Privacy Policy

Last updated: 4 September 2026

This Privacy Policy explains how personal data is processed when you visit this website or contact me through it.

1. Data Controller

The data controller is:

Aleksei Anikeev
Independent Web Developer & Technical Consultant
VAT ID: IT04560690242
Email: info@lelafa.tech

For any privacy-related request, you can contact me using the email address above.

2. Data I Collect

Information you provide

If you contact me by email or through a contact form, I may process information such as:

  • your name;
  • email address;
  • information contained in your message;
  • any other information you voluntarily provide.

Technical information

When you visit the website, the web server and hosting infrastructure may automatically process technical information such as:

  • IP address;
  • browser and device information;
  • requested pages and URLs;
  • date and time of requests;
  • technical and security logs.

This information is generally processed for website operation, security, troubleshooting and prevention of abuse.

3. Why Your Data Is Processed

Personal data may be processed for the following purposes:

Responding to enquiries and discussing potential work
Legal basis: taking steps at your request before entering into a contract, under Article 6(1)(b) GDPR.

Operating and securing the website
Legal basis: legitimate interests under Article 6(1)(f) GDPR, including maintaining website security, preventing abuse and diagnosing technical problems.

Complying with legal obligations
Where applicable, information may be retained or processed where required by tax, accounting or other applicable laws.
Legal basis: Article 6(1)(c) GDPR.

I do not sell personal data.

4. Contact Forms and Email

When you send an enquiry, your information is used to respond to your message and, where relevant, discuss or establish a professional relationship.

Messages may be stored within my email service and website infrastructure.

Enquiry information is retained only for as long as reasonably necessary for the conversation, potential business relationship, legal obligations or the establishment, exercise or defence of legal claims.

5. Hosting and Service Providers

The website is hosted by: Hostinger

I may also use service providers for website hosting, email delivery, security, backups and other technical infrastructure.

These providers may process limited personal data on my behalf where necessary to provide their services.

Where a provider processes personal data outside the European Economic Area, appropriate safeguards required by the GDPR are used where applicable, such as an adequacy decision or Standard Contractual Clauses.

6. Cloudflare Turnstile

This website uses Cloudflare Turnstile, provided by Cloudflare, Inc., to protect forms against spam, abuse and automated submissions.

Turnstile processes technical and interaction data necessary to determine whether a request is made by a legitimate user. This processing is based on my legitimate interest in protecting the website against abuse under Article 6(1)(f) GDPR.

For more information, see Cloudflare’s Turnstile Privacy Addendum and Privacy Policy.

7. Cookies

This website uses cookies or similar technologies that are necessary for the website to function correctly.

Essential cookies do not require consent where they are strictly necessary to provide the requested service.

This website does not currently use advertising, behavioural tracking or non-essential analytics cookies.

If non-essential analytics, advertising or other tracking technologies are introduced in the future, this policy and the website’s consent mechanism will be updated accordingly.

8. Third-Party Websites

The website may contain links to external websites.

I am not responsible for the privacy practices or content of third-party websites. Their own privacy policies apply when you visit them.

9. Data Sharing

Personal data is not shared with third parties except where necessary:

  • with service providers operating website or email infrastructure;
  • with professional advisers where reasonably necessary;
  • where required by law or a competent authority;
  • where necessary to establish, exercise or defend legal claims.

10. Your Rights

Under the GDPR, depending on the circumstances, you may have the right to:

  • access your personal data;
  • correct inaccurate information;
  • request deletion of your data;
  • restrict processing;
  • object to processing based on legitimate interests;
  • receive your data in a portable format where applicable;
  • withdraw consent at any time where processing is based on consent.

To exercise these rights, contact [your email].

You also have the right to lodge a complaint with the competent data protection supervisory authority, particularly in the EU country where you live, work or believe an infringement has occurred.

11. Automated Decision-Making

I do not use personal data collected through this website for automated decision-making or profiling that produces legal or similarly significant effects.

12. Security

Reasonable technical and organisational measures are used to protect personal data against unauthorised access, loss, misuse or disclosure.

However, no internet transmission or storage system can be guaranteed to be completely secure.

13. Changes to This Policy

This Privacy Policy may be updated when the website, services or legal requirements change.

The latest version will always be published on this page.