Document // Privacy policy
Privacy Policy
This policy explains what personal data we receive through the website, why, where it is stored and how you can control it. We collect only what we need to respond to your request.
1. Who processes the data
Data controller: [Sole proprietor / company name], [EDRPOU code / taxpayer ID], [address].
Contact for personal data matters: ceo.ayron@gmail.com.
2. What data we receive
From the request form (only what you enter yourself):
- name — optional;
- contact: email, Telegram username or phone number;
- a description of your task.
Technical data that your browser sends automatically:
- IP address. With your request we store not the address itself but an irreversible hash of it, to detect repeated attempts and spam. Server technical logs record the IP address as is; these logs are overwritten automatically and kept for no longer than [N days];
- browser and device type (User-Agent), date and time of the request.
We do not use cookies, advertising trackers or analytics services. The browser stores only a technical marker that the intro animation has already been shown (sessionStorage, deleted when you close the tab) and, if you use the UA / EN switcher, the site language you chose (localStorage). Neither contains personal data.
3. Why
- to respond to your request and prepare an offer;
- to protect the website from spam, automated requests and overload;
- to comply with legal requirements.
We do not sell data or use it for mailings without your separate consent.
4. Legal basis
Your consent, which you give by submitting the form (Article 11 of the Law of Ukraine “On Personal Data Protection”). Also our legitimate interest in protecting the website from abuse, and taking steps at your request before entering into a contract. For visitors from the EU, the equivalent grounds are Article 6(1)(a), (b) and (f) GDPR.
5. Where the data is stored and who has access
Requests are stored in a database on our server [hosting location] and in a backup cloud database [provider, region]. Only the team members who handle requests have access.
To run the website, we use providers that may technically receive data:
- [hosting / Cloudflare] — website delivery and a secure connection;
- Cloudflare Turnstile — protecting the chat from bots. When you open the chat, Cloudflare checks that the request comes from a human: it receives technical browser and device data and your IP address and does not use them for advertising. Learn more in the Cloudflare privacy policy;
- Telegram — internal notifications to the team about a new request;
- [email provider] — emails to the team and, if you left an email address, a confirmation to you;
- [cloud database provider] — backup storage of requests.
Some of these providers may process data outside Ukraine. We choose services that ensure adequate data protection.
6. How long we keep data
Requests — 2 months after our last contact with you, unless we have started working together. After that, the data is deleted. If we have signed a contract, the data is kept for as long as the contract and the law require.
7. Your rights
At any time, you can:
- find out what data we hold about you and get a copy of it;
- correct inaccurate data;
- request deletion of your data or restriction of processing;
- withdraw your consent. This does not affect the lawfulness of processing before the withdrawal;
- file a complaint with the Ukrainian Parliament Commissioner for Human Rights (in the EU, with the supervisory authority of your country).
Write to ceo.ayron@gmail.com. We will reply within 30 calendar days.
8. Security
The website runs over a secure connection (HTTPS). Access to the database is restricted, admin access is protected by a password and short-lived tokens, the number of requests to the form and chat is limited, the chat is protected from bots (Cloudflare Turnstile), and contacts are partially masked in logs.
9. Changes
We may update this policy. The current version is always on this page, with the version date shown at the top.