Privacy Policy

This policy explains what data nickgaitan.xyz collects, why, and what rights you have. Written to be read, not to cover.

Last updated:

Data controller

Nick Gaitan, Nikaia, Attica, Greece. Contact: info@nickgaitan.xyz or WhatsApp +30 695 109 3415. For any question about your data, email is the fastest route.

What data is collected

This site uses no analytics, no tracking cookies and no advertising networks. There is no user profiling.

  • Project brief form: full name, email, optionally company, your selections (services, project type, budget, timeline), the description you write and any files you upload.
  • Hosting technical data: the provider logs IP address, user agent and request time for security and stability.
  • Local browser storage: your language preference (EL/EN). It never leaves your device.

Legal basis & purpose

Form data is processed on the basis of your request for a quote (pre-contractual measures, Art. 6(1)(b) GDPR) and is used solely to reply to you and prepare a proposal. It is never sold, rented or used for bulk messaging.

Third parties

The following services are used to run the site:

  • Web3Forms — receives and forwards form submissions to my email.
  • Google Fonts — loads the Syne and Inter typefaces. Google receives your IP address during loading.
  • GitHub API — public repository activity in the telemetry section. The request goes from your browser to api.github.com.
  • Hosting provider — serves the site files and keeps basic security logs.

Retention

Briefs and related correspondence are kept for the duration of our communication and up to 24 months afterwards, as a quote history. You can request earlier deletion and it happens without questions.

Your rights

You have the right of access, rectification, erasure, restriction, portability and objection. Email info@nickgaitan.xyz and you will get a reply within 30 days. If you believe your rights were breached, you may complain to the Hellenic Data Protection Authority (dpa.gr).

Security

The site is served exclusively over HTTPS with HSTS, a Content Security Policy and restricted browser permissions. There is no user database and no passwords are stored.

Minors

The site is aimed at businesses and adults. No data is knowingly collected from children under 16.

← Back to home