Privacy policy
Last updated 12 October 2026
This policy explains how EnginArch Studio collects and uses personal data when you visit this website or contact us. It is based on Albanian Law No. 124/2024 "On Personal Data Protection" and, for visitors from the European Union, on the GDPR.
1. Who we are
The data controller is EnginArch Studio, Tirana, Albania. For any question about your data, write to info@enginarch.al.
2. What data we collect
- Through the contact form: name, email or phone, company name (optional), type of service, project stage, description, indicative budget (optional) and preferred timeline (optional).
- When you message us on WhatsApp or by email: the information you choose to send.
- Technical data: our hosting provider may log your IP address, browser type and time of visit, for security and to keep the site running.
We do not use analytics or advertising cookies. If that changes, we will update this policy and ask for your consent where the law requires it.
3. Why we use it and on what basis
| Purpose | Legal basis |
|---|---|
| Replying to you and preparing a proposal | Steps taken at your request before a contract |
| Delivering the project, if you become a client | Performance of a contract |
| Security and operation of the website | Our legitimate interest |
| Invoicing and tax obligations | Legal obligation |
We do not sell your data and we do not use it for marketing without your consent.
4. Who we share it with
Only with the providers we need to operate, and only as far as necessary:
- Cloudflare · website hosting and forwarding of email sent to info@enginarch.al
- Web3Forms · delivering form submissions to our email
- Google (Gmail) · the studio's email
- Meta (WhatsApp) · only if you contact us on WhatsApp
Some of these providers may also process data outside Albania and the EU. In those cases we rely on the safeguards provided by law, such as standard contractual clauses.
5. How long we keep it
- Enquiries that do not become a project: up to 12 months after the last contact, then deleted.
- Clients: for the duration of the engagement and afterwards as long as the law requires, for example for invoicing records.
6. Your rights
You have the right to access your data, to have it corrected or erased, to restrict its processing, to receive it in a portable format, to object to processing and to withdraw your consent at any time. Write to info@enginarch.al and we will reply within the time limits set by law.
If you believe your data is not being handled properly, you can file a complaint with the Commissioner for the Right to Information and Personal Data Protection (idp.al (opens in a new tab)).
7. Security
The website uses HTTPS, and access to the enquiries you send us is limited to the people working on your project.
8. Changes
When we change this policy, we update the date at the top of the page.