Privacy Policy

Web25 is a web development, maintenance, and digital growth agency operated by two related entities:

• Web25 s.r.o. — our main branch, based in the Slovak Republic (EU), and the data controller for web25.io.
• Web25 LLC — our U.S. branch, based in Wyoming, which handles operations for U.S.-based clients and may also process data described in this policy on Web25 s.r.o.'s behalf.

Web25 s.r.o.
Lubinská 18
811 03 Bratislava, Slovak Republic
Company reg. no. 51078333

Web25 LLC
30 N Gould St Ste R
Sheridan, WY 82801
United States

Because Web25 s.r.o. is established in the EU, GDPR Article 27 (which requires non-EU controllers to appoint a separate EU representative) doesn't apply to us — you can contact us directly using the details in Section 13.

We only collect personal data you choose to give us, plus limited technical data needed to run the site. Specifically:

• Contact and audit forms. When you submit an inquiry, a project brief, or a free website/SEO/maintenance audit request, we collect what you enter — typically your name, email address, phone number, company name, website URL, and any project details or notes you provide.
• Discovery call bookings. When you book a call through our scheduling drawer, we collect your name, email address, phone number (optional), company (optional), the date/time you selected, and any notes you add. This is used to create a calendar event and send you a confirmation — see Section 4.
• Cookies and local storage. We use a small number of strictly necessary cookies/local storage entries to run the site, and — only with your consent — analytics cookies to understand how the site is used. See Section 9.
• Technical/log data. Like most websites, our hosting provider automatically logs standard technical data for security and reliability — things like IP address, browser type, device type, and pages requested.

We do not knowingly collect special categories of data (e.g. health, religion, biometric data) through this site.

Under the GDPR, we need a valid legal basis for each way we use your data. Here's how that breaks down:

• To respond to your inquiry or book a call (contact forms, audit requests, discovery call bookings) — legal basis: taking steps at your request prior to entering a contract (Art. 6(1)(b)), or our legitimate interest in responding to people who contact us (Art. 6(1)(f)).
• To run and secure the site (technical/log data, strictly necessary cookies) — legal basis: legitimate interest in operating a functional, secure website (Art. 6(1)(f)).
• Analytics (only if you opt in) — legal basis: consent (Art. 6(1)(a)), which you can withdraw at any time.

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

We don't sell your personal data. We share it only with service providers who help us run the site and respond to you (our "processors"), under agreements that require them to protect it:

• Pabbly Connect — routes contact/audit form submissions to our internal records.
• Google (Calendar, Meet, Sheets) — used to check availability, create your discovery call event, send you a calendar invite, and generate a video call link.
• Vercel — hosts this website and processes standard technical/log data as part of that.

We may also disclose data if required by law, to protect our legal rights, or as part of a business transfer (e.g. a merger or acquisition), in which case we'd take reasonable steps to keep it protected.

Web25 s.r.o. is based in the EU, so if you're located in the EU/EEA, your data is processed by an EU entity by default. Transfers still happen in two situations: when our U.S. branch, Web25 LLC, handles data as part of running the site or serving U.S. clients, and when our service providers (Google, Vercel — see Section 4) process data on infrastructure located outside the EU/EEA/UK.

Where that happens, we rely on safeguards such as Standard Contractual Clauses (SCCs) or equivalent mechanisms offered by our providers to keep your data protected to a standard consistent with GDPR requirements.

We keep contact form and audit submissions for as long as reasonably needed to respond to you and maintain a record of our communications, typically no longer than 3 years from your last contact with us, unless we're legally required to keep it longer.

Discovery call bookings are kept for as long as the calendar event exists, plus a reasonable period afterward for our own records. Analytics consent preferences are kept in your browser's local storage until you clear it or change your choice.

If you're located in the EU/EEA or UK, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure of your data ("right to be forgotten")
• Request that we restrict how we process your data
• Receive your data in a portable format, where technically feasible
• Object to processing based on our legitimate interest
• Withdraw consent at any time, where processing is based on consent (e.g. analytics cookies)
• Lodge a complaint with your local data protection supervisory authority

To exercise any of these rights, contact us using the details in Section 13. We'll respond within the timeframes required by law.

If you're a resident of California or another U.S. state with a comprehensive privacy law (e.g. CCPA/CPRA), you generally have the right to know what personal data we've collected about you, request its deletion, request correction of inaccurate data, and opt out of the "sale" or "sharing" of your data.

We do not sell personal data, and we do not share it for cross-context behavioral advertising. We will not discriminate against you for exercising any privacy right. To make a request, contact us using the details in Section 13.

When you first visit web25.io, we show a banner letting you choose what to allow:

• Necessary — always on. These let the site function (for example, remembering your cookie preference itself) and don't require consent under GDPR since they're essential to the service you've requested.
• Analytics — off by default. Only enabled if you choose "Accept All" or turn it on under "Preferences." Used to understand, in aggregate, how visitors use the site.

Your choice is stored in your browser's local storage. You can change your mind at any time by clearing your browser's site data for web25.io, which will bring the consent banner back on your next visit.

You can also manage or delete cookies directly through your browser's settings: Chrome, Firefox, Safari, and Edge each publish their own instructions. Blocking necessary cookies may prevent parts of the site (like the discovery-call booking drawer) from working correctly.

This site isn't directed at children, and we don't knowingly collect personal data from anyone under 16. If you believe a child has provided us with personal data, contact us and we'll delete it.

We use reasonable technical and organizational measures to protect the personal data we hold, including relying on reputable, security-conscious infrastructure providers. No method of transmission or storage is 100% secure, and we can't guarantee absolute security.

We may update this policy from time to time — for example, if we add a new tool or change a provider. We'll update the "Last updated" date at the top of this page when we do. Material changes affecting how we use previously collected data will be communicated more prominently where required by law.

Questions about this policy, or want to exercise any of the rights above? Reach out:

Web25 s.r.o.
Lubinská 18, 811 03 Bratislava, Slovak Republic
Company reg. no. 51078333

Web25 LLC
30 N Gould St Ste R, Sheridan, WY 82801, United States

Either entity can be reached at support@web25.io, or via the contact form on this site.