Privacy policy
Last updated: 31 December 2025
I respect your privacy and I don’t take your data lightly. This policy explains what information I collect, why I collect it, and what rights you have under the General Data Protection Regulation (GDPR).
If anything feels unclear, you’re always welcome to get in touch.
Who is responsible for your data
bolkas.com is operated by:
Apostolos Bolkas
Digital strategist and consultant
Website: bolkas.com
Email: hello@bolkas.com
I am the data controller for any personal data processed through this website.
What data I collect
I collect only the data that’s necessary.
This may include:
- Your name and email address, when you contact me or subscribe
- Any information you choose to share in a message
- Limited technical data needed to keep the site secure and running
This website does not use tracking cookies.
Website analytics
This website uses Cloudflare Web Analytics.
Cloudflare Analytics:
- Does not use cookies
- Does not track users across websites
- Does not create personal profiles
- Collects only aggregated and anonymised usage data
The purpose of this data is simply to understand how the website is used and to improve its performance.
How and why your data is used
Your data is used to:
- Respond to enquiries and messages
- Provide requested information or services
- Communicate with you, where you’ve chosen to do so
- Meet legal and contractual obligations
I don’t use your data for advertising or profiling.
Legal basis for processing
Under GDPR, your data is processed on the basis of:
- Consent, when you contact me or opt in to communication
- Legitimate interest, to respond to enquiries and maintain the website
- Contract, when delivering agreed services
- Legal obligation, where required by law
How long data is kept
I keep personal data only for as long as it’s genuinely needed:
- Contact enquiries. Up to 12 months
- Client-related data. For the duration of our work and any required legal retention periods
- Analytics data. As defined by Cloudflare and stored only in aggregated form
Who your data is shared with
I do not sell or trade personal data.
Data may be processed by trusted service providers, strictly where necessary, such as:
- Website hosting and infrastructure providers
- Email or scheduling tools used to communicate with you
All providers are selected for GDPR compliance and process data under appropriate safeguards.
International data transfers
Some service providers may process data outside the EU. Where this happens, appropriate safeguards, such as Standard Contractual Clauses, are in place.
Your rights
You have the right to:
- Access your personal data
- Correct inaccurate data
- Request deletion of your data
- Restrict or object to processing
- Withdraw consent at any time
- Lodge a complaint with a supervisory authority
To exercise your rights, email hello@bolkas.com.