Privacy notice.

Complexus Consulting (“Complexus”, “we”) runs this website and decides how the personal information collected through it is used: in the language of data protection law, we are the controller. For any question about this notice or about your information, write to info@complexusconsult.com.

When you send an enquiry: your name, your organisation if you give it, your email address, the service you are interested in and your message, together with the language and address of the page you sent it from.

Before any engagement: to meet our sanctions obligations, we check the name of a prospective client and their organisation against public government sanctions lists, using publicly available information.

When you visit the site: our host, Vercel, keeps server logs that include your IP address, your browser type and the pages you request.

Vercel Web Analytics counts visits in aggregate. It does not use cookies and does not identify individual visitors.

We do not ask for, and ask you not to send, special categories of information such as health, political opinions or religious beliefs.

To answer your enquiry and, if you ask us to, to prepare an engagement. Legal basis: steps taken at your request before entering into a contract, and our legitimate interest in replying to business enquiries.

To screen prospective clients for sanctions. Legal basis: compliance with the sanctions laws that apply to us, and our legitimate interest in not dealing with sanctioned parties.

To keep the site secure and running, including blocking automated or abusive form submissions. Legal basis: our legitimate interest in protecting the site and our inbox.

To count visits in aggregate. Legal basis: our legitimate interest in knowing which pages are useful.

Giving us your details is voluntary, but without an email address we cannot reply. We do not sell or rent your information, we do not use it for advertising, and we make no automated decisions about you.

The site sets no cookies and stores nothing in your browser. It loads no scripts, fonts or images from other websites. Because nothing is stored on your device, there is no cookie banner to accept or decline.

Vercel (website hosting, server logs and analytics), Resend (delivering enquiries from the form to our inbox) and Google Workspace (our email). They process information only on our instructions, under data processing terms.

We disclose information to anyone else only if the law requires it, or where necessary to establish or defend legal claims.

Our providers store data in the United States. Where the law of your country restricts transfers abroad, for example in the European Union, the United Kingdom, Switzerland or Albania, the transfer relies on the safeguards our providers offer: the European Commission’s Standard Contractual Clauses (and their UK equivalents) and, for providers certified under it, the EU-U.S. Data Privacy Framework. You can ask us for details of these safeguards.

Enquiries that do not lead to an engagement are deleted within 24 months of our last contact with you.

Records of engagements, and of the sanctions checks behind them, are kept for as long as the law requires us to keep business, tax and compliance records.

Server logs are kept by Vercel for a short period under its own retention settings and are then deleted.

Every connection to the site is encrypted, and browsers are told to use only encrypted connections. The enquiry form is checked on our server, not only in your browser. Enquiries go straight to our inbox; the site itself keeps no database of them. Access to enquiries is limited to the firm.

Email is not a secure channel for highly confidential material. If an engagement needs it, we will agree a secure way to exchange documents.

Depending on where you live, you can ask us for access to your information and for a copy of it in a portable format, and ask us to correct it, delete it or restrict how we use it. You can object to processing based on our legitimate interests. These requests are free.

Send requests to info@complexusconsult.com. We reply within one month, and may ask you to confirm your identity first.

You can also complain to a data protection authority: in the European Union, the authority where you live or work; in the United Kingdom, the Information Commissioner’s Office; in Albania, the Information and Data Protection Commissioner. We would welcome the chance to resolve your concern first.

We do not sell or share personal information, as those terms are used in California and other state privacy laws, and we do not use sensitive personal information. You can use the rights above whatever state you live in.

The site does not track visitors across other websites, so it treats every visitor the same, whether or not their browser sends a Do Not Track or Global Privacy Control signal.

The site is meant for businesses and professionals. It is not directed at children, and we do not knowingly collect information from anyone under 16.

If this notice changes, the new version is posted on this page with a new date.