Privacy Policy

This policy explains how ConsultHQ processes contact form data and technical records, why it uses them, how long it retains them and your rights.

Last updated: 9 October 2026.

This Privacy Policy explains how Temelj za rast DOO, operating under the ConsultHQ brand, processes personal data when you use consulthq.me, submit an enquiry through the contact form or contact us about our services.

The website has no user accounts, online shop, newsletter, advertising pixels or analytics cookies that track user behaviour. We process only the data needed for communication, operation of the contact form, website security and management of business relationships.

1. Data controller

The controller of personal data is:

Temelj za rast DOO
Brand: ConsultHQ
Tax / company identification number: 03414442
Registration number: 5-1013971/002
Registered office: Trg slobode 5, apt. 12, 85310 Budva, Montenegro

Contact for privacy questions, rights requests and complaints:

Temelj za rast DOO determines the purposes and means of processing data collected through consulthq.me and business communications relating to ConsultHQ services.

2. Scope of this policy

This policy covers data we process in connection with:

  • use of the publicly accessible pages of consulthq.me;
  • submission of contact form enquiries;
  • communication following an enquiry;
  • arranging an introductory conversation;
  • preparing a proposal or consulting engagement;
  • technical operation of the website;
  • protection of the contact form and information systems;
  • prevention of unsolicited messages and other abuse;
  • protection of legal and business interests.

If an enquiry leads to a contract or a specific consulting engagement, certain processing may also be governed by the contract, proposal, confidentiality arrangements or a separate notice.

3. Data collected through the contact form

When you use the contact form, we may collect:

  • your full name;
  • business email address;
  • the service you are interested in;
  • telephone number, if you choose to provide it;
  • a description of your needs or enquiry;
  • other information you voluntarily include in your message.

Your name, email address, service selection and a basic description of your needs allow us to understand and respond to your request. A telephone number is optional.

Please do not submit information that is unnecessary for an initial business enquiry. In particular, do not send passwords, copies of identity documents, health information, sensitive employee or client data, or confidential databases through the contact form.

If such documents need to be exchanged later during a consulting project, we will agree on the exchange arrangements separately.

4. Technical data

When you access the website, the server and security systems may automatically process limited technical information needed to provide and protect the service. This may include:

  • IP address;
  • date and time of the request;
  • the page or resource accessed;
  • response status;
  • browser and device information;
  • basic operating system information;
  • technical errors;
  • security events;
  • attempts to submit automated forms or otherwise abuse the website.

We do not use this information to create marketing profiles of visitors. We do not track your behaviour on other websites.

5. Sources of data

We primarily obtain business enquiry data directly from you when you:

  • complete the contact form;
  • reply to our message;
  • continue communicating by email;
  • voluntarily provide further information needed to assess a service.

Technical data is generated automatically as your device communicates with the server.

We do not purchase databases of individuals or supplement contact form information with data purchased from data brokers or advertising networks.

6. Why we use your data

Responding to a business enquiry

We use data to:

  • review your request;
  • understand the service you are interested in;
  • respond to your enquiry;
  • arrange a conversation where needed;
  • assess whether we can provide a suitable service;
  • prepare a proposal or suggest next steps.

When you contact us about a potential engagement, processing may be necessary to take steps at your request before entering into a contract.

For other business communications, processing may be based on a legitimate interest in responding to a legitimate business enquiry and maintaining relevant correspondence.

Technical security

We use limited technical data to:

  • operate the website correctly;
  • protect the contact form;
  • identify technical problems;
  • prevent automated spam;
  • protect against unauthorised access;
  • investigate security incidents;
  • protect system integrity and availability.

Legal requirements and interests

We may process or retain certain data where needed to:

  • comply with a legal obligation;
  • respond to a lawful request from a competent authority;
  • establish, exercise or defend a legal claim;
  • demonstrate the content of relevant business communications.

7. A contact enquiry is not marketing consent

Submitting an enquiry through consulthq.me does not constitute consent to a newsletter or regular promotional messages. ConsultHQ currently has no newsletter subscription on the website.

