Privacy.
Last updated 02-09-2026.
Who we are
This site is operated by Anđela Stojanović PR Specijalizovane dizajnerske delatnosti i grafički dizajn The Shadow Legacy Niš, a Preduzetnik (sole proprietorship) registered in Republic of Serbia. We publish only Niš, Serbia as our business locality here; the street address, registration number, and tax number are not published on the site.
What we collect
When you submit the application, we collect your name, email, company, role, and the answers you give us. We also receive limited technical data needed to run and protect the site, such as approximate region, device type, and request metadata. When you visit, our analytics records usage and measurement data such as pages, referrer, approximate region, and device type.
Why we collect it
We use application data to reply to you and assess whether the engagement fits. The basis is taking steps at your request before a possible contract and our legitimate interest in running the studio responsibly. We use technical data for site operation, security, and lawful business records. Google Analytics is used only after consent where applicable; Vercel Analytics is used for aggregated service measurement.
Who sees it
Vanja and Andjela. HubSpot processes applications as our CRM. Resend sends our email. Vercel hosts the site and its analytics. Google Analytics may process measurement data when enabled. Each provider processes data under its own terms and our instructions where it acts as a processor. We do not sell your data, we do not share it with advertisers, and we do not add you to a mailing list you didn't ask for.
Where it goes
The Shadow Legacy operates from Serbia. HubSpot, Resend, Vercel, and Google may process data in the United States, the European Union, or another country where they or their subprocessors operate. Where applicable law restricts a transfer, provider terms may rely on an adequacy decision, standard contractual clauses, or another safeguard; the mechanism depends on the service, account configuration, and destination. Sending an application is not conditional on consenting to an analytics transfer; analytics consent is requested separately where required.
How long we keep it
Applications are retained for two years for follow-up, qualification, and accountability. Ask us to delete yours sooner and we will act within thirty days, subject to any data we must retain by law. Provider backups and operational records may follow the provider's documented deletion schedule.
Your rights
You can ask what we hold, ask for a copy, ask for corrections, ask us to erase it, restrict processing, object where the law allows, or request portability. You can withdraw Google Analytics consent at any time for future processing using . Write to hello@theshadowlegacy.com and we'll respond within thirty days, or tell you why we cannot and how to complain.
If you believe we have mishandled your data, contact us first at hello@theshadowlegacy.com. You may also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection, or another supervisory authority competent for your circumstances.
Cookies
We use what is needed to run the site, including a region cookie, and to measure traffic. Vercel Analytics does not set cookies. Google Analytics may set measurement cookies only when enabled and, in the EEA and UK, only after you allow it from the cookie notice. No advertising cookies, no cross-site tracking, and no third-party advertising pixels.
Changes
If this policy changes, the date above changes with it.