Skip to content
shkulaku.com

Privacy Policy

Last updated: 24 September 2026

This Privacy Policy explains what personal data we collect when you visit shkulaku.com or contact us, why we collect it, and what rights you have. We keep it short and only collect what we need to answer you and run the website.

1. Who we are

The website shkulaku.com is run by Renato Shkulaku, Tirana, Albania (“we”, “us”). We also work with clients from Albany, New York, USA.

For any privacy question or request, write to contact@shkulaku.com.

2. What we collect

When you contact us

When you use the contact form, a quote form, the AI chat assistant, or write to us by email, WhatsApp, Telegram, Viber or phone, we receive:

  • your name, email address and/or phone number;
  • your message, project details and any service, product or price plan you selected;
  • where your visit came from: the campaign link (UTM tags), the referring website and the first page you opened on our site;
  • if you use the AI chat assistant, the full conversation.

When you browse the website

  • Technical data: your IP address, browser type and the pages you request, which our server and Cloudflare process to deliver the site and protect it from attacks and spam. For rate limiting we only keep a short-lived, one-way hashed version of your IP address.
  • Analytics: if you allow statistics cookies, Google Analytics measures how the site is used (pages visited, device, approximate location, clicks on contact buttons). See our Cookie Policy.

We do not ask for sensitive data. Please do not send passwords, payment card numbers or health data through our forms.

3. Why we use it and our legal basis

  • To answer your request and prepare offers — steps you asked for before a contract, and our legitimate interest in replying to messages.
  • To deliver a project we agreed on — performance of our contract with you.
  • To understand which pages and campaigns bring clients — your consent (analytics cookies) and our legitimate interest (the source of a message you sent us).
  • To keep the website secure and stop spam — our legitimate interest.
  • To keep invoices and records — legal obligations under Albanian tax and accounting law.

We do not sell your data and we do not use it for automated decisions that have legal effects on you.

4. Who receives your data

We only share data with service providers that help us run the site, under contracts that require them to protect it:

  • Hostinger — server hosting;
  • Cloudflare — domain name system (DNS), security and content delivery;
  • Google — Google Analytics (only with your consent) and, when you play a video, YouTube;
  • our email provider — to deliver form messages and our replies;
  • the AI provider of the chat assistant (for example Anthropic) — only the messages you type in the chat, to generate a reply;
  • WhatsApp, Telegram, Viber — only if you choose to contact us there; their own privacy policies apply;
  • our CRM or automation tools, if we use them to manage requests.

We may also disclose data when the law requires it.

5. Transfers outside Albania

Some providers above are based in the European Union or the United States. When data leaves Albania or the European Economic Area, we rely on the safeguards the law provides, such as adequacy decisions or standard contractual clauses.

6. How long we keep it

  • Messages and leads: up to 24 months after our last contact, unless you become a client.
  • Client records and invoices: for as long as Albanian tax and accounting law requires.
  • Analytics data: up to 14 months in Google Analytics.
  • Chat history in your browser: it is deleted when you close the tab.

7. Your rights

You can ask us to:

  • tell you what data we hold about you and give you a copy;
  • correct wrong or incomplete data;
  • delete your data;
  • limit or object to how we use it;
  • send your data to you or another company in a common format;
  • withdraw your consent at any time (for example for analytics cookies, via the cookie settings link at the bottom of every page).

Write to contact@shkulaku.com. We will answer within 30 days. If you think we handle your data wrongly, you can complain to the Albanian Information and Data Protection Commissioner (www.idp.al) or to the data protection authority in your own country.

8. Security

The site uses HTTPS encryption, access to our systems is protected with strong passwords, and form data is stored on our own server. No method is 100% secure, but we act quickly if a problem happens.

9. Children

Our services are for businesses and adults. We do not knowingly collect data from children under 16.

10. Changes

We may update this policy. The date at the top shows the latest version.