Privacy policy
Last updated: November 2026. Written in plain language. If anything is unclear, email us.
1. Who we are
Digitalope ("we", "us") is a small web studio based in the Czech Republic. We design websites and provide SEO, UI & UX and website security services for businesses, wherever they are. This policy covers digitalope.com, our contact form, our free tools, call bookings, and client projects. For anything about your data, write to support@digitalope.com.
2. What we collect and why
- Contact form: your name, email, optional phone number, your message, and the page you sent it from. We use it to reply to you. Both of our team members can read it. Legal basis: your consent, given by ticking the box, and our legitimate interest in answering enquiries.
- Call bookings: when you book a call, the booking tool (Cal.com) collects your name, email and anything you write in the form, so we can hold the call.
- Emails: whatever you send us at support@digitalope.com.
- Website statistics, only if you accept cookies: pages you view, what you click (position on the page and the name of the button or link), how far you scroll, how long you stay on a page, which website or campaign sent you, your device type, browser and system, and your country. The country is worked out from your connection by our hosting provider; we do not store your IP address in these statistics. We give your browser a random visit ID (kept only while the tab is open) and a random visitor ID (kept on your device) so we can tell visits and returning visitors apart. They are not linked to your name or email. Legal basis: your consent.
- If you decline cookies: we only count that a page was viewed, together with the page address, your country, device type, browser and system. There is no ID, nothing is stored on your device, and it cannot be linked to you.
- Google Analytics, only if you accept cookies: Google records how the site is used (pages viewed, rough location, device type).
- Abuse protection: to limit spam and overuse of the contact form and statistics, we keep a one-way, scrambled version of your IP address (a hash that changes every day). It cannot be turned back into your IP address and is deleted within two days.
- Free tools: the website address you enter, so we can scan that page. To enforce the daily limit of 5 checks, we store your IP address with a count of checks for that day, and delete it within two days. We do not link scans to your name or email.
- Client projects: the contact details, content and account access you share with us to deliver the work, and our records of the work and invoices. Legal basis: the contract with you and our legal accounting duties.
- Reviews: if you leave a review, your name and the text are shown publicly on our site. We tell you this when you submit it.
3. Who sees your data
We don't sell personal data. It is used by our two team members and by the services we use to run the business: Cloudflare (hosting, security, and the database where contact messages and statistics are stored), Cal.com (call booking), and Google (analytics, plus email and calendar tools used for calls). Some of these process data outside the EU/EEA under their own safeguards, such as the EU Standard Contractual Clauses.
4. Cookies and similar storage
Nothing beyond your cookie choice is stored on your device until you click "Accept" in the banner. You can change your mind any time with "Cookie settings" in the footer. The full list of what is stored is on our cookie policy page. Fonts are hosted on our own server, so loading a page doesn't send your data to Google.
5. How long we keep it
- Contact messages: until we have dealt with your request. Messages marked as spam or archived are deleted after 24 months. If you become a client, your details are kept for the length of the work plus what accounting law requires.
- Website statistics: up to 14 months, then deleted.
- Booking and email records: as long as needed to deal with your request, and longer only if you become a client.
- Abuse protection records and free tool limit records: up to two days.
6. Your rights
You can ask us to access, correct, export or delete your personal data, to withdraw your consent, or to stop a specific use of it. If you're in the EU/EEA or the UK, the GDPR gives you these rights; other places have similar laws, and we handle every request the same way. Email us and we'll sort it out. Because the statistics use random IDs, we may ask you to send us the visitor ID stored in your browser (we will explain how) to find your records. You can also complain to the Czech data protection authority, Úřad pro ochranu osobních údajů (uoou.cz).
7. Security
We use encrypted connections, password-protected admin access and limit who can see data. No system is perfectly secure, but we take reasonable care.
8. Changes
If we change this policy in a meaningful way, we'll update the date at the top.