Privacy Policy
How Plexus handles personal data on plexus.al. In short: the site uses no analytics, advertising or tracking cookies, and the only personal data we receive is what you send us through the contact form.
Last updated: 28 September 2026
01 Who we are
Plexus is operated by Luan Demiraj, sole proprietor, NUIS M21807005A, registered in Tirana, Albania. We are the controller of the personal data described here. You can reach us through the contact page.
02 What we collect
- Contact form: your name, your email address, your message and the language of the page. We receive these by email so we can reply.
- Technical data: when you visit the site, our hosting provider processes your IP address, browser information and the pages requested, to deliver the site and protect it against abuse.
We do not ask for sensitive data. Please do not send passwords, access keys or other confidential information through the form.
03 Why we use it
- To answer your message and, if you ask for it, to prepare an offer: steps taken at your request before a possible contract, and our legitimate interest in replying.
- To keep the site available and secure: our legitimate interest in running a safe website.
- To meet legal obligations, for example accounting records if we work together.
04 Cookies and tracking
The site sets no cookies of its own and uses no analytics, advertising or tracking tools. Our hosting provider may set strictly necessary security cookies, for example to tell people apart from automated traffic. Fonts and scripts are served from our own domain.
05 Who processes the data for us
- Cloudflare, Inc.: hosting, content delivery, security, and the function that handles the contact form.
- Resend: delivery of contact-form messages to our mailbox.
- Our email provider, where messages are received and answered.
These providers act on our instructions. Some are based in the United States, so data may be transferred outside Albania; they rely on contractual safeguards such as standard contractual clauses.
06 How long we keep it
We keep contact messages as long as needed to reply and to follow up on the conversation. If we work together, related correspondence is kept for the duration of the engagement and as long as the law requires. Otherwise, we delete messages within 12 months of the last contact. Technical logs are kept by our hosting provider for a short period, under its own retention policy.
07 Your rights
You can ask to access, correct or delete your personal data, to restrict or object to its use, and to receive it in a portable format. Write to us through the contact page; we reply within 30 days. You can also complain to the Commissioner for the Right to Information and Personal Data Protection (IDP) in Albania, or to the data protection authority where you live.
08 Security
The site is served only over HTTPS. The contact form checks where requests come from and filters automated submissions, and messages are not stored on the website itself.
09 Children
The site is intended for businesses and is not directed at children.
10 Related businesses
NVMAX, PlexWizz and GuidedTours are separate businesses with their own websites and policies. This policy covers plexus.al only.
11 Changes
If we change this policy, we update the date above. Significant changes are noted on this page.