Skip to content

Privacy

First published: 2019 · Last updated: 10 November 2026

This policy explains what personal data is processed when you visit pkapps.xyz, why, and what your rights are. I've kept it short because the site collects very little.

1. Who is responsible

PKapps, sole proprietorship of Kyriakos P., Greece
GEMI (General Commercial Registry) No. 148871103000
Contact: contact [at] pkapps [dot] xyz or the contact page

2. In short

  • No analytics, no advertising, no tracking cookies.
  • The only optional third-party tool is the Landbot chat on the Contact page, and it loads only if you allow it.
  • I receive personal data only when you contact me (chat, email, booking a call), or when we work together (invoices, payments, project files).

3. What data is processed, and why

3.1 Visiting the website (hosting and security)

The site is hosted on Cloudflare (Cloudflare, Inc., USA). To deliver pages and protect the site from attacks, Cloudflare processes technical data such as your IP address, browser type, the page requested and the time of the request.

  • Purpose: delivering the website securely.
  • Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in operating a secure website.
  • Retention: short-lived technical logs, kept by Cloudflare under its own retention rules; I don't keep a copy.
  • Transfers outside the EU: Cloudflare is certified under the EU–US Data Privacy Framework and uses Standard Contractual Clauses. Privacy policy: cloudflare.com/privacypolicy

3.2 Your cookie choice

When you answer the cookie bar, your choice (which categories you allowed, and when) is saved only in your own browser (local storage). It is never sent to me or anyone else; its only job is to let the site respect your choice without asking on every page. It's kept for 182 days, after which you're asked again. You can change or withdraw it any time through “Cookie settings” at the bottom of every page, or by clearing your browser's site data.

  • Legal basis: this storage is strictly necessary to respect your choice, as e-privacy rules require, so it needs no separate consent.

3.3 The chat on the Contact page (Landbot), only with your consent

The chat is provided by Landbot (HELLO UMI S.L., Spain). It loads only after you allow the “Chat” category. Landbot may set its own cookies, and stores what you type in the chat (for example your name, email and message) so I can reply.

  • Purpose: answering your enquiry.
  • Legal basis: your consent (Art. 6(1)(a) GDPR) to load the chat; steps prior to a possible contract (Art. 6(1)(b)) for answering your enquiry.
  • Retention: up to 24 months after our last contact, unless we start working together.
  • You can withdraw consent at any time via “Cookie settings”; the chat then stops loading.
  • Privacy policy: landbot.io/privacy

3.4 Booking a call (Vectera)

The “Let's Talk” buttons take you to my booking page on Vectera, an external service. When you book, Vectera processes the details you enter (name, email, chosen time) and shares them with me so we can meet.

  • Purpose: scheduling and holding the call.
  • Legal basis: steps prior to a contract at your request (Art. 6(1)(b) GDPR).
  • Vectera's own privacy policy applies on its pages: vectera.com/policies/privacy-policy

3.5 Writing to me by email

If you email me at contact [at] pkapps [dot] xyz, I receive your email address and whatever you write. Email is hosted by Google Workspace (Google Ireland Ltd.).

  • Purpose: replying and, if we work together, providing the service.
  • Legal basis: steps prior to a contract / performance of a contract (Art. 6(1)(b) GDPR).
  • Retention: 24 months after our last contact; longer only where tax or accounting law requires it.

3.6 When we work together (clients)

If you become a client, I use the following services to run the project and the business side of it.

Google Workspace (Google Ireland Ltd.): email, shared documents and files for your project.

  • Data: your name, email, and the content and files we exchange.
  • Legal basis: performance of our contract (Art. 6(1)(b) GDPR).
  • Retention: for the duration of the project and 24 months after, unless you ask me to delete files earlier.
  • Privacy policy: policies.google.com/privacy

Elorus (Elorus P.C., Greece): invoicing and bookkeeping.

  • Data: your name or company name, billing address, VAT number (ΑΦΜ), and the amounts and services on your invoices.
  • Legal basis: performance of our contract (Art. 6(1)(b)) and my legal obligations under Greek tax law (Art. 6(1)(c) GDPR).
  • Retention: as long as Greek tax and accounting law requires.
  • Privacy policy: elorus.com/en/privacy-policy

Stripe (Stripe Payments Europe, Ltd., Ireland): online card payments, when you pay an invoice or a deposit online.

  • Data: your name, email, and payment details. Card numbers are handled by Stripe only; I never see or store them. I receive a confirmation of the payment (amount, date, last four digits of the card).
  • Legal basis: performance of our contract (Art. 6(1)(b)), my legal obligations (Art. 6(1)(c)), and fraud prevention (Art. 6(1)(f) GDPR).
  • Retention: as required by tax and accounting law; Stripe keeps its own records under its policy.
  • Transfers outside the EU: Stripe may process data in the USA under the EU–US Data Privacy Framework and Standard Contractual Clauses.
  • Privacy policy: stripe.com/privacy

3.7 Links to other sites

The site links to external services, such as my Google Business Profile (reviews). Their own privacy policies apply once you leave pkapps.xyz.

4. Who receives your data

Only the service providers named above, acting on my behalf (hosting, chat, booking, email and files, invoicing, payments), and, where the law requires it, my accountant and the Greek tax authorities. I don't sell or rent personal data, and I don't use it for advertising.

5. Your rights

Under the GDPR you can ask me to:

  • access the data I hold about you;
  • correct inaccurate data;
  • delete your data;
  • restrict or object to processing;
  • receive your data in a portable format;
  • withdraw consent at any time (this doesn't affect processing done before you withdrew).

To exercise any of these, write to contact [at] pkapps [dot] xyz. I'll reply within one month. Note that I can't delete data I'm legally required to keep (for example invoices), but I'll tell you what that covers.

You also have the right to complain to the Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα), Kifisias 1–3, 115 23 Athens: dpa.gr

6. Children

This site isn't aimed at children under 16, and I don't knowingly collect their data.

7. Changes to this policy

If the way the site handles data changes, for example a new tool is added, I'll update this page and its “Last updated” date.