This site collects as little as possible. Here is exactly what happens with what you send, in plain words.

Who is responsible

Koshmi Lures is an independent lure maker based in Serbia and is responsible for the data described here. You can reach the maker through the enquiry form on this site or on Instagram at @koshmi__.

What is collected, and why

The site has no accounts and no shop. The only personal data it handles is what you type into the enquiry form: your name, email address, country, an optional Instagram handle, the model you're interested in and your message.

It is used for one thing: to reply to you and, if it comes to it, to arrange an order. The legal basis is that you asked for a reply (steps taken at your request before a possible contract), together with the maker's legitimate interest in keeping a record of the conversation.

Where your data goes

• FormSubmit (Devro LABS) delivers your message by email. It keeps a copy on its servers for 30 days, then deletes it.
• Google (Gmail) is the mailbox where enquiries arrive and replies are written.
• Cloudflare hosts the site. Like any host, it processes IP addresses in server logs to deliver pages and block attacks. It also provides aggregated, cookieless analytics (page views, country, browser). None of it identifies you.

None of these companies use your details for their own purposes beyond providing the service. Your data is not sold or shared with anyone else.

How long it is kept

Enquiries are kept as long as needed to answer them. If an order follows, the messages are kept for that order and for as long as accounting rules require. Enquiries that don't lead to anything are deleted within 12 months.

Cookies and tracking

This site sets no cookies and uses no tracking scripts. Analytics are cookieless and aggregated, so no consent banner is needed and none is shown. Links to Instagram and Tag my Fish lead to their sites, which have their own privacy policies.

Your rights

You can ask what data is held about you, have it corrected or deleted, restrict or object to its use, or receive a copy. Send the request through the enquiry form or on Instagram. You can also complain to a data-protection authority: in Serbia, the Commissioner for Information of Public Importance and Personal Data Protection; in the EU, the authority in your country.

Changes

If anything here changes, the date below is updated.

Last updated: 25 September 2026