Web Design & Development
+
Legal

Privacy Policy

This Privacy Policy explains how Ocureps handles personal data when you visit our website, contact us, or enquire about our services, and the choices and rights you have.

Last updated: 4. November 2026

1. Who we are

Ocureps is the brand name used by Uros Janjic, an independent freelancer providing web design, WordPress development, and website maintenance services.

Uros is responsible for the processing of personal data described in this Privacy Policy. In this policy, “we”, “us”, and “our” refer to Uros working under the Ocureps brand.

This policy explains how personal data is handled when you visit ocureps.com or contact Ocureps about its services.

For privacy-related questions or requests, contact hello@ocureps.com.

2. Personal data we collect

Information you give us

We collect the information you provide when you contact us. Our website has two enquiry forms:

  • Project enquiry form: your name, email address, and the service you are interested in (required), and, if you choose to add them, your business name, current website address, and project details.
  • Website maintenance enquiry form: your name, email address, website address, and a description of what you need help with (all required).

If you email us or reply to our emails, we receive your email address, your name as it appears in your email, and anything you include in your messages and attachments.

Please do not include passwords, payment-card details, or sensitive personal information in enquiry forms.

Enquiries through Facebook and Instagram

If you send us an enquiry through a lead form in one of our Facebook or Instagram ads, Meta collects the information you enter, such as your name, email address, phone number if requested, and your answers to our questions, and makes it available to us. Some fields may be pre-filled from your Meta account; you can review and change them before sending the form.

Information recorded with a form submission

When you send an enquiry form, the form software also records your IP address, information about your browser and device (the user-agent string), the address of the page you sent the form from, and the date and time of your submission.

Technical and security data

Whenever you visit our website, it receives your IP address and basic request information, such as the page requested and your browser type. Our security firewall uses this information to check incoming requests and block attacks, and it keeps a log of blocked or suspicious requests and login attempts (see section 8).

Our hosting provider, Hostinger, also keeps server logs, such as IP addresses, request times, requested pages, and browser information, to operate and secure its service. Hostinger handles these logs under its own rules, described in the Hostinger Privacy Policy.

The table below explains why we use personal data and the legal basis we rely on for each purpose.

PurposeData involvedLegal basis
Responding to an individual who asks about our services with a view to entering into a contractName, email address, and the details you send in a form or emailSteps taken at your request before entering into a contract
Responding to enquiries and managing correspondence with people who contact us on behalf of a businessName, business email address, business name, and the details you sendOur legitimate interest in responding to business enquiries and managing business correspondence
Operating the website and protecting it against attacks and misuseIP address, browser information, request details, and security logsOur legitimate interest in keeping the website secure and available
Recording technical details with form submissionsIP address, user-agent string, page address, date and timeOur legitimate interest in identifying spam and misuse of our enquiry forms

The same purposes and legal bases apply to enquiries you send us through Facebook and Instagram lead forms. We use these details only to respond to your enquiry and do not add them to marketing lists or advertising audiences.

We do not use analytics tools or advertising pixels on our website, and our enquiry forms do not subscribe you to marketing emails.

Some fields in our enquiry forms are required, as listed in section 2, and a form cannot be sent until they are completed. Without the necessary contact or project details, we may be unable to respond to your enquiry.

4. How enquiries are handled

When you submit an enquiry, we use the information to review your request and communicate with you.

When you send one of our website enquiry forms:

  • your submission, including the technical details recorded with it (see section 2), is stored in our website’s database, which is hosted by Hostinger. Stored submissions are not deleted automatically (see section 8);
  • an email notification containing your submission and those technical details is sent to our business inbox, hello@ocureps.com, which is hosted by Hostinger. A copy of each notification is also sent to a Gmail inbox we use, which is provided by Google. The reply-to address is set to the email address you entered, so we can answer you directly;
  • the forms are not connected to a CRM, mailing list, or marketing automation service, and sending an enquiry does not subscribe you to marketing emails.

Our forms do not use a third-party spam-protection service.

Emails you send to hello@ocureps.com are received through our business email, which is hosted by Hostinger.

Access to stored enquiry submissions and to the inboxes that receive enquiries is restricted to the operator of Ocureps.

5. Cookies, browser storage, and third-party content

Cookies and browser storage

Our website does not set cookies when you browse it or open an enquiry form. Its scripts store two small items in your browser’s session storage: a WordPress check of whether your browser supports emoji, and a marker our page builder uses for the current browsing session. Session storage stays in your browser, is not sent to us, and is cleared when you close the tab.

We do not use analytics tools, advertising pixels, embedded videos, maps, or social media widgets, so we do not display a cookie consent banner.

