Privacy Policy

This website (half-half-man.com) is run by Half Half Man, a web development and cybersecurity studio based in Greece. Half Half Man is the controller of the personal data described in this policy. For any privacy question or request, email contact@half-half-man.com.

We only collect what we need. Contact form: your name, email address, subject, project type, budget range, timeline and message, plus technical details sent with the form (time of submission, browser type and the page you came from). Call bookings: the details you enter in the Calendly scheduler, such as your name, email and answers to booking questions. Analytics, only if you accept analytics cookies: pages visited, approximate location, device and browser type, and how you found the site, linked to a random identifier. Technical data: like any website, our hosting provider processes your IP address and request details to deliver pages and protect the site from abuse.

To answer your enquiry and to prepare or provide our services (Art. 6(1)(b) GDPR: steps taken at your request before a contract, and performance of a contract). To understand how the site is used and improve it, only with your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time. To run the site securely and prevent abuse (Art. 6(1)(f) GDPR: our legitimate interest). We do not sell your data, use it for advertising, or make automated decisions about you.

We use trusted providers that process data on our behalf: Cloudflare (hosting, content delivery and security), Formspree (delivers contact form messages to our inbox), Calendly (call scheduling), Google Analytics (website statistics, only with your consent) and Sanity (blog content). Each provider only receives the data it needs for its task.

Some of these providers are based in, or use servers in, the United States. When personal data leaves the European Economic Area, the transfer relies on the EU–US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses.

Enquiries and related emails: as long as needed to handle your request, and up to 2 years after our last contact, unless a contract requires longer (for example for invoicing and accounting). Analytics data: deleted automatically after 14 months. Booking details: kept in Calendly only as long as needed for the meeting and follow-up.

The site stores two small items in your browser that it needs to work: your cookie choice and your preferred language. Google Analytics cookies (_ga, _ga_*) are set only if you accept analytics. The Calendly scheduler on the contact page is provided by Calendly and may set its own cookies when it loads. You can change your choice at any time via “Cookie settings” at the bottom of every page.

Under the GDPR you have the right to access your data, to have it corrected or deleted, to restrict or object to its processing, to data portability, and to withdraw consent at any time without affecting earlier processing. To exercise any of these rights, email contact@half-half-man.com; we reply within one month. You can also lodge a complaint with the Hellenic Data Protection Authority (www.dpa.gr).

The site is served only over HTTPS with strict security headers, we collect as little data as possible, and access to enquiries is limited to the people who handle them.

We may update this policy when our services or the law change. The date at the top shows the current version, and significant changes will be highlighted on this page.