Privacy policy

Last updated: 18 August 2026

Who we are

BozApps is a trading name of Bozmaps, the UK business of Semir Kahrimanovic. For the purposes of UK GDPR, Bozmaps is the data controller for personal data collected via bozapps.co.uk. Contact: semir@bozmaps.com.

What we collect

We collect personal data in three ways:

• Contact form submissions. Name, email address, optional company, optional phone number, and the content of your enquiry. We collect this so we can reply to you.
• Email correspondence. If you email us directly, we keep that correspondence so we can follow up.
• Cookieless website analytics. We record which pages are opened, how far down them people read, how long they stay, which buttons they click, which site or search engine referred them, the approximate town and country supplied by the hosting network, and the browser and device type. This runs on our own servers and sets no cookies. Visits are grouped under an identifier that is a one-way salted hash regenerated every night, so a visit cannot be linked to you personally, to your visits on another day, or to any other website. We do not store your IP address.
• Advertising measurement. When we are running Google Ads, Google's conversion tag records that an enquiry followed an ad click. This is the one component on the site that stores an identifier in your browser.

What we do not do

• We do not sell or rent personal data to third parties.
• We do not run social advertising trackers. There is no Facebook Pixel, no TikTok pixel and no LinkedIn Insight tag on this site.
• We do not use Google Analytics on the marketing site.
• We do not build advertising profiles, and we never share analytics data with data brokers.
• We do not send marketing emails to enquirers without explicit opt-in.

Legal basis

We process contact-form and email data on the basis of legitimate interest (to respond to your enquiry) and, where applicable, on the basis of taking pre-contractual steps at your request.

How long we keep data

Contact-form submissions are kept for 24 months after last interaction. Email correspondence is kept for as long as needed for the client relationship plus 12 months. Cookieless analytics records are kept for 24 months and then deleted; because the visitor identifier is rehashed nightly, older records cannot be traced back to a person even before they are deleted.

Third-party processors

• Vercel (hosting for the marketing site, data resides in EU regions, and its own cookieless traffic counter).
• Supabase (EU-hosted database, in London, holding enquiry forms and the cookieless analytics records).
• Resend (transactional email delivery for contact-form submissions).
• Plausible Analytics (anonymous, cookieless web analytics, EU-hosted).
• Umami (cookieless traffic analytics, self-hosted by us on the infrastructure above).
• Google Ads (conversion measurement only, and only while an ad campaign is running).

Your rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you
• Have inaccurate data corrected
• Have your data deleted ("right to be forgotten")
• Restrict or object to our processing
• Data portability: receive your data in a portable format
• Complain to the Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email semir@bozmaps.com. We'll respond within 30 days.

Changes to this policy

We may update this policy. The "Last updated" date at the top will always reflect the most recent change. If we make material changes, we'll note them clearly here.