Privacy Policy

How DrNiki.co handles personal data.

Last updated: 12 July 2026. This policy explains what data is collected when you send a project request, use a free tool, contact DrNiki.co, or consent to analytics.

Controller

Controller: DrNiki.co. Contact: [email protected]. Business/legal details can be provided on invoices, contracts, or written project proposals.

Data collected

When you submit or email a brief, the data may include your name, email, phone, company, project goals, competitor links, preferred colors, budget range, timeline, and any notes you provide.

Purposes and lawful bases

  • Replying to enquiries and preparing quotes: pre-contractual steps.
  • Project delivery and support: contract performance.
  • Accounting, tax, legal record keeping: legal obligations.
  • Security, abuse prevention, service improvement: legitimate interests.
  • Analytics and behavior measurement: consent.

Analytics and behavior measurement

If you accept cookies, Google Analytics may receive page views and interaction events such as CTA clicks, package choices, scroll depth, portfolio clicks, language changes, and form progress. These analytics events do not send your name, email, phone, business name, or free-text brief fields. Microsoft Clarity or similar behavior tools may be added only after consent and are used to understand usability, not to sell personal data.

Free SEO audit tool

When you run the SEO audit, the public website address you enter is fetched and inspected to produce the report. The address is used for that request and is not sent to Google Analytics. To prevent automated abuse, the service may keep a one-way hash derived from the requesting IP address for up to 15 minutes. The tool does not request a name, email, or phone number.

Payments

If online payments are enabled, card and payment details are processed by the payment provider, such as Stripe or another selected provider. DrNiki.co does not intentionally store full card numbers on this website.

Sharing and processors

Data may be processed by hosting, email, analytics, payment, accounting, project-management, or automation providers when needed. Access is limited to what is necessary for the relevant service. Personal data is not sold.

Retention

Enquiries are normally kept for up to 24 months unless a project, legal obligation, dispute, or accounting rule requires longer retention. You can request deletion when retention is no longer required.

Your rights

Under GDPR and similar privacy laws where applicable, you may request access, correction, deletion, restriction, portability, objection to processing, and withdrawal of consent where processing is based on consent. Email [email protected].

Complaints

If you are in the EEA, you may complain to your local data protection authority. In Bulgaria, the authority is the Commission for Personal Data Protection.

International transfers

Some providers may process data outside the EEA. Where this happens, appropriate safeguards should be used, such as Standard Contractual Clauses or equivalent lawful mechanisms.

Children

This website and the services offered here are intended for business users and are not directed to children.

Automated decisions

This website does not make legal or similarly significant automated decisions about visitors.

Security

Reasonable technical and organizational measures are used to protect personal data. No internet service can be guaranteed completely secure.