How we handle contact form data
Last updated: 17 August 2026
1. Who we are
The data controller for personal data collected through sourcecraft.hr is SourceCraft ("we", "us"). Contact: [email protected] · Website: https://sourcecraft.hr
2. What data we collect
When you use our contact form, we collect the information you submit: name, email address, phone number (optional), project description, estimated budget (optional), and any file you attach voluntarily. We also process a reCAPTCHA token to reduce spam. Google may process technical data under its own privacy policy.
3. Why we use your data
We use your data solely to respond to your inquiry, evaluate a potential engagement, and follow up by email or phone if you ask us to. We do not use contact form data for unrelated marketing without your separate consent.
4. Legal basis (GDPR)
Processing is based on: • your consent when you tick "I have read and accept the Privacy Policy" and submit the form (Art. 6(1)(a) GDPR); and • our legitimate interest in handling business inquiries (Art. 6(1)(f) GDPR), balanced against your rights.
5. How long we keep data
Inquiry records are kept for up to 24 months after our last meaningful contact, unless a longer period is required by law or needed to establish, exercise, or defend legal claims. After that, data is deleted or anonymised.
6. Who receives your data
Your message is delivered to our team via a private Telegram channel operated by SourceCraft. We do not sell your personal data.
7. International transfers
Telegram may process notification metadata on infrastructure outside the European Economic Area. Where required, we rely on appropriate safeguards offered by the provider or limit transfers to what is necessary to handle your inquiry.
8. Your rights
Under the GDPR you may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. You may withdraw consent at any time without affecting prior lawful processing. To exercise your rights, email [email protected]. You also have the right to lodge a complaint with the Croatian supervisory authority (AZOP): https://azop.hr
9. Security
We use HTTPS, access controls, and reputable service providers. No method of transmission over the Internet is fully secure; please avoid sending highly sensitive data through the contact form.
10. Changes
We may update this policy. The current version is always published on this page. Material changes will be reflected by updating the "Last updated" date below.