Privacy policy.

1. Who I am

This website, lasicadev.com, is run by Andrija Lasica, a freelance web designer and developer based in Belgrade, Serbia. When this policy says “I”, “me” or “lasicadev”, that’s who it means. I’m the person responsible for your data (the “controller”, in legal terms).

You can reach me any time at [email protected].

2. What I collect

Only what you choose to send me, plus a minimum of technical data that keeps the site running.

• Contact form: your name, email, website (optional), what you need help with, and your message.
• Booking a call: when you book through the Cal.com calendar, your name, email, the time you pick and any notes you add.
• Email: whatever you include when you write to me directly.
• Usage data (only if you accept cookies): which pages you visit, how you scroll and click, how long you stay, the site that sent you, your approximate location, and your device and browser. Microsoft Clarity can also record anonymised session replays, with anything you type into forms hidden.
• Technical data: like any website, the hosting provider briefly processes your IP address to deliver pages and block abuse.

I don’t ask for sensitive information, and I’d ask you not to send any through the form.

Sharing your details is always your choice. I just can’t reply to a message or confirm a call without an email address.

3. How I use it

• To reply to your message and answer your questions.
• To schedule and hold the discovery call you booked.
• To prepare a proposal and, if we work together, to deliver the project.
• To understand which pages are useful and where visitors get stuck, so I can improve the site.
• To measure whether my Instagram and Facebook content brings people to the site.
• To keep the site secure and spam-free.

I don’t sell, rent or trade your data, and I won’t add you to a newsletter without asking first.

No decisions about you are made automatically. Every message is read, and every reply is written, by me.

4. Legal basis

Where the GDPR, Serbia’s Law on Personal Data Protection or similar laws apply, I process your data on these grounds:

• Steps before a contract: replying to your inquiry and booking a call you asked for.
• Contract: delivering a project once we agree to work together.
• Consent: analytics and marketing cookies. You can withdraw it any time withCookie settings.
• Legitimate interest: site security and spam protection.
• Legal obligation: keeping invoices and records required by law.

5. Services I rely on

A few trusted providers help me run this site. They only get the data they need to do their job:

• Cloudflare hosts the site and protects it from abuse.
• Google provides Google Analytics and Gmail, where my email lives.
• Microsoft Clarity shows how visitors use the site (heatmaps and anonymised session replays).
• Meta provides the Meta Pixel, which measures visits from Instagram and Facebook.
• Web3Forms delivers contact form messages to my inbox.
• Cal.com runs the booking calendar.

Each of them has its own privacy policy and is bound to protect your data.

6. Cookies and analytics

Cookies are small files your browser stores for a website. This site uses as few as possible, and nothing beyond the necessary ones loads until you click “Accept” in the cookie banner. You can change your choice any time with Cookie settings, also linked at the bottom of every page.

When you open the booking calendar, it’s loaded from Cal.com, which may set cookies it needs for scheduling. Those are covered by Cal.com’s own policy. Fonts, images and videos are served from this site itself.

You can also block or delete cookies in your browser settings. The site will still work, you just won’t be counted in my stats.

7. How long I keep it

• Inquiries that don’t turn into a project: up to 2 years, then deleted.
• Client project data: for the length of our work together, plus whatever period the law requires for invoices and records.
• Analytics data: up to 14 months in Google Analytics, shorter in Microsoft Clarity, then deleted automatically.

You can ask me to delete your data sooner at any time.

8. International transfers

I work with clients worldwide, and some of the services above store data outside Serbia or the EU (for example in the United States, in the case of Google, Microsoft and Meta). Where that happens, they rely on recognised safeguards such as the EU–U.S. Data Privacy Framework or the EU Standard Contractual Clauses.

9. Your rights

You can ask me to:

• show you the data I have about you, and give you a copy;
• correct anything that’s wrong;
• delete it;
• stop or limit using it, or object to how it’s used;
• withdraw your cookie consent (use Cookie settings, no email needed).

Just email [email protected]. I’ll reply within 30 days, usually much sooner. If you’re not happy with my answer, you can complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection, or to the data protection authority where you live.

10. Security

The site runs over HTTPS, and access to your data is limited to me and the work accounts listed above, which I keep secured. No system is perfectly secure, but I take it seriously.

11. Changes to this policy

If I add a new tool or change how I handle data, I’ll update this page and the date at the top. Big changes will be clearly stated here.

12. Contact

Questions about your data or this policy? Email [email protected] and you’ll hear back from me directly.