Privacy Policy

1. Who this policy covers

This Privacy Policy applies to kryston.net, operated by Ilija Stoev, trading as Kryston ("Kryston", "we", "us"), based in North Macedonia. It covers this website only. Data processed on behalf of a client under a signed engagement or Data Processing Agreement is governed by that agreement instead.

2. What we collect

kryston.net does not use cookies, analytics, tracking pixels or any other tracking technology, and collects no personal data automatically from visitors. The only personal data we receive is what you choose to send us directly, for example by emailing contact@kryston.net or privacy@kryston.net or by submitting the audit request form on this site: typically your name, email address, company or website, and whatever you write in your message. Form submissions are stored on the server that hosts this site and are used only to reply to your request.

3. Why we process it, and our lawful basis

We process the information you send us to respond to your inquiry and, where relevant, to discuss or deliver services. Our lawful basis is legitimate interest in operating our business and responding to people who contact us, or, where we go on to enter an agreement with you, the performance of that contract.

4. Who we share it with

We don't sell personal data. It may be visible to the tools listed as third-party subprocessors on our Trust Center (currently: our hosting provider and our email provider), to the extent operating email and hosting requires it. We don't share it with anyone else unless required by law.

5. International transfers

Some of the providers above may process data outside your country, including in the United States. Where that happens, we rely on the safeguards those providers themselves have in place for cross-border transfers. If you'd like more detail on a specific provider, ask us at privacy@kryston.net.

6. How long we keep it

Correspondence is kept for the duration of the engagement plus 12 months, unless a client agreement states otherwise, after which it's deleted unless we're required to keep it longer (for example, for tax or accounting records) or you ask us to delete it sooner.

7. Your rights

Depending on where you live, you may have the right to request access to, correction of, or deletion of your personal data, to object to or restrict its processing, or to receive a copy of it in a portable format. To exercise any of these, email privacy@kryston.net. We'll respond within one business day of confirming your request.

8. Children

This website is directed at business professionals and isn't intended for children. We don't knowingly collect data from anyone under 16.

9. Changes to this policy

If this policy changes materially, the "last updated" date at the top of this page will change. We'd encourage checking back occasionally if you've corresponded with us before.

10. Contact

Questions about this policy, or to exercise any of the rights above: privacy@kryston.net.