Privacy Policy

1. Data Controller

The data controller responsible for processing your personal data is Borys Kharchenko, Individual Entrepreneur (FOP), registered in Ukraine. Contact details are shown at the bottom of this page.

2. What Data We Collect

Email correspondence — when you contact us by email, we receive your email address, name (if provided), and the contents of your message.

Payment metadata — when you pay an invoice via Plata by mono or LiqPay, the payment processor handles your card data directly. We never see, store, or process card numbers or CVV codes. We receive only the payment confirmation, amount, currency, and a transaction reference.

Server access logs — our VPS records standard access logs (IP address, user agent, timestamp, requested path, HTTP status code) for security and abuse-prevention purposes. Logs are retained for 30 days and then deleted automatically.

No cookies are set by this site. No analytics, tracking pixels, or third-party advertising scripts are used.

The only third-party HTTP request the page makes is to load font CSS from Google Fonts (fonts.googleapis.com and fonts.gstatic.com). Google may log your IP address as part of serving these resources under its own privacy policy.

3. Purposes of Processing

We process your data for the following purposes:

— to respond to your inquiries and provide quotes;

— to perform a contract with you (deliver Services under the Public Offer);

— to comply with our tax, accounting, and legal obligations under Ukrainian law;

— to protect the security and integrity of the Website and prevent abuse.

4. Legal Basis

We rely on the following legal bases under GDPR Article 6(1):

— (a) your consent — when you choose to contact us by email;

— (b) performance of a contract — for invoicing, payment, and delivery of Services;

— (c) legal obligation — for tax and accounting record-keeping required by Ukrainian law;

— (f) legitimate interest — for security, abuse prevention, and minimal access logging.

5. Third Parties

We share data with a limited number of third parties strictly necessary for the operation of the Website and our Services:

— Plata by mono and/or LiqPay (payment processors based in Ukraine) — for processing payments. They handle card data directly under their own privacy policies.

— Cloudflare, Inc. — for DNS resolution of the kharchenko.work domain. DNS queries may be logged by Cloudflare under its own policy.

— Our VPS hosting provider — for hosting the Website and the self-hosted content management system.

— NocoDB (self-hosted) — stores portfolio content only; no personal data of website visitors is stored there.

— Google Fonts (Google LLC) — when your browser loads the Website it requests font CSS files, during which Google may log your IP address.

We do not sell your data and do not share it for advertising purposes.

6. International Transfers

Loading Google Fonts may transfer your IP address outside Ukraine and the European Economic Area; Google handles such transfers under its standard contractual clauses and own privacy framework. Cloudflare DNS data is processed under its own data processing agreement.

7. Retention

Email correspondence — kept for up to 3 years after the last interaction, then deleted.

Contract and payment records — kept for 3 years in accordance with Article 44 of the Tax Code of Ukraine.

Server access logs — kept for 30 days, then deleted.

8. Your Rights

Under GDPR Articles 15–22 and the Law of Ukraine "On the Protection of Personal Data", you have the right to: (a) access your data; (b) request correction of inaccurate data; (c) request erasure ("right to be forgotten"); (d) request restriction of processing; (e) request data portability; (f) object to processing based on legitimate interest; (g) withdraw consent at any time.

EU residents may also lodge a complaint with their local supervisory authority. Ukrainian residents may complain to the Ukrainian Parliament Commissioner for Human Rights (Уповноважений Верховної Ради України з прав людини).

9. How to Exercise Your Rights

To exercise any of your rights, contact us by email (see "Data Controller" above). We will respond within 30 days as required by GDPR Article 12(3).

10. Children

The Website is not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date below shows when the Policy was last revised. Material changes will be highlighted on the Website homepage for 30 days following publication.

12. Contact

For any privacy-related inquiry, contact us at the email shown below in the Data Controller section.

Data Controller

Name

Borys Kharchenko, Individual Entrepreneur (FOP)

Tax ID (RNOKPP)

[RNOKPP classified]

Email

[email protected]

Address

[City, Ukraine]

Last updated: 2026-05-19