Privacy policy

Last updated: 2 November 2026

This policy explains what personal data we collect through jest.rs, why we collect it, how long we keep it and what rights you have. We collect as little as possible: only what you send us yourself.

1. Who is responsible for your data

The controller of your personal data is jEST, a creative marketing agency based in Belgrade, Serbia.

For anything related to your data, write to hello@jest.rs.

2. What we collect

When you fill in the contact form

  • your name and email address (required);
  • company name, the package you are interested in and what you need (optional);
  • your message and any file you attach.

Please don't send us sensitive data (health, religion, political views and similar) or other people's data without their permission.

When you write, call or message us

If you email, call or message us on WhatsApp or Viber, we receive your email address or phone number and whatever you choose to tell us. Messages sent through WhatsApp or Viber are also handled by those services under their own privacy policies.

When you simply browse the site

We do not use cookies for analytics, advertising or tracking, and we don't load fonts or scripts from Google or social networks. The site saves two small settings in your own browser (local storage): your chosen language and light or dark theme. They never leave your device and you can delete them at any time by clearing your browser data.

Like every web server, our hosting provider automatically records technical data (IP address, browser type, time of visit) in server logs, for security and to keep the site running.

3. Why we use it, and on what legal basis

  • To answer your inquiry and prepare a quote — steps you asked for before a possible contract (Art. 12(1)(2) of the Serbian Law on Personal Data Protection).
  • To carry out a project if we start working together — performance of a contract.
  • To keep the site secure (server logs) — our legitimate interest.
  • To keep accounting records once we work together — legal obligation.

We do not use your data for newsletters or marketing, and we never sell it or give it to anyone for their own purposes.

4. Who processes the data for us

We use a small number of trusted services that process data only on our instructions:

  • Netlify, Inc. (USA) — website hosting and receiving contact form submissions;
  • our email provider — receiving and storing email;
  • our accountant — only if we invoice you.

Where data is processed outside Serbia, we rely on providers that apply appropriate safeguards required by law, such as standard contractual clauses.

5. How long we keep it

  • Inquiries that don't turn into a project: up to 12 months from our last contact, then deleted.
  • Client project data: for the duration of the project and up to 2 years after it ends, so we can support you.
  • Invoices and accounting documents: as long as Serbian accounting law requires.
  • Server logs: kept by the hosting provider for a short period, as set in its own policy.

6. Your rights

You have the right to:

  • ask what data we hold about you and get a copy;
  • have incorrect data corrected;
  • have your data deleted;
  • restrict or object to processing;
  • receive your data in a portable format;
  • withdraw consent at any time, where processing is based on consent.

Send your request to hello@jest.rs. We will reply within 30 days, at no cost.

If you think we have handled your data unlawfully, you can file a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs).

7. Security

The site is served over an encrypted connection (HTTPS). Access to inquiries and files is limited to the jEST team, and we use services with strong security standards.

8. Changes

If we change this policy, we will publish the new version on this page and update the date at the top.