Privacy Policy
Last updated:
This policy explains what personal data is collected through this website, why, and what rights you have. It applies to visitors of alexbelinsky.com and to people who contact me through it.
1. Who is responsible
The controller of your personal data is Alex Belinsky, a private individual resident in Estonia. Contact: alexbelinsky.ai@gmail.com.
2. What I collect and why
2.1 Contact form
When you send the contact form, I receive your name, work email, agency website and your message. Along with it, the form records the page you came from, any campaign parameters in the link you followed (such as utm_source), and the time the form was sent.
I use this to reply to your enquiry and to prepare a possible project. The legal basis is taking steps at your request before entering into a contract (Article 6(1)(b) GDPR). The referral and campaign details help me understand which channels bring enquiries, based on my legitimate interest in running my business (Article 6(1)(f) GDPR). The form also contains an invisible anti-spam field and a timing check, used only to filter out automated submissions.
Giving this information is voluntary, but without an email address I cannot reply.
2.2 Booking a call
If you book a call through the calendar link, the booking is handled by Google Calendar, which receives the name and email you enter there. I use them to hold the call and follow up (Article 6(1)(b) GDPR).
2.3 Email
If you write to me directly, I process your email address and the content of your messages to reply and, where relevant, to work with you (Article 6(1)(b) GDPR).
2.4 Server logs
When you visit the site, Cloudflare, which hosts it and delivers it through its network, automatically processes technical data: IP address, date and time, requested page, browser and operating system. This is needed to deliver the site and protect it from attacks and abuse (Article 6(1)(f) GDPR). I do not have access to individual request logs; I only see aggregated traffic statistics in the Cloudflare dashboard.
2.5 Business records
If we work together, I keep invoices and related correspondence as required by Estonian tax and accounting law (Article 6(1)(c) GDPR).
3. Cookies and analytics
This website uses cookies only if you agree to them. Until you make a choice, no analytics or tracking cookies are set and no analytics scripts are loaded.
3.1 Strictly necessary
One cookie stores your cookie choice, so the banner is not shown on every visit. It does not identify you and is set on the basis of my legitimate interest in remembering your decision.
| Name | Purpose | Duration |
|---|---|---|
| cc_cookie | Stores your consent choice | 6 months |
3.2 Analytics (only with consent)
With your consent, I use Google Analytics 4, provided by Google Ireland Limited, to understand how visitors use the site: which pages are viewed, how visitors arrive, and whether the contact form is used. Google Analytics does not store IP addresses of visitors from the EU. Advertising features and Google signals are switched off. Data is kept for 14 months and then deleted automatically. The legal basis is your consent (Article 6(1)(a) GDPR).
| Name | Purpose | Duration |
|---|---|---|
| _ga | Distinguishes visitors | 2 years |
| ga[ID] | Keeps session state | 2 years |
3.3 Your choice
You can accept or reject analytics cookies in the banner shown on your first visit, and change your decision at any time through “Cookie settings” at the bottom of every page. If you withdraw consent, analytics cookies are deleted. Withdrawing consent does not affect processing that took place before.
4. Who receives your data
I do not sell or rent personal data. It is shared only with the service providers I use to run the website and my work:
- Cloudflare, Inc. (USA), which hosts the website, delivers it through its network and processes the technical data described in section 2.4;
- Google Ireland Limited (Google Apps Script, Google Sheets, Gmail, Google Calendar), which receives form submissions, stores enquiries, and handles email and call booking;
- Telegram Messenger Inc., through which I receive a short notification that a new enquiry has arrived, containing only your name and agency website;
- Google Ireland Limited (Google Analytics), for website statistics, only if you consent to analytics cookies.
These providers process data on my behalf and under their own data protection terms. Data may also be disclosed where the law requires it.
5. Transfers outside the EU
Some providers process data outside the European Economic Area. Google and Cloudflare may process data in the United States; these transfers rely on the EU-US Data Privacy Framework and the European Commission’s Standard Contractual Clauses, which both providers include in their data processing terms. Telegram stores the data of accounts registered in the EEA in data centres in the Netherlands; Telegram Messenger Inc. is based outside the EEA and has appointed the European Data Protection Office (EDPO) in Brussels as its EU representative. The Telegram notification is limited to your name and agency website; the full enquiry stays in Google Sheets and Gmail.
6. How long data is kept
- Enquiries that do not lead to a project: 36 months after the enquiry was received, your name, email address and message are deleted. Agency projects often start a year or two after the first conversation, which is why I keep enquiries for this period. What remains (date, agency website, page and campaign details) is kept only for statistics about which channels bring enquiries.
- Correspondence with clients: kept for the duration of our work and 3 years after it ends.
- Invoices and accounting records: kept for 7 years, as required by Estonian law.
- Technical data processed by Cloudflare: kept by Cloudflare under its own retention rules; I only see aggregated statistics.
- Analytics data: deleted automatically after 14 months.
- Your cookie choice: 6 months, after which the banner asks again.
7. Your rights
Under the GDPR you have the right to access your personal data, have it corrected, have it deleted, restrict its processing, receive it in a portable format, and object to processing based on legitimate interest. Where processing is based on consent, you can withdraw it at any time. To use any of these rights, email alexbelinsky.ai@gmail.com. I will reply within one month.
You also have the right to lodge a complaint with a data protection authority. In Estonia this is the Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee.
8. Data processed during client projects
When I work on a project for your agency or your client, I may process personal data held in your systems, such as CRM contacts or email. In that case I act on your instructions as a processor, and the processing is governed by the Terms of Service and, where required, a data processing agreement, not by this policy.
9. Children
This website and my services are intended for businesses and are not directed at children.
10. Changes
I may update this policy when the website or my services change. The current version is always published on this page, with the date of the last update at the top.
11. Contact
Questions about this policy or your data: alexbelinsky.ai@gmail.com