1. Who we are
The controller of personal data processed through this website is CodeLoop Studio, Bulevar Branioca Dobrinje 15, Sarajevo, Bosnia and Herzegovina.
- Email: info@codeloop.ba
- Phone: +387 64 40 44 273 · +387 63 587 817
- Website: https://www.codeloop.ba
We process personal data in line with the Law on Personal Data Protection of Bosnia and Herzegovina (Official Gazette of BiH no. 12/25) and, where it applies, the EU General Data Protection Regulation (GDPR) — for example when we offer services to people in the European Economic Area.
2. What this covers
This policy applies to personal data collected through:
- browsing codeloop.ba and related pages we operate;
- the contact form;
- Loopy, our website chatbot, including the quote handoff form;
- the online estimate questionnaire;
- emails you send us at addresses published on this site.
It does not cover apps, websites, or software we build for clients. Those products have their own notices. If we start a project with you, the service agreement, NDA, and any data processing addendum govern that work.
3. Data we collect and why
We do not sell personal data. We do not run advertising or remarketing pixels on this site. We only collect what we need to answer you, run the website, and keep it secure.
When you browse the site
Our hosting provider automatically records technical logs that can include IP address, browser and device type, date and time, requested URL, and referring page. We use this to operate, debug, and secure the site. If you accept analytics cookies, Umami also records usage as described under Cookies below.
Legal basis: legitimate interests in running a secure, functioning website (and, where required, a legal obligation to keep certain security records).
Contact form
If you submit the form we collect your name, email, phone number, industry, and project description. We email that to our team so we can reply, usually within 24 hours.
Legal basis: steps at your request before a contract, and our legitimate interest in answering business inquiries.
Loopy chatbot
If you use Loopy, the messages you type (and our replies) are sent to our servers and to an AI provider so Loopy can interview you about your project. When you ask for a quote we also collect your name, email, and phone. We email the transcript, your answers, and a preliminary estimate to you and to our team.
Loopy’s estimate is indicative. A person on our team follows up. We do not make solely automated decisions that produce legal or similarly significant effects.
Legal basis: your request to explore a project (pre-contractual steps) and, for using the chat itself, your choice to send messages.
Online estimate
The questionnaire collects project choices (software type, industry, design and branding needs, platforms, budget range, domain/hosting, store publishing). Amounts are not shown on the page. If you enter an email, we send the ballpark write-up to you and a copy to our team so we can follow up.
Legal basis: steps at your request before a contract.
Emails, calls, and meetings
If you write to info@codeloop.ba or call us, we process the content of that communication and your contact details to respond and, if we work together, to perform the contract.
Data we do not want
Please do not send special-category data (health, biometric, political opinions, religious beliefs, sexual life, or similar) or other people’s personal data through the forms or chat. If you include it anyway, we will treat it only as part of handling your inquiry and delete it where we can.
6. International transfers
Some processors (including Resend, Anthropic, and Vercel for Umami hosting) are based in the United States or process data there. When we transfer personal data out of Bosnia and Herzegovina or the EEA, we rely on an adequacy decision where one exists, or on appropriate safeguards such as the European Commission’s Standard Contractual Clauses, plus the measures those providers publish.
You can ask us for more detail about the safeguards that apply to a specific transfer.
7. How long we keep data
- Inquiries, chat transcripts, and estimates — up to 24 months after the last contact, unless we start a project (then we keep what the contract and accounting rules require) or you ask us to delete sooner where the law allows.
- Server logs — typically up to 90 days, longer only if needed to investigate a security incident.
- Cookie consent — until you clear site data or we ask again after a material change.
- Emails — for as long as needed to handle the conversation and meet legal record-keeping duties.
When we no longer need data, we delete it or irreversibly anonymise it.
8. How we protect data
We use HTTPS, restrict access to inquiry mailboxes to the people who need them, and keep API keys and similar secrets off the public site. No method of transmission or storage is perfectly secure. If we become aware of a breach that must be notified under applicable law, we will notify the competent authority and, where required, the people affected.
9. Your rights
Subject to the conditions in BiH law and, where it applies, the GDPR, you can:
- access the personal data we hold about you;
- ask us to correct inaccurate data;
- ask us to delete data, or to restrict how we use it;
- object to processing based on legitimate interests;
- receive data you provided in a structured, commonly used format, and ask us to send it to another controller where technically feasible (portability);
- withdraw consent where processing is based on consent, without affecting earlier lawful use;
- lodge a complaint with a supervisory authority (see below).
To use these rights, email info@codeloop.ba with enough detail for us to find your data (for example the email you used on the form). We may need to verify your identity. We will respond within the time the law requires.
10. Children
This website is aimed at businesses and adult decision-makers. We do not knowingly collect personal data from children under 16. If you believe a child has sent us data, contact us and we will delete it.
11. Changes to this policy
We may update this page when our processing, tools, or the law changes. The “Last updated” date at the top is the current version. Material changes will be reflected here before they take effect, where that is reasonably possible.
12. Contact and complaints
Questions, requests, or complaints about privacy: info@codeloop.ba, or write to CodeLoop Studio, Bulevar Branioca Dobrinje 15, Sarajevo, Bosnia and Herzegovina.
You also have the right to lodge a complaint with the Agency for Personal Data Protection in Bosnia and Herzegovina (AZLP):
- Address: Dubrovačka 6, 71000 Sarajevo, Bosnia and Herzegovina
- Email: azlpinfo@azlp.ba
- Website: www.azlp.ba
- Phone: +387 33 726 250
If you are in the EEA, you may instead complain to your local data protection authority. A list is published by the European Data Protection Board.