Privacy policy

Who processes the data

The data controller is FOP Bohdan Kostiantyn Serhiiovych (a sole proprietor registered in Ukraine), operating as PHPDEV. For any questions about your data, email info@phpdev.studio or call +38 (050) 523-95-51.

What data we receive

• Request form: name, phone, email, comment, plus the page the request was sent from and the button that opened the form.
• Brief (a questionnaire behind a personal link): contact details, answers about the project and the files you upload.
• Correspondence: anything you send by email or via messengers.
• Analytics — only with your consent: pages viewed, referral source, device and browser type, approximate location (Google Analytics 4).
• Technical logs: IP address, browser and request time in server and Cloudflare logs, for website security.

Why

• to reply to your request, estimate the project and prepare a contract and specification;
• to perform the contract and support the project;
• to understand which pages of the website are useful (only with consent);
• to protect the website from abuse and attacks;
• to meet tax accounting requirements.

Legal bases

Your consent — for analytics; you can withdraw it at any time. Steps taken at your request before entering into a contract and performance of a contract — for requests, briefs and correspondence. Legitimate interest — for website security. Legal obligation — for accounting. Data is processed in accordance with the Law of Ukraine “On Personal Data Protection” and, for visitors from the EU, the General Data Protection Regulation (GDPR).

Who we share data with

We do not sell data or share it for advertising. It is processed only by services the website cannot work without:

• Fornex Hosting — website and email server (Germany);
• Cloudflare — page delivery and attack protection;
• Google — Google Analytics (with consent) and Gmail, where the studio’s email is forwarded;
• Telegram — studio notifications about new requests and briefs.

Some of these services process data outside Ukraine and the EU, based on their standard contractual clauses for data protection.

How long we keep data

• requests that did not lead to cooperation — up to 12 months;
• briefs, correspondence and project documents — for the duration of cooperation and 3 years after it, unless the law requires longer;
• Google Analytics data — 14 months;
• server logs — up to 5 weeks.

Cookies and browser storage

• pll_language — remembers the website language, 1 year. Required for the website to work.
• _ga, _ga_* — Google Analytics, up to 2 years. Set only after you click “Allow”.
• Browser storage (localStorage) — your analytics choice and a dismissed language bar. Never sent anywhere.
• Cloudflare may set technical cookies to protect against bots.

You can change your analytics choice at any time with the “Cookies” button at the bottom of the page.

Your rights

You can find out what data we hold about you, have it corrected or deleted, restrict or object to its processing, receive it in a portable format and withdraw your consent. Email info@phpdev.studio — we will reply within 30 days. If you believe your rights have been violated, you can contact the Ukrainian Parliament Commissioner for Human Rights, or, for visitors from the EU, the data protection authority of your country.

Security

The website works over HTTPS only. Brief files are stored outside the public part of the server and are accessible only via a personal link, and only the studio has access to the administration area.

Children

The website is not intended for people under 16, and we do not knowingly collect their data.

Changes to this policy

The current version is always on this page; the update date is shown at the top.