Privacy Policy

01General provisions

This policy explains how the tochnodev.com website (hereinafter the "website", "we") processes the personal data of visitors and clients: what data, for what purpose, on what basis, to whom it is disclosed, how long it is retained and what rights you have.

We process data in accordance with the Law of Ukraine «On Personal Data Protection» and, with respect to persons located in the European Union, also in accordance with the EU General Data Protection Regulation (GDPR).

By using the website and submitting forms, you confirm that you have read this policy.

02Who is responsible for the data

The controller of personal data is the owner of the tochnodev.com website. For all questions about data processing, and to exercise your rights, write to privacy@tochnodev.com.

03What data we collect

We collect the minimum needed to respond to your request and operate the website.

• Request, brief and contact formsname, contact (Telegram, phone or email), selected services, task description, website link, estimated budget and timeline — only what you fill in yourself
• Correspondencemessages you send to messengers or by email, and our replies
• Referral sourceUTM tags, landing page and referring website — attached to your request; stored in a cookie only with your consent to analytics
• Technical dataIP address, browser type, date and time of the request — in server logs for security and spam protection
• Analytics (with consent)anonymised visit statistics: pages, device, traffic source

We do not collect special categories of data (health, biometrics, etc.) and do not ask you to provide them. Please do not enter them in the forms.

04Purposes and legal bases

• Responding to a request, estimating, preparing a contractsteps taken at your request before entering into a contract (Art. 11 of the Law; Art. 6(1)(b) GDPR)
• Performance of a contract, invoices and actsperformance of a contract and legal obligations (Art. 6(1)(b), (c) GDPR)
• Website security, protection from spam and abuselegitimate interest (Art. 6(1)(f) GDPR)
• Analytics and marketing cookiesyour consent in the cookie banner, which you may withdraw at any time (Art. 6(1)(a) GDPR)
• Mailingsonly with separate explicit consent; we currently send no mailings

05Who receives the data

We do not sell data or share it for advertising. Data is received only by services without which your request cannot be processed, and only to the extent necessary:

• Hosting providerthe server on which the website runs and forms are processed
• Telegramdelivery of the request to the team's working chat
• Resenddelivery of the request to the working mailbox and an auto-reply to your email
• Google (Tag Manager, Analytics)visit statistics — only after your consent
• Cloudflare Turnstilea "you are not a robot" check in forms, if enabled
• Public authoritiesonly in cases and in the manner expressly provided for by law

Some of these services process data outside Ukraine and the EU (for example, in the USA). In such cases the transfer is based on standard contractual clauses or other mechanisms provided for by data protection law. We host fonts and other website resources on our own server, so no data is transferred to third-party CDNs when you view pages.

06How long we retain data

• Requests that did not lead to a contract12 months, then deleted
• Client data and documents under a contractthe term of the contract and 3 years after its end, or longer if required by law
• Server logsup to 30 days
• Cookie with the referral sourceup to 90 days
• Analyticsup to 14 months in Google Analytics

07Cookies and local storage

Necessary cookies and entries in the browser's local storage keep the website working: they store your choice in the cookie banner and your brief draft (it is not sent to us until you submit the form). Consent is not required for them.

Analytics and marketing cookies are enabled only after your consent. You can change your choice at any time via the "Cookie settings" link at the bottom of every page. See the Cookie Policy for details.

08Your rights

Under Article 8 of the Law of Ukraine «On Personal Data Protection» and the GDPR, you have the right to:

• Accessfind out whether we process your data, which data, for what purpose and to whom we disclose it
• Rectificationrequire inaccurate or incomplete data to be corrected
• Erasurerequire data to be deleted if there is no lawful basis to retain it
• Restriction and objectionrestrict processing or object to processing based on legitimate interest
• Portabilityreceive your data in a structured, machine-readable format
• Withdrawal of consentat any time, without affecting the lawfulness of processing before withdrawal
• Complaintto the Ukrainian Parliament Commissioner for Human Rights or to the data protection supervisory authority in your EU country

To exercise your rights, write to privacy@tochnodev.com. We may ask you to verify your identity so as not to disclose data to a third party. We reply within 30 days.

09How we protect data

The website operates only over HTTPS. Access to requests is limited to team members who need it for their work. Service accounts are protected with strong passwords and two-factor authentication. We do not store payment card data.

10Children

The website and services are intended for businesses and adults. We knowingly do not collect data from persons under 16. If you believe a child has sent us their data, write to privacy@tochnodev.com and we will delete it.

11Changes to the policy

We may update this policy, for example when we connect a new service. The date of the current version is shown at the top of the page. We will notify clients of material changes by email.