Privacy Policy

This policy explains what personal data Guralnik.Dev collects through this website, why, and what rights you have over it. It applies regardless of where you are visiting from, including the European Union and United Kingdom.

1. Who is responsible

The data controller for this website is Elias Guralnik, trading as Guralnik.Dev, based in Israel. For any privacy question or request, contact contact@guralnik.dev.

Israel benefits from a European Commission adequacy decision, meaning it is recognized as providing a data protection standard equivalent to the EU's. No additional safeguards are required to transfer data here from the EU/EEA.

2. Data collected through the contact form

When you submit the contact form, we collect the information you enter: name, email address, project type, budget range, and your message. We use this solely to respond to your inquiry and, if you proceed, to prepare and deliver a quote or the contracted services.

The legal basis is Art. 6(1)(b) GDPR (steps taken at your request prior to entering into a contract) or, where no contract follows, our legitimate interest in responding to inquiries (Art. 6(1)(f) GDPR). We keep this data only as long as needed to handle your inquiry or fulfil a resulting contract, and delete it afterward unless we're legally required to retain it longer (e.g. for tax records).

3. Project intake and client data (planned)

We plan to introduce a more detailed project-intake form (reached via “Start a Project”) for clients moving forward with an engagement. It will collect more detailed information needed to scope and deliver a project — for example business details, project requirements, or account credentials you choose to share for the work itself.

That data will be used exclusively to deliver the contracted services, will not be sold or shared with third parties beyond what's strictly necessary to do the work (e.g. a hosting or payment provider you've asked us to integrate with), and will be retained only for as long as the engagement and any legal retention duty requires. We will update this policy with the specifics before that form goes live.

4. Cookies and analytics

This site does not currently run any analytics, advertising, or tracking scripts. The only thing stored locally in your browser today is your cookie-consent choice itself (via localStorage, not a tracking cookie).

We plan to introduce website analytics in the future — potentially a self-hosted/first-party analytics tool and/or Google Analytics — to understand how visitors use the site. When that happens:

• It will only run after you actively consent via the cookie banner (Art. 6(1)(a) GDPR); nothing will load beforehand.
• You will be able to withdraw consent at any time via “Cookie Settings” in the footer.
• This policy will be updated first to name the specific tool(s), what data they collect, and, for any non-EU processor, the transfer safeguard relied on (e.g. Standard Contractual Clauses).

5. Your rights

Under the GDPR (and equivalent rights under Israel's Privacy Protection Law for visitors based there), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Restrict or object to certain processing
• Receive your data in a portable format
• Withdraw consent at any time, without affecting past processing
• Lodge a complaint with your local data protection authority

To exercise any of these rights, email contact@guralnik.dev.

6. Security

We use reasonable technical and organizational measures to protect the data we hold. No method of transmission or storage is ever completely secure, but we don't take that as an excuse to be careless with it.

7. Children

This site and our services are directed at businesses and adults. We don't knowingly collect data from children.

8. Changes to this policy

We'll update this page as the site and services evolve — particularly once analytics or the project-intake form go live. The date at the top always reflects the latest revision.