Legal
Privacy Policy
How we handle personal data across dotshock.ai and the .shock Suite.
Draft for review. This is a working structure — final wording is to be confirmed by the owner and legal counsel before launch. Last updated 2026.
Who we are
The data controller is Benis Arapovic, trading as .shock / dotshock, based in Sarajevo, Bosnia and Herzegovina. Contact: dotshock@dotshock.ai.
What we collect
- Project enquiries — name, company, email, phone, message and any brief you attach via the project form.
- Production network — details submitted to the model or location forms, including uploaded photos.
- .shock Suite accounts — email, account credentials and billing identifiers held by our payment providers.
- Technical data — server logs and cookies needed to run the site and keep accounts signed in.
Why we use it (legal basis)
- To respond to enquiries and prepare quotes — on the basis of taking steps at your request and our legitimate interest.
- To provide and bill the Suite — on the basis of our contract with you.
- To send updates you opt into — on the basis of your consent, withdrawable at any time.
Retention
Enquiry and application data is kept only as long as needed to handle your request and any resulting work. Suite account data is retained for the life of the account and a limited period afterwards as required for accounting and legal obligations.
Who we share it with
We use trusted processors only as needed: our hosting provider; Stripe and PayPal for Suite payments; email delivery for transactional messages; and, for the production CRM, messaging providers you have agreed to be contacted through. We do not sell personal data.
International transfers
Some processors operate outside Bosnia and Herzegovina or the EU. Where that happens, transfers rely on appropriate safeguards.
Your rights
You may request access, correction, deletion, restriction, portability, or object to processing. You may also complain to the relevant supervisory authority (in Bosnia and Herzegovina, the Personal Data Protection Agency). To exercise any right, email dotshock@dotshock.ai.
Cookies
See our Cookie Policy for what we set and how to control it.
Changes
We may update this policy; material changes will be reflected by the date above.