Privacy Policy
Last updated: November 6, 2026
Globalit DOO
Slovačka 19, 81000 Podgorica, Montenegro
PIB: 03417492 · PDV: 30/31-26288-6
1. Data controller and contact
Globalit DOO, Slovačka 19, 81000 Podgorica, Montenegro, is responsible for personal data we process for this website, inquiries and our product/customer relationships. PIB: 03417492. PDV: 30/31-26288-6. You can contact us about privacy through our contact form or by post at this address.
2. Information we collect
When you send an inquiry, we collect your name, reply email, optional organization, selected topic and message. Do not send passwords, private keys, payment-card numbers or sensitive project documents through the form. We may keep related correspondence to answer your request and manage a resulting engagement.
The website processes technical request information to serve pages and protect the service. Hosting access logs may include network address, time, requested page, browser information and response status. The form’s abuse-control database stores a keyed hash of the network address rather than the raw address, plus attempt times and short-lived challenge records.
A refund request also collects any order reference, product, payment date and cancellation preference you choose to provide, so we can locate the payment and handle your request. Additional information and a reason for refund are optional.
For digital-product purchases, we may receive the contact, transaction, subscription and entitlement information necessary to deliver access, support customers and reconcile orders. The precise data depends on the product and checkout. Full payment-card details are handled by the payment service, not collected by our contact form.
3. Purposes and legal grounds
We use inquiry and order information to take steps you request before a contract, perform our contractual obligations and provide support. We process proportionate technical data for our legitimate interests in operating a secure website and preventing abuse, balanced against your rights. Tax, accounting and legally required disclosures rely on applicable legal obligations. Where consent is legally required for an optional activity, we seek it separately and you may withdraw it without affecting earlier lawful processing.
4. Paddle and other recipients
If you purchase through Paddle, Paddle processes transaction and billing data as the Merchant of Record under its own Privacy Notice. Paddle and Globalit DOO have distinct responsibilities for their respective processing; this policy does not replace Paddle’s notice. Use Paddle’s support portal for questions about its billing records and payment processing.
We share data only as needed with providers of hosting, email delivery and support infrastructure, professional advisers, and authorities where required by law. If Cloudflare Turnstile is enabled, the browser communicates with Cloudflare to verify that a submission is not abusive. Provider access must be limited to its purpose and subject to appropriate contractual or legal protections. We do not sell personal data.
5. Cookies, media and external websites
The contact form uses an essential session cookie for security and submission confirmation. It is not used for advertising. The current website does not load advertising or analytics scripts, and photographs are served from our own site. External news and credit links connect to other websites only when followed. Paddle checkout and any enabled verification service may use their own technologies, described in their notices. Any future non-essential tracking requiring consent must remain inactive until that consent is obtained.
6. Retention and security
We retain correspondence and customer records for as long as needed to handle the inquiry, perform the relationship, resolve disputes and meet applicable recordkeeping duties. Retention depends on the record’s purpose, contractual requirements and legal limitation periods, rather than an indefinite right to retain everything. Paddle keeps its own records under its policy and legal duties.
Form challenges expire after one hour. The application removes challenge records older than one hour and abuse-attempt records older than 24 hours during subsequent form activity. Separate server logs and email records follow their own operational and legal retention requirements. We use access restrictions, encrypted production transport and proportionate technical safeguards, but no internet service can guarantee absolute security.
7. International processing
We are based in Montenegro and work internationally. Providers may process data in other countries. Any transfer subject to data-protection restrictions must use the applicable legal mechanism and safeguards, such as approved contractual clauses where required. Contact us for information about recipients and safeguards relevant to your inquiry or product before providing sensitive information.
8. Your rights and complaints
Depending on the law that applies, you may request access, correction, erasure, restriction or portability of your personal data, object to certain processing, and withdraw consent for processing based on it. These rights have legal conditions and exceptions. Use the contact form or our postal address; we may request proportionate information to verify your identity. We respond within the applicable legal timeframe and explain any lawful restriction.
You may complain to the competent data-protection authority in Montenegro or another authority available under applicable law, including the authority in your country of residence where relevant. Our website and business offerings are intended for adults and organisational users; do not knowingly submit a child’s personal information. Contact us if such information has been provided. Material changes to this policy will be dated and notified where legally required.
Paddle documents: Buyer Terms · Refund Policy · Privacy Notice