Our privacy policy

Category North is a positioning, copywriting, and content agency based in Belgrade, Serbia.

Data controller: Stefan Radojcic PR Category North. Address: Sarajevska 41, Belgrade, Serbia. Company registration number: 65939932. Tax ID: 112194775. Contact: stefan@categorynorth.com

We're subject to Serbia's Law on Personal Data Protection (ZZPL) and, where we handle data of people in the European Economic Area, the EU General Data Protection Regulation (GDPR).

Booking runs through Google Calendar's appointment scheduling. When you book, you give us:

• → Your name
• → Your email address
• → Anything you choose to write in the booking notes

Why: to hold the meeting, send you the calendar invite and reminders, and prepare for the conversation.

Legal basis: taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)).

If you write to any of the email addresses associated with our domain (such as stefan@categorynorth.com), we receive your email address and whatever you send.

Why: to reply to you.

Legal basis: legitimate interest in responding to enquiries (Art. 6(1)(f)).

We sometimes record calls. We always ask you first, out loud, before the recording starts. If you say no, we don't record — the call goes ahead exactly the same.

Recordings are made with Google Meet and stored in our Google Workspace. A recording captures your voice, your image if your camera is on, and whatever gets discussed.

Why: so we're listening to you instead of typing, and so we get the details of your situation right.

Legal basis: your consent (Art. 6(1)(a)). You can withdraw it at any time — email us and we'll delete the recording.

We use Cloudflare Web Analytics, which is privacy-first by design. Cloudflare states that it sets no cookies, uses no client-side storage, and doesn't fingerprint or track you across websites.

What it records is aggregate and never linked to you: page views, page paths, referring sites, country, browser, operating system, device type, and page load speed.

Why: to see which pages are useful and which aren't.

Legal basis: legitimate interest in understanding site usage (Art. 6(1)(f)). Because nothing is stored on or read from your device for this purpose, we treat it as exempt from cookie consent requirements.

Our site doesn’t use cookies for advertising or tracking.

Strictly necessary cookies: Cloudflare, which serves and protects this site, may set security cookies — __cf_bm, which tells real visitors apart from bots and expires after at most 30 minutes of inactivity, and cf_clearance, which records that you've passed a security check. They're required for the site to work securely and are exempt from consent requirements.

The booking calendar: the booking page uses Google Calendar's appointment scheduling, embedded from Google. Google may set its own cookies when that page loads, governed by Google's Privacy Policy. If you'd rather not load it, email us instead at stefan@categorynorth.com — we'll book the call by hand.

You can block or delete cookies in your browser settings at any time. The site works fine without them.

We use a small number of service providers. Each processes data only to deliver its service.

We don't share your data with anyone else, except where the law requires it. If we add a provider, we'll update this table.

We're based in Serbia. Because we use Google and Cloudflare, your data may be processed outside Serbia and the European Economic Area, including in the United States.

Under Serbian law, these transfers are permitted because the United States appears on the Serbian Government's list of countries deemed to provide an adequate level of data protection.

Both providers also maintain their own safeguards: Google LLC and Cloudflare, Inc. are certified under the EU–US Data Privacy Framework, and their data processing agreements with us incorporate the European Commission's Standard Contractual Clauses as a fallback.

If you want your data deleted sooner, email us, and we’ll do it, unless we’re legally required to keep it.

Under GDPR and Serbia's ZZPL you can:

• → Access the personal data we hold about you
• → Correct anything that's wrong
• → Delete it ("right to be forgotten")
• → Restrict how we process it
• → Object to processing based on legitimate interest
• → Get a copy of your data in a portable format, or have us send it to another provider
• → Withdraw consent at any time, where processing is based on consent

How: email stefan@categorynorth.com. No account needed, no forms to fill in. We'll respond within 30 days. If a request is complicated, we may need longer, and we'll tell you why.

If we get it wrong, you can complain to:

• → Serbia: Commissioner for Information of Public Importance and Personal Data Protection — poverenik.rs
• → EEA: your national data protection authority

The site is served over HTTPS and hosted on Cloudflare's network with DDoS protection. It's a static site — there's no database, no login, and no customer records stored on it. Business data lives in Google Workspace, protected by two-factor authentication.

No system is perfectly secure, but there's very little here to attack.