher-hub.com.

7. Retention and security

We retain enquiry correspondence for as long as needed to respond to your request, manage an ongoing business relationship, and meet applicable legal obligations or establish, exercise, or defend legal claims. Retention depends on the nature of the enquiry, whether it leads to a project, and any legal retention requirements. Technical logs are retained according to operational security needs and the hosting provider retention practices. Contact-form rate-limit entries expire after one hour and are removed during subsequent requests. You can clear theme storage through your browser settings.

We use HTTPS, restricted server access, and an SMTP configuration stored outside the public website directory to help protect enquiry data. No internet transmission or storage system can be guaranteed completely secure. Do not use this website to submit passwords, payment information, or confidential project credentials.

8. Your rights

Subject to the conditions in applicable law, you may request access, correction, erasure, restriction, or portability of your personal data, and may object to processing based on legitimate interests. You may withdraw consent where processing relies on consent. Email info@cypher-hub.com; proportionate identity verification may be needed to protect your information.

Requests should ordinarily be answered within one month. Where permitted by law, complex or numerous requests may require up to two additional months, with an explanation provided within the first month. You may complain to a supervisory authority, including Croatia's Personal Data Protection Agency (AZOP), or the authority in the EU country where you live or work. Details are available at https://azop.hr/data-subject-rights/.

9. Changes and contact

We update this policy when our services or data practices change. The revision date above identifies the current version. For privacy questions or to exercise your rights, email info@cypher-hub.com or write to Cypher d.o.o., Medulinska 2, 31000 Osijek, Croatia.