Privacy Policy

Zebra Agency is a creative, marketing, and development studio. Our headquarters and the legal entity responsible for the data described here is Zebra Agency LLC, registered at Ahmet Krasniqi A1, 10000 Prishtina, Kosovo. We operate branch offices in Tirana (Albania), Zürich (Switzerland), Frankfurt (Germany), and Malmö (Sweden).

For any privacy-related questions, write to [email protected].

We collect only the data necessary to operate the website, respond to enquiries, and meet our legal obligations.

• Contact form submissions: name, email address, company name, phone number (if you provide one), and the message you send us. • Newsletter sign-ups: your email address. • Job applications: any information you submit by email to [email protected]. • Website usage data: page views, referrer, device type, and approximate location (country level). We use a privacy-friendly self-hosted analytics tool and do not use third-party advertising cookies. • Cookies: a single first-party cookie (NEXT_LOCALE) stores your language preference. An optional analytics cookie is only set if you accept analytics in the cookie banner.

• To respond to your enquiry or send you the materials you requested (legitimate interest / your request). • To send our newsletter, only if you have subscribed (consent — you can unsubscribe at any time). • To process job applications (your request). • To understand site performance and improve content (legitimate interest, with privacy-friendly analytics that does not identify individuals). • To meet legal obligations (e.g. tax records on commercial enquiries).

We do not sell or rent personal data. We share it only with:

• Service providers acting on our behalf (e.g. email delivery, hosting), bound by data-processing agreements. • Authorities, where required by law.

Our primary data-processing infrastructure is hosted in the EU. Some communications (e.g. with branch offices) may involve transfers between Kosovo, Albania, Switzerland, Germany, and Sweden. Where applicable, Standard Contractual Clauses are in place.

• Enquiry / contact-form data: up to 24 months after the last interaction, unless you ask us to delete it sooner. • Newsletter subscribers: until you unsubscribe. • Job applications: up to 12 months after the application date. • Commercial-relationship records (invoices, contracts): for the duration required by applicable accounting and tax law. • Analytics data: aggregated and anonymized, retained for up to 36 months.

If you are in the EU/EEA, the UK, or Switzerland, you have the right to access, correct, delete, restrict, or port your personal data, and to object to processing based on legitimate interest. To exercise any of these rights, email [email protected]. We will respond within 30 days.

If you believe we have mishandled your data, you have the right to complain to the data-protection authority in your country of residence.

We use industry-standard security measures, including TLS encryption in transit, encryption at rest for stored personal data, access controls, and regular security review. No system can guarantee absolute security, but we take this seriously and aim to fix any issues quickly.

We may update this policy from time to time. The 'Last updated' date at the top of this page reflects the current version. Material changes will be announced on the home page for at least 30 days.