Privacy policy.
LAST UPDATED —
01
The short version
We collect what you send us through the contact form and nothing else. We use it to reply to you. We do not sell it, share it for marketing, or add you to lists you didn’t ask for. You can ask us to delete it at any time and we will.
The rest of this document is the detail behind that.
02
Who is responsible
Ukrany LLC is the data controller for information collected through this website.
- Registry code (EDRPOU): 43820915
- Registered address: Molochna St. 15, Lviv, Ukraine
- Email: [email protected]
We have not appointed a Data Protection Officer. Given the small volume and narrow scope of the data we handle through this site, we are not required to.
03
What we collect
Through the contact form:
| Field | Required | Why we need it |
|---|---|---|
| Name | Yes | To address you properly |
| Email address | Yes | To reply to you |
| What you need | Yes | To route your enquiry to the right person |
| Message | Optional | The substance of your enquiry |
| Privacy consent | Yes | Your explicit agreement to this policy |
The form also contains a hidden anti-spam field. It is invisible to people, and only automated submissions fill it in. If it is filled, we discard the submission without reading it.
Automatically, when you visit:
Our hosting provider records standard server log data — IP address, browser type, pages requested and timestamps. This is necessary to serve the site and to protect it from attack and abuse.
Web fonts. All typefaces used on this site are served from our own infrastructure. No font request leaves our servers.
What we do not collect. We have no user accounts. We take no payments on this site. We run no advertising pixels, no analytics trackers and no third-party marketing tags. We do not build profiles of visitors.
04
Why we’re allowed to process it
| What we do | Lawful basis under GDPR |
|---|---|
| Reply to your enquiry | Art. 6(1)(b) — steps taken at your request before entering a contract |
| Keep a record of the enquiry | Art. 6(1)(f) — our legitimate interest in managing our business |
| Server logs, spam protection | Art. 6(1)(f) — our legitimate interest in the security and availability of the site |
Under Ukrainian law, processing is carried out in accordance with the Law of Ukraine “On Personal Data Protection”.
05
Who else sees it
We do not sell your data and we do not share it for marketing. We rely on one service provider who processes data on our behalf:
| Provider | What it does |
|---|---|
| DigitalOcean, LLC | Hosts the website and records server logs |
Everything else — fonts, images, video — is served from our own infrastructure, so no other third party receives data when you visit.
Where a provider processes data outside Ukraine, the European Union or the United Kingdom, transfers are made under appropriate safeguards — normally the European Commission’s Standard Contractual Clauses.
We may also disclose data where we are required to by law, or where it is necessary to establish or defend legal claims.
06
How long we keep it
- Enquiries that don’t lead to work: up to 12 months, then deleted.
- If you become a client: for the duration of our engagement, and afterwards for as long as applicable accounting, tax and statutory limitation rules require.
- Server logs: as retained by our hosting provider under its standard configuration.
07
Your rights
Under the GDPR and under Ukrainian law, you can ask us to:
- show you the data we hold about you
- correct anything inaccurate
- delete it
- restrict how we use it
- provide it in a portable format
- object to processing we base on legitimate interest
- withdraw consent at any time, where processing is based on consent
Write to [email protected]. We respond within 30 days. We won’t charge you, and we won’t ask why.
If you believe we have handled your data badly, you can complain to a supervisory authority — in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the European Union, the data protection authority of the country where you live.
08
Security
We keep enquiries in access-controlled systems, limit access to the people who need it, and serve the entire site over encrypted connections (HTTPS).
No system is perfectly secure and we do not claim otherwise. But we do not collect anything we do not need, which is the most effective protection there is.
09
Children
This site is aimed at businesses. We do not knowingly collect data from anyone under 18. If you believe a child has sent us information, write to [email protected] and we will delete it.
10
Changes
We update this policy when what we do changes. The date at the top always reflects the current version. If a change is material, we will flag it on the site.