Privacy Policy

01General provisions

This Privacy Policy explains what personal data ST.K Design (hereinafter “we”, the “Agency”) collects when you use the stk-design.biz.ua website, for what purpose we process it, whom we may share it with, and what rights you have regarding your data.

We process data in accordance with the Law of Ukraine “On Personal Data Protection” and the EU General Data Protection Regulation (GDPR) if you are located in the European Union.

By using the site and submitting the contact form, you confirm that you have read this Policy and agree to the data processing terms described in it.

02What data we collect

Data you provide yourself

When you fill in the form on the Contact page or write to us directly, we receive:

• Name — so we can address you correctly.
• Email — the primary channel for replying to your request.
• Phone number — an alternative communication channel.
• Messenger handle (Telegram or Viber) — at your option.
• Project type and approximate budget — to prepare a relevant proposal.
• Message text — a description of your task.

Data collected automatically

When you visit the site, analytics services may record technical information:

• Anonymised IP address and approximate region.
• Device type, operating system, browser and screen resolution.
• Referral source, pages viewed, time on site and on-page actions.
• Cookie identifiers.

03Purpose and legal basis for processing

We process data only when there is a lawful basis for it, and only to the extent necessary for the specific purpose.

We do not use your contact data to send marketing emails without separate, explicit consent.

04Cookies

Cookies are small text files your browser stores on your device. We use them in three categories:

• Essential — ensure the basic operation of the site and store your cookie choices. Set without consent, as the site cannot function correctly without them.
• Analytics — help us understand which pages interest visitors and where difficulties arise. Enabled only after your consent.
• Advertising — let us assess the effectiveness of ad campaigns. Enabled only after your consent.

You can change your choices at any time via the cookie settings banner, or delete stored files in your browser settings. Disabling analytics and advertising cookies does not affect access to the site’s content.

05Analytics and advertising services

To measure the site’s effectiveness, we use third-party services that act as independent data processors:

• Google Analytics 4 — anonymised statistics on visits and on-site behaviour.
• Google Ads — measurement of ad campaign conversions.
• Google Fonts — font delivery; your IP address may be transmitted when fonts load.
• Cloudflare — processing of submitted forms and protection against malicious traffic.

We use Google Consent Mode v2: until we receive your consent, advertising and analytics tags operate in a limited mode and do not set identifying cookies. Data processing by these services is governed by their own privacy policies.

06Sharing data with third parties

We do not sell or share your personal data with third parties for commercial purposes.

Data may be shared only in the following cases:

• With service providers that technically support the site (hosting, form processing, analytics) — solely to the extent needed to deliver the service.
• With contractors involved in your project — subject to signing a confidentiality agreement.
• At the request of competent government authorities, in the manner provided by law.

Some services are located outside Ukraine and the EU. Data transfers to such countries are carried out on the basis of standard contractual clauses approved by the European Commission.

07Retention periods

We keep data only for as long as necessary to achieve the purpose for which it was collected.

• Requests that did not lead to cooperation — up to 12 months from the last contact.
• Client data for completed projects — for the term of the contract and 3 years after its completion.
• Analytics data — up to 14 months in anonymised form.
• Cookies — from a single session up to 24 months depending on the file type.

Once the period ends, data is deleted or anonymised beyond recovery.

08Your rights

Regarding your personal data, you have the right to:

• Know what data we hold about you and obtain a copy of it.
• Rectify inaccurate or incomplete data.
• Erase data (the “right to be forgotten”) if there is no lawful basis for further retention.
• Restrict processing or object to it.
• Withdraw consent at any time — this does not affect the lawfulness of processing carried out before withdrawal.
• Port your data in a structured, machine-readable format.
• Lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or the supervisory authority of your country.

To exercise any of these rights, email us at staskozumic@gmail.com. We will respond within 30 calendar days. To protect your data, we may ask you to verify your identity.

09Data security

We apply technical and organisational measures to protect data from unauthorised access, loss or disclosure:

• HTTPS connection encryption across all pages of the site.
• Transmission of form data via a secure server endpoint with no client-side storage.
• Restricted data access — only for staff who need it for their work.
• Protection against automated submissions and spam.

That said, no method of transmitting data over the internet is completely secure. We cannot guarantee 100% protection, but we make every reasonable effort to minimise risks.

10Children’s data

The site is aimed at a business audience and is not intended for persons under 16. We do not knowingly collect data from minors. If you believe a child has provided us with their data, notify us at staskozumic@gmail.com — we will delete it without delay.

11Changes to this Policy

We may update this Policy to reflect changes in legislation or in how the site works. The current version is always available at this address, and the date of the last update is shown at the top of the page.

In the event of significant changes, we will notify you on the site or by email if we have your contact details.