Privacy Policy | Bilohash.com

This Privacy Policy applies to bilohash.com and the /website/ portfolio section operated by Ruslan Bilohash. We process personal data in accordance with the EU General Data Protection Regulation (GDPR), Norwegian Personal Data Act (Personopplysningsloven) and guidance from Datatilsynet.

1. Data Controller

Ruslan Bilohash (private individual — not a registered business)
Drammen, Norway
Phone: +47 462 55 885
Email: email@bilohash.com

2. Who this applies to

Visitors to bilohash.com, users of the contact form, AI chat widget and related services — including visitors from Norway, the EEA and other countries.

3. Data we collect

Contact form: name, phone, email, message, timestamp and source page.
Technical data: IP address, browser, device, timestamps, referrer and hosting logs.
Visitor counter: IP stored to count unique visits.
AI chat: messages, session ID and technical logs when you use the consultant widget.
Consent: your cookie choices stored locally in the browser.

4. Purposes and legal basis

• Contact and quotes — Art. 6(1)(b) and (f) GDPR.
• Security — CSRF, reCAPTCHA, rate limits — Art. 6(1)(f).
• Website operation — necessary cookies/hosting — Art. 6(1)(f).
• Optional features — AI chat and third-party scripts only with consent — Art. 6(1)(a).
• Legal obligations — accounting/tax where applicable — Art. 6(1)(c).

5. Retention

Contact enquiries: up to 3 years. AI chat logs: up to 90 days. Server logs: 30–90 days. Consent choices: up to 12 months. Visitor counter IPs: until erasure request or max 24 months.

6. Processors and third parties

We do not sell personal data. We use:
• Hostinger — hosting
• Google reCAPTCHA — spam protection on contact form (after consent)
• xAI (Grok) — AI chat processing (after consent)
• Telegram — owner notifications for new chat messages
• CDN providers (Google Fonts, cdnjs, jsDelivr) — may receive IP when loading assets

Transfers outside the EEA rely on Standard Contractual Clauses or equivalent safeguards where required.

7. Security

HTTPS, access control, CSRF protection, secure email and updates. We will notify Datatilsynet and affected users of breaches when legally required.

8. Your rights

Access, rectification, erasure, restriction, portability (where applicable), objection and withdrawal of consent. Complaints: Datatilsynet (Norway) or your local EU/EEA supervisory authority.

9. Cookies

Necessary cookies always run. Others only after consent. See our Cookie Policy.

10. Children

Not directed at children under 16. We do not knowingly collect children's data without parental consent.

11. Changes

We may update this policy. Material changes will be posted here. See also Terms of Use.

Privacy contact

To exercise your rights or ask questions, email us. We normally respond within 30 days.

email@bilohash.com +47 462 55 885