Privacy policy.

Who is responsible

COREWEY is a registered business based in Serbia, operated by Mark Bakos, who is responsible for the personal information covered by this policy. Registration number: 68290929. Tax identification number (TIN): 115341396.

This policy covers the COREWEY website, its Opportunity Snapshot and Business Technology Assessment, and information you send through the contact process. It does not cover unrelated applications or all software we build for clients.

Visiting this website does not, by itself, provide consent to optional processing.

Information you provide

The contact form asks for your name, email address, project need, current stage and project description. Company, timeline and budget context are optional. You may include an Opportunity brief.

The form prepares an email draft in your browser. It does not submit your information to a website database. Opening or copying the draft does not send it to us. If you send it through your email application, we receive the message and any included brief.

We use this information to answer your inquiry, discuss relevant services and manage business correspondence. We also intend to use contact details for promotional outreach, as explained below.

Please avoid including passwords, sensitive personal records or confidential information about other people.

Opportunity tools and browser storage

The tools process your selected business goals, answers and numerical assumptions in your browser to generate recommendations and a project brief. You do not need to provide a name or email to see results. Answers are not sent to an external AI service or uploaded to a contact database by the tools.

Tool progress and generated briefs use browser session storage to preserve your work and carry context between pages in the same tab. This normally lasts for the tab’s page session and survives reloads; browser session restoration may preserve it longer. You can clear it using your browser’s site-data controls. Without storage, progress and context may not carry between pages.

Snapshot-to-Assessment links include selected goal and context identifiers in the URL. They do not include your name, email, free-text inquiry or edited numerical assumptions. URLs can appear in browser history and infrastructure logs.

If you choose to email a brief, its contents are included in your email draft. The tools provide business recommendations; they do not make decisions about you with legal or similarly significant effects.

Website traffic and analytics

We use website analytics to understand which pages people visit, which countries visits come from and how to improve the website. Analytics can include visit timestamps, page URLs, referring pages, approximate geographic information and browser/device information.

Approximate location is derived from website requests. The website does not request your device’s precise GPS location. Delivering and protecting the website also involves technical information such as IP addresses and browser request headers.

Our analytics service provides aggregate reporting without third-party tracking cookies and uses a short-lived, request-derived visitor identifier. Its visitor-session lifespan is 24 hours; this is not a promise that all analytics records or reports are deleted after 24 hours. Analytics reporting and storage depend on the service’s retention arrangements.

The website does not display advertisements. Browser storage used by the Opportunity tools is separate from website analytics.

Purposes and legal bases

Where applicable law requires a legal basis, responding to business inquiries and maintaining correspondence relies on our legitimate interests in discussing and providing our services, balanced against your interests and rights. Where you personally request steps towards a contract with us, necessary pre-contractual processing may apply.

Website delivery, security, useful tool functionality and traffic measurement serve our interests in operating and improving the website. Consent must be obtained where applicable law requires it for particular analytics, storage or marketing activities. Any mandatory recordkeeping must be based on the specific legal obligation that requires it.

You do not have to send an inquiry. Required draft fields help prepare a useful message; you can also email us directly. Without sufficient contact or project information, we may be unable to respond meaningfully.

Replies and promotional communications

We may use contact information you provide for follow-up about your inquiry and promotional communication about COREWEY’s services. A reply addressing your requested project is distinct from an ongoing promotional campaign.

Sending an inquiry does not automatically subscribe you to a mailing list or give blanket permission for promotional messages. Promotional use is subject to the consent, lawful-basis and electronic-marketing requirements that apply to the recipient and the communication.

You can object to direct marketing or ask us to stop promotional emails at any time by contacting contact@corewey.com. A marketing objection does not prevent us from responding to a request you make or sending necessary non-marketing business correspondence.

This policy does not treat use of a different sending domain as an exemption from privacy or marketing requirements.

Service providers and international processing

Website hosting, delivery, security and analytics providers process technical information needed for those services. Our email service provider processes correspondence you choose to send us. People handling your inquiry can access the relevant information.

COREWEY operates from Serbia. Service providers may process information outside Serbia or your country, including through their infrastructure and support operations. Protection requirements can differ between countries. Applicable international-transfer requirements must be met where personal information is transferred across borders.

You can contact contact@corewey.com for information about recipients and the transfer arrangements relevant to your information.

How long we keep information

We keep business correspondence while needed to handle an inquiry, maintain an active client relationship or meet a specific legal obligation or claim. We review inactive correspondence annually and delete it when none of those reasons remains.

The contact form keeps editable fields in page memory. Tool progress and briefs use session storage as described above. Technical logs and analytics are subject to the relevant service’s retention arrangements, separate from our email review schedule.

You may request deletion of personal information. Applicable legal obligations or claims can require retention of particular records. Deleting an active record does not necessarily remove every provider backup immediately.

Your privacy rights

Depending on applicable law and the processing basis, you may request access, correction, deletion, restriction of processing or a portable copy of your personal information. These rights have conditions and exceptions.

Right to object: you may object to processing based on legitimate interests for reasons relating to your situation. You may object to direct marketing at any time. If processing relies on consent, you can withdraw it without affecting processing that was lawful before withdrawal.

Send requests to contact@corewey.com. We may ask for information reasonably necessary to verify your identity. Under EU GDPR, the usual response deadline is one month, with a permitted extension of up to two further months for complex or numerous requests and notice within the first month. Under Serbian law, the usual deadline is 30 days, with a permitted extension of up to 60 further days where necessary.

You may complain to the competent data-protection authority without first contacting us. In Serbia, this is the Commissioner for Information of Public Importance and Personal Data Protection. Where EU GDPR applies, you may complain to an authority where you habitually live, work or where the alleged infringement occurred. Where UK GDPR applies, you may complain to the Information Commissioner’s Office.

Children and changes to this policy

This website is intended for people exploring business technology services and is not designed for children. If you believe a child has sent us personal information, contact contact@corewey.com so we can investigate and handle it under applicable law.

When this policy changes, we will update its effective date and explain material changes as required. Posting a revision does not create consent for a new processing purpose.

Privacy contact

Mark Bakos · COREWEY · Serbia

Complaint information: Serbian Commissioner, EU supervisory authorities and UK Information Commissioner’s Office.