LEGAL
Privacy notice
What KoCreate collects, why, who else sees it, and what you can ask for.
Last updated 22 October 2026
Who is responsible
Flavjan Bregu, trading as KoCreate (NUIS M66307003G), Rruga Bleran, property no. 6/7+1-1, cadastral zone 1209, Shkodër, Albania, is responsible for your personal data. For anything about it, email flavjan.bregu@kocreate.io.
What is collected, and why
When you get in touch. The contact form asks for your name, email, company, website and a message. Sending it opens your own email app, so it reaches KoCreate as an ordinary email. The details, and anything you send by email or say on a call, are used to reply to you and to talk about the work you asked about. The legal basis is taking steps you asked for before a possible contract, and KoCreate's legitimate interest in answering business enquiries.
When you book a call. The booking calendar on the contact page is run by Cal.com. It asks for your name and email, and anything you add to the booking. Cal.com sends both of you the confirmation, and the invitation with the Google Meet link goes through KoCreate's Google calendar. The details are used to hold the call, on the same legal basis as an enquiry.
When you become a client. Contact and billing details, the scope and agreement, and the project data needed for the work. These are used to deliver the work and to invoice it. The legal basis is the contract, and the legal duty to keep tax and accounting records.
When you visit the site. The site is hosted on Cloudflare, which handles your IP address, browser details and the pages you ask for, to deliver the site and protect it from attacks. The legal basis is KoCreate's legitimate interest in running a secure site. There is no analytics, advertising or tracking on the site.
Giving your details is up to you, but without an email address KoCreate can't reply. Nothing is decided about you automatically, no profile is built, and your details are never sold or used for marketing emails you didn't ask for.
Who else receives it
- Google (Google Workspace), which runs KoCreate's email, calendar and video calls.
- Cal.com, which runs the booking calendar.
- Cloudflare, which hosts the site.
- For clients: the accountant who prepares the tax records, and the tools a project uses, but only in accounts the client owns or agrees to.
- Public authorities, only when the law requires it.
Google and Cloudflare store and process data in several countries, including the United States. They do this under their own data processing terms, which include the European Commission's standard contractual clauses, and both are certified under the EU-U.S. Data Privacy Framework. Cal.com is based in the United States and handles booking details under its own data processing terms.
How long it is kept
- Enquiries that don't become a project: deleted within two years of the last contact.
- Client contracts and invoices: as long as Albanian tax and accounting law requires.
- Project data: handed over to the client at the end of the work, then deleted from KoCreate's own accounts unless the client asks otherwise.
- Cloudflare's technical logs: a short time, under Cloudflare's own rules.
What you can ask for
You can ask to see the personal data KoCreate holds about you, to have it corrected or deleted, to limit how it's used, to object to its use, and to get a copy in a format you can take elsewhere. Where something rests on your consent, you can withdraw it at any time. Email flavjan.bregu@kocreate.io; you'll get an answer within one month.
If you think your data is handled wrongly, you can complain to Albania's Information and Data Protection Commissioner (idp.al). If you live in the European Union, you can also complain to the data protection authority in your country.
Children
The site and KoCreate's services are for businesses, not for children under 16, and KoCreate doesn't knowingly collect their data.
Do Not Track
The site doesn't track visitors over time or across other websites, and lets no third party do so. A browser's Do Not Track signal changes nothing here, because there is no tracking to turn off.
Changes
If this notice changes, the new version is posted on this page with a new date at the top. If you're a client and the change matters to you, you'll be told by email.