Privacy Policy

The controller of your personal data is TODO: Legal entity name (e.g. FOP Surname N.P. / LLC name) (TODO: EDRPOU / registration number), TODO: Registered address. For any data-related question, email privacy@example.com.

• Project inquiry form: name, email, company, store URL, project type, budget and your message.
• Newsletter: only your email address and site language.
• Call booking: name, contact details and the time you choose.
• Technical data: IP address, browser and device type, pages visited — via analytics and server logs.
• Bot protection: form checks may process technical signals from your browser.

We do not collect payment details on this site and never ask for your store passwords through our forms.

• To reply to your inquiry, scope your project and prepare a proposal — steps taken at your request before a contract.
• To send the newsletter — only with your consent, which you can withdraw at any time.
• To understand how the site is used and improve it — our legitimate interest, or your consent to analytics cookies.
• To protect the site from spam and abuse — our legitimate interest.
• To meet legal obligations, such as accounting requirements.

We do not sell your data or use it for automated decision-making.

Only with providers that help us operate, and only as much as their function requires:

• Website hosting and web analytics (Vercel).
• Form bot protection (Cloudflare Turnstile).
• Email delivery and newsletter (TODO: provider name).
• Visitor analytics (Google Analytics), if you have consented.

We may also disclose data where required by law or a court order.

Some of our providers process data outside Ukraine and the EU, including in the United States. In those cases we rely on safeguards recognised by law, such as standard contractual clauses.

• Inquiries that don't become projects: up to 24 months, then deleted.
• Client data: for the duration of our work together and as long as the law requires for accounting and contracts.
• Newsletter: until you unsubscribe.
• Technical logs and analytics: per our providers' settings, usually no longer than 14 months.

When we work on your Shopify store, we may have access to your customers' data. You remain the controller of that data, and we process it only on your instructions under our contract. This policy covers only data collected through our own website.

The site is served over HTTPS only, inquiries are accessible only to team members who need them for their work, and our service accounts are protected with two-factor authentication. No method of transmission or storage is perfectly secure, but we take every reasonable step to protect your data.

• Find out what data we hold about you and get a copy.
• Have inaccurate data corrected, or have it deleted.
• Restrict or object to processing.
• Receive your data in a portable format for another provider.
• Withdraw consent at any time — for example, unsubscribe from the newsletter in one click.

To exercise any right, email privacy@example.com — we'll reply within 30 days. You can also complain to the Ukrainian Parliament Commissioner for Human Rights or to the data protection authority in your EU country.

If we change how we handle data, we'll update this page and the date at the top. Newsletter subscribers will be told about significant changes by email.