Privacy Policy

Last updated: 10 November 2026

Who we are

Sfida.PRO is operated by two legal entities. The data controller for your personal data is the entity you contract with, which depends on where you are based:

• Clients in Albania: the controller is Elvis Plaku, sole proprietorship (person fizik), registered in Albania, NIPT L81904028I, Rruga Sulejman Pasha, Pallati Onufri nr 104, shkalla nr 1, Ap.14, Tirana.
• Clients outside Albania (EU, USA and worldwide): the controller is Sfida Pro LLC, a limited liability company incorporated in the State of Wyoming, United States of America.

Both entities are under common ownership, operate under the Sfida.PRO brand, and apply the data-protection standards described here. The controller responsible for your data is also identified on your order confirmation and invoices. Our principal place of operations is Tirana and Durrës, Albania.

For any data-protection enquiry, email [email protected] with “DATA PROTECTION” in the subject line.

What data we collect

We collect personal data that you provide to us directly and data generated automatically when you use our website and services:

• Contact & account data — your name, email, phone, company and the details you submit through our forms.
• Project & service data — information you share so we can deliver a service (e.g. your website URL, hosting details, requirements).
• Billing data — invoicing and payment records (processed through our invoicing system and payment providers).
• Usage & technical data — IP address, browser, pages visited and analytics, collected via cookies and similar technologies (see Cookies & analytics below).

How we use your data & our legal bases

We use your personal data to provide and manage our services, respond to your enquiries, send service communications, issue invoices, improve our website, and — where you have agreed — send you relevant updates. We rely on the following legal bases under the EU General Data Protection Regulation (GDPR) and, for clients of our Albanian entity, Albania’s Law No. 124/2024 on Personal Data Protection, which follows the GDPR: performance of a contract, legitimate interests (running and improving our business in a way that does not override your rights), consent (e.g. marketing emails and non-essential cookies), and legal obligation (e.g. tax and accounting records).

Cookies & analytics

We use cookies and similar technologies for three purposes: essential site functionality, analytics, and (only where you opt in) marketing. You choose which ones to allow through our cookie consent banner, and you can change or withdraw your choice at any time. Declining does not affect your ability to use the site.

We use three analytics tools:

The cookie-free Matomo measurement relies on our legitimate interest in knowing how our website is used. If you accept analytics, Matomo also sets its own first-party cookies so it can recognise a returning visit, and Google Analytics and Microsoft Clarity start loading.

Google and Microsoft are based in the United States, so accepting analytics may involve transferring limited usage data outside Albania and the EEA, under the safeguards those companies provide, such as the EU–US Data Privacy Framework and standard contractual clauses. We do not use this data to identify you personally, and we do not sell it.

You can review how each provider handles data and opt out here: Google Privacy Policy (and the Google Analytics opt-out) and the Microsoft Privacy Statement.

Live chat

Our website offers a live chat widget served from our own support platform (support.sfida.pro), which we host and operate ourselves — no third-party chat provider is involved. The widget appears only when one of our support agents is online. If you start a chat, the messages you send (and any contact details you choose to share in them) are processed by Sfida.PRO to answer your inquiry and are stored in our self-hosted support system, where they are handled like any other support request. Chat conversations are not used for advertising and are not shared with third parties, except the AI assistants described below when they help us answer a request.

How long we keep your data

We only keep your personal data for as long as necessary for the purpose it was collected, or as required by law:

After the applicable period, we securely delete or anonymize your data.

When we process data on your behalf

When we provide services such as managed WordPress hosting, email hosting, FluentCRM management or digital marketing, we may process personal data belonging to your customers, users or subscribers on your behalf. In these situations you are the data controller and we are the data processor — we process that data only on your documented instructions. We do not use your clients’ personal data for our own purposes, sell it, or share it except as necessary to deliver the services. Where required, a Data Processing Agreement (DPA) governs this processing and is available on request at [email protected].

AI assistants

We use AI assistants from Anthropic (Claude) and OpenAI (Codex) to help us draft content, write and review code, and work on support requests. When we use them, the information needed for the task is sent to that provider. This can include personal data, for example the contents of a support request or data on a website we manage for you. Our team directs and checks this work. We do not use AI tools to make decisions about you that have legal or similarly significant effects.

International transfers

Sfida Pro LLC is based in the United States, and some of the providers listed below are based outside Albania and the EEA. When personal data goes to a country without an adequacy decision, we rely on appropriate safeguards, such as standard contractual clauses, or the EU–US Data Privacy Framework where the recipient is certified under it. You can ask us for details at [email protected].

Your rights

Subject to applicable law, you have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these rights, email [email protected].

Right to lodge a complaint

If you believe we have not handled your personal data lawfully, you have the right to lodge a complaint with a supervisory authority:

• EU: your member-state data protection authority (list at edpb.europa.eu).
• UK: the Information Commissioner’s Office (ico.org.uk).
• Albania: the Information and Data Protection Commissioner (idp.al).

We would appreciate the chance to resolve your concern first, so please contact us before approaching a supervisory authority.

Data breaches

We use technical and organizational measures to protect your data. In the event of a personal data breach likely to result in a risk to your rights, we will notify the relevant supervisory authority without undue delay (within 72 hours where feasible, per GDPR Article 33) and notify you directly where the breach is likely to result in a high risk. If you believe your data may have been compromised, contact us immediately at [email protected].

Third-party services & processors

To deliver our services we work with trusted third-party processors, each subject to their own privacy policies and, where required, data processing agreements:

Our support desk (support.sfida.pro), our CRM, our file storage (cloud.sfida.pro) and our Matomo analytics run on software we host and operate ourselves.

We do not sell your personal data, and we do not share it with third parties for their own marketing purposes.

Changes to this policy

We may update this policy from time to time. The “last updated” date above reflects the latest version. Material changes will be communicated where appropriate.

Contact us

For any question about this policy or your personal data, contact us at [email protected] or via our contact page.