Privacy Policy

This policy explains what personal data PageSupply collects, why we collect it, how long we keep it and what rights you have. It applies to pagesupply.co and to the services we provide to clients.

1. Who is responsible for your data

PageSupply is run by Nikola Stanic, an individual based in Belgrade, Serbia. Nikola Stanic is the controller of the personal data described in this policy. For anything about this policy or your data, email hi@nikolaflow.com.

2. What we collect and why

When you visit the website

Our hosting provider, Vercel, automatically records technical information when your browser requests a page: your IP address, browser type, the page requested, the page you came from and the time of the request. We use it only to deliver the site, keep it secure and fix errors.

Legal basis: our legitimate interest in running a secure, working website.

We also use Umami, a privacy-friendly analytics service, to count visits and see which pages and buttons are used: the page you open, the site you came from, your browser, device type and country, and clicks on buttons such as Book a Call and WhatsApp. Umami does not use cookies and does not identify you personally.

Legal basis: our legitimate interest in knowing how the website is used, so we can improve it.

If you came here from one of our ads, we measure which ad brought you, using Google Ads conversion measurement. What it records is three things you can do on the site: a click on the WhatsApp button, a booked call and a sent order form, together with the ad the visit came from. We never send Google your name, your email address or anything else you typed into the form.

Legal basis: our legitimate interest in knowing which advertising works, so that we do not keep paying for advertising that brings nobody. You can stop it at any time: block cookies in your browser, or turn off ad personalisation in your Google account settings. Section 3 explains both.

When you book a call

Booking runs through Cal.com. When you book, you give us your name, your email address, the time you picked and anything you choose to add in the notes. Cal.com sends the confirmation and creates a Google Meet link for the call. We use this to hold the call and to follow up on it.

Legal basis: steps you ask us to take before entering into a contract.

When you send us a project request

The form at pagesupply.co/start asks for your name, email address and business name, and, if you want to give it, a phone number. With it you tell us what your business does, what kind of website you are after, what you already have and when you would like to launch. We use all of it to answer you and to prepare the first call.

The form takes no payment and never asks for card or bank details. Your answers reach us by email and a copy goes to you; we keep them in our inbox and nowhere else.

Legal basis: steps you ask us to take before entering into a contract.

When you contact us

If you email us or message us on WhatsApp, we receive your contact details and whatever you send. On WhatsApp this includes your phone number and profile name. We use them to reply to you. The WhatsApp button on our website is a plain link: it sends nothing to WhatsApp until you click it.

Legal basis: steps you ask us to take before entering into a contract, or our legitimate interest in answering questions about our service.

When you become a client

To build and run your website we process your name, business name, contact details and billing details, together with the text, images, brand files and account access (for example to your domain) that you send us.

Legal basis: performing our contract with you, and our legal obligation to keep invoices and accounting records.

When we reach out to businesses

We sometimes contact businesses we think could benefit from our service. For this we use business contact details that are publicly available, such as a company website or a professional profile. We send only a small number of relevant messages, and each one tells you how to ask us to stop.

Legal basis: our legitimate interest in offering our services to businesses.

You can object at any time by replying or by emailing hi@nikolaflow.com. We will stop contacting you and delete your details, keeping only what we need to make sure you are not contacted again.

3. Cookies

The website uses one cookie: _gcl_au, set by Google and kept for 90 days. It connects a click on one of our ads to what happened on the site afterwards, which is how we know whether an ad was worth paying for. What it holds is a random number and a date, not your name and nothing you typed.

You can refuse it. Every browser can block cookies, for every site or just for this one, and Google lets you turn off ad personalisation in your account settings at myadcenter.google.com. Nothing about the website stops working if you do.

Umami, the analytics tool behind our visit statistics, works without cookies at all. If you open the booking window, Cal.com loads inside it and may set cookies it needs for booking to work; those are covered by Cal.com's own privacy policy.

4. Who we share data with

We do not sell your personal data. We share it only with the service providers that help us run PageSupply, and only as much as they need:

• Vercel Inc., for website hosting
• Umami Software, Inc., for website analytics
• Cal.com, Inc., for booking calls
• Resend (Plus Five Five, Inc.), for delivering the emails our website sends
• Google LLC, for Google Meet video calls and calendar invitations
• Google Ireland Limited, for measuring which of our ads brought you here
• WhatsApp (Meta), for messages you send us on WhatsApp
• our email provider, for correspondence
• our bank or payment provider, to receive payments

We may also disclose personal data where the law requires us to.

5. International transfers

Some of these providers are based in the United States or process data there. When personal data leaves the EU, the UK or Serbia, we rely on the safeguards those providers offer, such as the EU Standard Contractual Clauses or certification under the EU-US Data Privacy Framework. Google, whose ad measurement is described above, is certified under that framework.

6. How long we keep data

• Hosting logs: for the short period our hosting provider keeps them.
• Analytics data: anonymous visit statistics, kept in Umami for up to 6 months.
• Booking, project request and enquiry details where no work follows: up to 12 months after our last contact.
• Client data: for as long as we work together, then as long as tax and accounting law requires us to keep invoices and related records.
• Outreach details: until you object, and at most 12 months after our last message.

7. Your rights

Depending on where you live, you have the right to:

• access the personal data we hold about you
• have it corrected if it is wrong
• have it deleted
• restrict or object to how we use it
• receive it in a portable format
• withdraw consent where we rely on it

To use any of these rights, email hi@nikolaflow.com. We reply within one month.

You can also complain to a data protection authority. In Serbia this is the Commissioner for Information of Public Importance and Personal Data Protection. In the EU it is the authority in your country, and in the UK it is the Information Commissioner's Office (ICO).

8. Security

We use reputable providers, encrypted connections and access limited to the people who need it. No system is completely secure, but we take reasonable steps to protect your data.

9. Children

PageSupply is a service for businesses and is not aimed at children. We do not knowingly collect personal data from anyone under 16.

10. Changes to this policy

We may update this policy when our service or the tools we use change. The date at the top shows the current version. If a change is significant, we will say so on the website or tell clients directly.

11. Contact

Nikola Stanic, PageSupply, Belgrade, Serbia
hi@nikolaflow.com