Privacy Policy

Effective date: August 24, 2026

TheLeadWebTech agencija za web razvoj i programiranje (“TheLeadWebSecurity,” “we,” “us,” or “our“) operates the website theleadwebsecurity.com (the “Site“) and provides WordPress website security, malware removal, and related services (the “Services“). This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the choices and rights you have.

We are the data controller responsible for the personal data described in this policy. If you have questions or want to exercise any of the rights below, contact us at info@theleadwebsecurity.com.

1. Who We Are

• Business name: TheLeadWebTech agencija za web razvoj i programiranje, trading as TheLeadWebSecurity
• Country of establishment: Serbia
• Website: https://theleadwebsecurity.com
• General inquiries: info@theleadwebsecurity.com
• Existing client support: support@theleadwebsecurity.com

2. Personal Data We Collect

We collect personal data in the following ways:

Information you provide directly. When you use our contact form, request a free website security scan, or otherwise get in touch, we collect the information you submit — typically your name, email address, website URL, and the details of your message or support request. If you become a client, we also collect billing and service-related information needed to deliver and invoice for the Services (see Section 7, Payments).

Information collected automatically. When you browse the Site, our servers and the third-party tools described in Section 4 automatically collect certain technical information, including your IP address, browser type and version, operating system, referring URL, pages visited, time and date of visit, and general location inferred from your IP address. This is collected via server logs and cookies/similar technologies.

Information from cookies and similar technologies. See Section 5 (Cookies) below.

We do not knowingly collect payment card numbers, government ID numbers, or other special categories of sensitive data through the Site.

3. How We Use Your Data

We use the personal data described above to:

• Respond to inquiries submitted through our contact and free-scan forms, including performing the requested security scan and sending you the results;
• Provide, maintain, and deliver the Services to clients, including malware removal, security monitoring, server/website hardening, and long-term maintenance;
• Communicate with you about your request or service, including account, billing, and support communications;
• Operate, secure, and improve the Site, including monitoring for abuse, fraud, and technical issues;
• Protect the Site against spam and automated abuse (via Google reCAPTCHA);
• Understand how visitors use the Site, using aggregated analytics (via Google Analytics/Google Tag Manager), so we can improve content and performance;
• Comply with legal obligations, such as tax and accounting record-keeping for paid services.

4. Legal Bases for Processing (GDPR)

Where the GDPR applies, we rely on the following legal bases:

• Contract (Art. 6(1)(b)) — to respond to your inquiry, provide a requested scan, or deliver Services you have engaged us for.
• Legitimate interests (Art. 6(1)(f)) — to secure and improve the Site, prevent fraud/abuse, and for basic analytics, balanced against your rights and interests.
• Consent (Art. 6(1)(a)) — for non-essential cookies/analytics where consent is required by your jurisdiction, and for any optional marketing communications. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — to meet accounting, tax, or other statutory obligations related to paid Services.

5. Cookies and Similar Technologies

The Site uses cookies and similar technologies for the following purposes:

Essential cookies are required for the Site to function securely and cannot be switched off through our systems; you can still block them via your browser settings, though parts of the Site may not work correctly if you do. Analytics cookies are used only in aggregate to understand traffic patterns and are set only where permitted; where required by your local law, we will ask for your consent before they are set.

You can control or delete cookies at any time through your browser settings, and most browsers let you refuse cookies or alert you when a cookie is being set. Google also provides its own opt-out tools, including the Google Analytics Opt-out Browser Add-on.

6. How We Share Your Data

We do not sell your personal data. We share personal data only with:

• Service providers who process data on our behalf, under contractual confidentiality and data-protection obligations, specifically:
  • Cloudflare, Inc. — content delivery network and security (DDoS/bot protection).
  • NitroPack — website performance and caching.
  • Google LLC — Google Analytics, Google Tag Manager, and Google reCAPTCHA.
  • PayPal, Inc. — payment processing for clients who pay via PayPal (see Section 7).
  • Our email and hosting providers, to operate the Site and respond to inquiries.
• Legal and safety reasons — if required to comply with a legal obligation, enforce our terms, or protect the rights, property, or safety of TheLeadWebSecurity, our clients, or others.
• Business transfers — if we are involved in a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction; we will notify you of any material change in ownership or use of your data.

7. Payments

We do not operate an online checkout or store payment card details on our own systems. Clients currently pay for Services by bank transfer (processed by our bank, based on the invoice details we provide) or via PayPal. When you pay via PayPal, your payment information is collected and processed directly by PayPal under PayPal’s own privacy policy — we receive confirmation of payment but not your full payment card or bank account details.

8. International Data Transfers

We are based in Serbia. Some of the third-party providers listed in Section 6 (such as Google and Cloudflare) may process data on servers located outside your country, including in the United States. Where personal data of EU/UK individuals is transferred outside the European Economic Area or UK, we rely on appropriate safeguards recognized under GDPR, such as the European Commission’s Standard Contractual Clauses (SCCs) or the provider’s own certified transfer mechanism (for example, the EU-U.S. Data Privacy Framework, where applicable).

9. Data Retention

We retain personal data only for as long as necessary for the purposes described in this policy:

• Contact form / free-scan submissions: retained for as long as needed to respond to your inquiry and for a reasonable period afterward in case you follow up, then deleted or anonymized if no client relationship results.
• Client and billing records: retained for the duration of the service relationship and afterward as required by applicable tax and accounting laws.
• Analytics data: retained according to the retention settings configured in Google Analytics, in line with Google’s own data retention controls.
• Server/security logs: retained for a limited period for security and troubleshooting purposes, then deleted or aggregated.

10. Your Rights

Subject to applicable law, and in particular where the GDPR applies to you, you have the right to:

• Access the personal data we hold about you;
• Rectify inaccurate or incomplete data;
• Erase your data (“right to be forgotten”), subject to legal exceptions (e.g., invoices we must retain for tax purposes);
• Restrict or object to certain processing, including processing based on legitimate interests;
• Data portability — receive your data in a structured, machine-readable format;
• Withdraw consent at any time, where processing is based on consent, without affecting the lawfulness of processing before withdrawal;
• Lodge a complaint with your local data protection supervisory authority if you believe our processing violates applicable law.

To exercise any of these rights, email info@theleadwebsecurity.com. We will respond within the timeframe required by applicable law (generally one month under GDPR). We may need to verify your identity before fulfilling certain requests.

11. Children’s Privacy

The Site and Services are intended for businesses and individuals over the age of 18 and are not directed at children. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

12. Data Security

As a website security company, we take the protection of personal data seriously. We use industry-standard technical and organizational measures — including a CDN/WAF (Cloudflare), access controls, and secure hosting practices — to protect personal data against unauthorized access, alteration, disclosure, or destruction. However, no method of transmission over the internet or electronic storage is 100% secure, and we cannot guarantee absolute security.

13. Third-Party Links

The Site may contain links to third-party websites (for example, client testimonials, review platforms, or our LinkedIn profile). We are not responsible for the privacy practices or content of those third-party sites. We encourage you to review the privacy policy of any site you visit.

14. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the Services, or legal requirements. The “Effective date” at the top of this page indicates when it was last revised. We encourage you to review this page periodically. Material changes will be reflected by updating this page.

15. Contact Us

If you have questions about this Privacy Policy or how we handle your personal data, contact us at:

TheLeadWebTech agencija za web razvoj i programiranje Email: info@theleadwebsecurity.com Support: support@theleadwebsecurity.com Website: https://theleadwebsecurity.com