Google Fonts

Our website loads fonts through Google Fonts. When your browser requests these resources, Google receives your IP address and technical information about the request. Google explains how it handles these requests in its Google Fonts privacy information and the Google Privacy Policy.

Social media links

Our footer links to our Instagram and Facebook profiles. These are ordinary links, not embedded widgets: Instagram and Facebook receive information from your visit only if you follow a link, and their own privacy policies then apply.

6. Service providers and other recipients

We use service providers to support our website and business communications:

  • Hostinger provides our website hosting and business email services, including hello@ocureps.com. Our website database, including stored enquiry submissions, is hosted through Hostinger. Hostinger describes its processing in its Privacy Policy and Data Processing Agreement.
  • Google delivers the web fonts described in section 5 and provides the Gmail inbox that receives a copy of each enquiry notification (see section 4). Google describes its processing in the Google Privacy Policy.
  • Defiant, Inc. provides Wordfence, the security plugin that runs on our website. The plugin is set to take part in the Wordfence Security Network: when it detects attacks such as repeated failed login attempts, it shares details of those attempts, including the IP address involved, with Wordfence. Defiant describes its processing in the Wordfence Privacy Policy.
  • Meta (Facebook and Instagram) collects the information you enter in our ad lead forms and makes it available to us. Meta also processes data for its own purposes, as described in the Meta Privacy Policy.

Other software that runs on our website, such as WordPress, Elementor, TranslatePress, and Rank Math SEO, processes data on our hosting server as part of operating the site.

7. International data transfers

Some of our service providers may process personal data outside Serbia. This includes Google (web fonts and the Gmail inbox that receives copies of enquiry notifications) and Defiant, Inc. (Wordfence Security Network), Meta (lead forms in our Facebook and Instagram ads), and may include Hostinger, depending on where the systems for our website and email are located.

You can contact us at hello@ocureps.com.

8. How long we keep data

We keep personal data for the periods below.

  • Enquiries and related email correspondence: we keep enquiries, related emails, and copies of enquiry notifications for up to 12 months after our last contact with you, and then delete them.
  • Enquiry submissions stored on our website: we delete these within 3 months of receiving them. A copy remains in our email inbox for the period above.
  • Enquiry notification emails in our business inbox and the Gmail copy: we keep these for the same period as the enquiries themselves, up to 12 months after our last contact with you, and then delete them from both inboxes.
  • Enquiries from Facebook and Instagram lead forms: we keep the copies we receive for the same period as other enquiries. Meta keeps its own copy under its own rules, described in the Meta Privacy Policy.
  • Security logs on our website: our security plugin keeps its log of blocked or suspicious requests for no more than 30 days (and no more than 2,000 entries), after which older entries are removed automatically.
  • Hosting server logs: our hosting provider, Hostinger, keeps server logs to operate and secure its service, under its own retention rules described in the Hostinger Privacy Policy.
  • Backups: Hostinger makes automatic backups of our website and keeps them for up to six weeks. When we delete a record, a copy can remain in these backups until they expire.

When we delete an active record, copies can remain in backups until those backups expire.

9. How we protect data

We use technical and organisational measures appropriate to the personal data we handle. These measures are intended to reduce the risk of unauthorised access, loss, or misuse. For example, our website is served over an encrypted HTTPS connection and uses a security firewall and login protection for administrator accounts. No internet-based system can be guaranteed completely secure.

10. Your rights

Under the applicable personal data protection law, you may request access to your personal data and a copy of it, correction of inaccurate data, and completion of incomplete data. Where the relevant legal conditions are met, you may also request erasure, restriction of processing, or data portability.

Where we process personal data on the basis of legitimate interests, you may object to that processing on grounds relating to your particular situation. If personal data is processed for direct marketing, you may object to that use at any time.

Where processing relies on consent, you may withdraw your consent at any time. This does not affect the lawfulness of processing carried out before withdrawal.

To exercise your rights, contact hello@ocureps.com. We may request information reasonably necessary to verify your identity. These rights are subject to the conditions and exceptions provided by applicable law.

You may lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia. Information about the complaint procedure is available at poverenik.rs. You do not need to contact us before lodging a complaint.

11. Automated decisions

We do not make decisions about you based solely on automated processing that produce legal effects or similarly significantly affect you. Our security firewall automatically blocks requests that look like attacks; this protects the website and is not used to make decisions about you.

12. Updates to this policy

We may update this Privacy Policy when our practices or applicable requirements change. The “Last updated” date identifies the latest version. Where required, we will provide additional notice of material changes.

13. Contact

For questions about this Privacy Policy or the handling of your personal data, contact:

Uros Janjic, Ocureps
hello@ocureps.com
Belgrade, Serbia

Start a project

Tell us a little about your business and what you need. We'll reply by email.