We do not automatically add contact form data to a direct marketing list.

If we later introduce a newsletter or another form of voluntary marketing communication, we will provide appropriate information and subscription and unsubscribe arrangements.

8. Information you need to provide

Use of the contact form is voluntary. However, without basic contact details and a description of your needs, we cannot reliably understand and respond to the enquiry. Your telephone number is optional.

Submitting the form:

  • does not enter you into a contract;
  • does not place an order for a service;
  • does not require ConsultHQ to accept an engagement;
  • does not constitute consent to marketing communications.

9. Who may have access to data

We restrict access according to business need. Data may be accessible to:

  • authorised personnel of Temelj za rast DOO who handle ConsultHQ enquiries;
  • the web hosting provider;
  • the business email provider;
  • the website’s technical maintainer;
  • security or backup service providers where engaged;
  • legal, accounting or other professional advisers where there is a justified need;
  • courts, inspection bodies and other competent authorities where an appropriate legal basis exists.

Technical service providers may process data only to the extent needed for their role and subject to appropriate contractual and security obligations.

We do not sell personal data. We do not disclose it to advertising networks or exchange it to create marketing profiles.

10. Technical service providers

We use external technical infrastructure to operate the website and support business communications. This may include:

  • web hosting;
  • DNS and security services;
  • business email;
  • backup infrastructure;
  • technical maintenance.

Some providers may use their own sub-processors or infrastructure in other countries.

Where a transfer requires a specific safeguard, we use an appropriate legal and contractual mechanism under the applicable framework.

For further information about a relevant provider or processing location, email:

11. How long we retain data

We do not retain data indefinitely simply because we can. Retention depends on the purpose of processing.

Enquiries that do not lead to an engagement

We retain contact messages and related business correspondence for no longer than 12 months after the last substantive communication.

We then delete or anonymise the data unless there is a specific reason to retain it longer. Such a reason may include:

  • an active complaint;
  • a legal claim;
  • a security incident;
  • a legal obligation;
  • another justified and documented reason.

Enquiries that lead to a business relationship

If communication leads to a proposal, contract or provision of services, relevant documents may become part of the client’s business file. They are then retained according to periods arising from the contractual relationship, accounting and tax obligations, and protection of legal claims.

Technical and security logs

Under normal circumstances, we retain standard technical and security records for up to 30 days. A particular record may be retained longer where necessary to investigate a specific incident or protect systems and legal interests.

Backups

Deleted data may remain for a limited period in rotating backups. We do not use these copies for routine business purposes.

Data is removed through the regular backup replacement cycle, unless a particular copy is temporarily needed for system recovery or incident investigation.

12. Cookies

ConsultHQ currently does not use cookies for:

  • Google Analytics or other web analytics;
  • personalised advertising;
  • remarketing;
  • tracking users across other websites;
  • marketing profiling;
  • measuring advertising campaigns.

The website uses only technically necessary mechanisms that enable basic and secure operation. These may include a session or security cookie needed for:

  • a technical session;
  • form security;
  • protection against automated spam;
  • basic application functionality.

These mechanisms are not used for marketing or behavioural tracking.

Blocking them in your browser may prevent some website functions, particularly the contact form, from working correctly.

If we introduce analytics, advertising or other optional technologies in the future, we will first update this policy and introduce an appropriate consent mechanism where required.

13. Why there is currently no cookie banner

Because the website does not use analytics, marketing or other optional tracking cookies, we do not display a banner merely as a formality.

Technically necessary cookies are used only where needed to provide and protect the service.

If the website’s technology changes and we introduce cookies or similar technologies requiring prior consent, we will introduce appropriate consent controls before activating them.

14. How we protect data

We apply technical and organisational measures proportionate to the nature of the data and processing risks. Measures may include:

  • HTTPS encryption of communications;
  • restricted access to website administration;
  • user authentication;
  • access restrictions based on business need;
  • regular software updates;
  • backups;
  • protection of the contact form against automated abuse;
  • protection of email and administrator accounts;
  • confidentiality obligations;
  • security incident response.

No information system can guarantee absolute security.

