Skip to main content
KIDA

Privacy Policy

Last updated: August 4, 2026

KIDA WebDesign is a brand operated by Vladimir Pilčević, an individual based in Serbia. This Privacy Policy explains how personal information is handled when you use kida-webdesign.com and when you send information through this website.

For privacy questions or requests, contact hello@kida-webdesign.com.

1. Scope

This policy applies to the public KIDA WebDesign website and to information processed through website features such as the contact form, website security measures, and privacy-friendly usage and performance measurement. Client project work may also be covered by a separate written agreement if we work together.

2. Information You Provide

If you use the contact form, you may submit the following information. Required fields are marked on the form.

  • Name (required)
  • Email address (required)
  • Company or website (optional)
  • Project type (required)
  • Project details or message (required)
  • Budget range (optional)
  • Timeline (optional)

The form also includes an anti-spam honeypot field that is not intended for visitor use and is not stored when submissions are accepted.

3. Technical, Usage, and Security Information

When you visit the website or submit the contact form, limited technical and usage information may be processed, including:

  • request timestamps and server logs created by website hosting;
  • anonymized site-usage information from Vercel Web Analytics, such as page views and high-level custom events (for example project-link clicks or contact-form outcomes);
  • performance and Core Web Vitals information from Vercel Speed Insights;
  • bot-detection and abuse-prevention signals used by Vercel BotID when you submit the contact form;
  • an IP address or similar network signal used by the hosting platform and, for contact submissions, converted into a one-way hashed identifier for rate limiting;
  • request metadata needed to verify that contact submissions originate from this website (such as Origin checks), together with a submission timestamp.

Approximate location or device/browser details may be inferred by infrastructure or analytics providers from technical signals. KIDA WebDesign does not use this website for advertising cookies or cross-context behavioral advertising.

4. How Information Is Used and Legal Bases

Information is processed for the following purposes and legal bases under Serbian data-protection law:

  • taking steps at your request before a possible contract — reviewing project inquiries, responding, and discussing next steps;
  • legitimate interests — operating and securing the website, preventing spam and abuse, understanding aggregate usage and performance, and keeping limited inquiry records;
  • compliance with legal obligations where applicable;
  • performance of a contract — only after an actual client relationship exists and is documented separately.

Submitting the contact form does not create a contract or an obligation to work together. Contact inquiries are not used for unrelated email marketing unless separate permission is obtained.

5. Service Providers and Recipients

Trusted service providers help operate the website and process inquiries. Depending on the feature used, information may be handled by:

  • Supabase — database infrastructure for contact requests and related rate-limit records;
  • Resend — delivery of contact-form notification emails;
  • the business email mailbox that receives those notifications so the inquiry can be reviewed and answered;
  • Vercel — website hosting and related infrastructure;
  • Vercel Web Analytics — anonymized usage measurement;
  • Vercel Speed Insights — performance measurement;
  • Vercel BotID — bot detection for contact-form submissions.

These providers and their subprocessors may process information outside Serbia, including in other countries where they operate, subject to their contractual and technical safeguards. KIDA WebDesign does not sell personal information and does not share it for cross-context behavioral advertising.

6. How Long Information Is Kept

  • Contact inquiries are retained for no longer than 12 months from submission.
  • Supabase database records for contact requests are scheduled for automatic deletion after that period by a daily cleanup job, so deletion may occur within about 24 hours after a record reaches 12 months. Status in the dashboard does not change this rule.
  • Corresponding email copies in the active business mailbox are deleted under the same 12-month retention rule. Not every copy is claimed to be deleted automatically by software alone.
  • Resend retains email data for 30 days under its documented standard retention.
  • If an inquiry leads to collaboration, relevant information may be kept longer where necessary for contract performance, accounting, legal obligations, or establishing, exercising, or defending legal claims.
  • Limited residual copies may remain temporarily in provider backups until normal backup rotation, where applicable.
  • Security, rate-limit, analytics, and performance information is retained according to operational need and the relevant provider settings (for example, hashed rate-limit records are cleaned up as part of normal contact processing).

7. Cookies and Similar Technologies

Vercel Web Analytics is cookie-free and processes anonymized usage information. Vercel Speed Insights is designed to measure performance without identifying individual visitors through advertising cookies.

Strictly necessary technical processing may occur for security, hosting, and abuse prevention, including BotID checks on contact-form submission and hashed rate-limiting signals. The public website does not use advertising cookies or a separate cookie-consent banner for non-essential marketing trackers.

If you sign in to the private admin area, authentication session data may be stored in your browser (for example localStorage) as needed to keep you signed in. That area is not part of ordinary public browsing.

8. Your Rights

Depending on applicable law, you may have the right to:

  • access your personal information;
  • request correction of inaccurate information;
  • request deletion;
  • request restriction of processing;
  • object to processing based on legitimate interests;
  • request data portability where applicable;
  • withdraw consent where processing is actually based on consent (website contact inquiries are not processed solely on a consent basis);
  • lodge a complaint with the Serbian Commissioner for Information of Public Importance and Personal Data Protection.

To exercise these rights, email hello@kida-webdesign.com. Reasonable identity verification may be requested where necessary. Deletion or other requests may be limited where information must be retained for contractual, accounting, legal, security, or legal-claims reasons.

9. Security

Reasonable technical and organizational measures are used to protect information submitted through this website. No method of transmission or storage is completely secure, and absolute security cannot be guaranteed.

10. Third-Party Links

This website may link to external sites, including portfolio and client project links. Those sites have their own privacy practices, and KIDA WebDesign is not responsible for their content or data handling.

11. Children

This website is intended for business and professional inquiries. It is not directed to children, and personal information from children is not knowingly collected for website services.

12. Changes to This Privacy Policy

This Privacy Policy may be updated from time to time. The updated version will be posted on this page with a revised “Last updated” date.

13. Contact

For privacy questions or requests, contact hello@kida-webdesign.com.

You can also review this website’s Terms of Use.