# Privacy Policy

> How Plexus handles personal data on plexus.al. In short: the site uses no analytics, advertising or tracking cookies, and the only personal data we receive is what you send us through the contact form.

- Page: https://plexus.al/privacy/
- Language: English
- Albanian version: https://plexus.al/sq/privacy.md

Last updated: 28 September 2026

## 1. Who we are

Plexus is operated by Luan Demiraj, sole proprietor, NUIS M21807005A, registered in Tirana, Albania. We are the controller of the personal data described here. You can reach us through the contact page.

## 2. What we collect

We do not ask for sensitive data. Please do not send passwords, access keys or other confidential information through the form.

- Contact form: your name, your email address, your message and the language of the page. We receive these by email so we can reply.
- Technical data: when you visit the site, our hosting provider processes your IP address, browser information and the pages requested, to deliver the site and protect it against abuse.

## 3. Why we use it

- To answer your message and, if you ask for it, to prepare an offer: steps taken at your request before a possible contract, and our legitimate interest in replying.
- To keep the site available and secure: our legitimate interest in running a safe website.
- To meet legal obligations, for example accounting records if we work together.

## 4. Cookies and tracking

The site sets no cookies of its own and uses no analytics, advertising or tracking tools. Our hosting provider may set strictly necessary security cookies, for example to tell people apart from automated traffic. Fonts and scripts are served from our own domain.

## 5. Who processes the data for us

These providers act on our instructions. Some are based in the United States, so data may be transferred outside Albania; they rely on contractual safeguards such as standard contractual clauses.

- Cloudflare, Inc.: hosting, content delivery, security, and the function that handles the contact form.
- Resend: delivery of contact-form messages to our mailbox.
- Our email provider, where messages are received and answered.

## 6. How long we keep it

We keep contact messages as long as needed to reply and to follow up on the conversation. If we work together, related correspondence is kept for the duration of the engagement and as long as the law requires. Otherwise, we delete messages within 12 months of the last contact. Technical logs are kept by our hosting provider for a short period, under its own retention policy.

## 7. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Write to us through the contact page; we reply within 30 days. You can also complain to the Commissioner for the Right to Information and Personal Data Protection (IDP) in Albania, or to the data protection authority where you live.

## 8. Security

The site is served only over HTTPS. The contact form checks where requests come from and filters automated submissions, and messages are not stored on the website itself.

## 9. Children

The site is intended for businesses and is not directed at children.

## 10. Related businesses

NVMAX, PlexWizz and GuidedTours are separate businesses with their own websites and policies. This policy covers plexus.al only.

## 11. Changes

If we change this policy, we update the date above. Significant changes are noted on this page.