If we identify an incident that may affect your data, we will assess the risk and act in accordance with applicable law.

15. Automated decision-making and profiling

ConsultHQ does not use website data to make decisions based solely on automated processing that have legal or similarly significant effects on you.

We do not profile visitors for:

  • advertising;
  • pricing;
  • credit assessment;
  • employment;
  • automatic acceptance or rejection of clients.

People review contact enquiries.

16. Children’s data

ConsultHQ provides B2B consulting services, and the website is not intended for children. We do not knowingly seek to collect children’s data through the contact form.

If you believe a child has sent us data that is unnecessary for legitimate communication, email:

We will review the request and delete the data where justified.

17. Your rights

Depending on the legal regime applicable to the specific processing, you may have the right to:

  • receive information about processing;
  • request access to your data;
  • request correction of inaccurate or incomplete data;
  • request erasure where there is no appropriate reason for further retention;
  • request restriction of processing;
  • object to certain types of processing;
  • request portability where the legal conditions are met;
  • withdraw consent where processing is based on consent;
  • receive information about relevant recipients and transfers;
  • submit an objection or complaint;
  • seek judicial protection where the relevant conditions are met.

These rights are not absolute in every situation. For example, an erasure request may not lead to immediate deletion of a document we must retain because of a legal obligation or an active legal claim.

18. How to exercise your rights

Send data-related requests to:

Include:

  • your full name;
  • what you are requesting;
  • the email address you used to communicate with us;
  • enough information for us to locate the relevant data.

We may request additional information needed to reasonably confirm your identity. We will not request a copy of an identity document if we can verify identity by a less intrusive method.

We respond within the period required by the law applicable to the specific processing.

19. Complaints to ConsultHQ

If you believe we have not handled your data correctly or you are dissatisfied with our response, you may first send a complaint to:

You may use the subject line:

PRIVACY – COMPLAINT

Provide enough information for us to understand the complaint, but do not send more data than necessary.

Where organisationally possible, we will review the complaint separately from the original request.

Submitting a complaint to ConsultHQ does not restrict your right to contact a competent authority or court.

20. Complaints to a competent authority

If you believe your data is being processed contrary to applicable rules, you may contact Montenegro’s competent data protection authority:

Agency for Personal Data Protection and Free Access to Information

Bulevar revolucije 11
Podgorica, Montenegro

Check the Agency’s current contact details on its official website before submitting a formal request.

If the EU GDPR directly applies to the specific processing, you may also have the right to contact an appropriate supervisory authority in the European Union under the GDPR.

21. Legal framework

Montenegro adopted a new Personal Data Protection Law in 2026. It was published in Official Gazette of Montenegro No. 133/2026.

It entered into force on 19 September 2026 and will apply from 19 March 2027.

Until its application begins, relevant processing is governed by the rules applicable during the transition period.

The EU GDPR is a separate European legal framework. It may directly apply to certain processing by a company in Montenegro where its material and territorial criteria are met.

We do not claim that the EU GDPR automatically applies to every processing activity through this website simply because the website is accessible to users in the European Union.

22. External links

The website may link to:

  • public institutions;
  • regulatory sources;
  • ISO;
  • the European Commission;
  • the EDPB;
  • other independent websites.

Following such a link takes you away from consulthq.me.

ConsultHQ does not determine how an independent website operator processes your data. We recommend reviewing that website’s privacy rules before submitting data.

23. Changes to this Privacy Policy

We may update this policy when there are changes to:

  • website functions;
  • the contact form;
  • business communications;
  • technical providers;
  • cookies or other technologies;
  • retention periods;
  • security measures;
  • legislation;
  • business processes.

We will always display the last updated date at the top of the page.

If we introduce significant new processing, we will provide appropriate information before or when it begins, where required.

24. Data protection contact

For privacy questions, rights requests, reports of problems or complaints, contact:

Temelj za rast DOO
Brand: ConsultHQ

Trg slobode 5, apt. 12
85310 Budva
Montenegro

Tax / company identification number: 03414442
Registration number: 5-1013971/002

Email for privacy questions and complaints: