Privacy policy. How we handle data.

1. Who collects your data

The data controller for personal data collected on uplify.agency is PE Overkovskyi Viacheslav Anatoliiovych (Sole Proprietor, Ukraine) (hereafter — "UPLIFY", "we"). Registration details are at the bottom of this page.

We operate in Ukraine and process personal data under the Ukrainian Law on Personal Data Protection (No. 2297-VI). GDPR (EU Regulation 2016/679) applies where processing falls within its territorial and material scope; a cross-border transfer alone does not determine all those conditions.

2. What data we collect

We collect only data needed to deliver services, respond to your requests, and run the site lawfully.

2.1. Data you provide intentionally

• Forms (contact, audit request, service inquiry): name, e-mail, phone, company, site domain, task description.
• Contract data: full legal entity name, billing details, client-side contact persons.
• Subscriptions (if applicable): e-mail for newsletters.

2.2. Data collected automatically

• Technical data: IP address for network operation and site protection, browser user-agent, language, device type and operating system. Google Analytics 4 IP handling differs from the obsolete /24 masking description and depends on region and Google settings.
• Behavioral data: pages viewed, session duration, referrer, click events (via Google Analytics 4).
• Cookies: see section 7.

2.3. What we do NOT collect

• Forms on this site do not request biometric data or bank-card numbers. Contract payments are processed by your bank when transferring funds to the sole proprietor’s account.
• No "sensitive" categories (race, religion, health, etc.).
• We do not sell or share your data with marketing brokers.

3. Legal basis and purpose

Analysis of aggregate reports does not mean all incoming GA4 data is anonymous. The event and user data described in sections 2 and 5 is distinct from summary reports.

Current site mode: analytics is enabled by default and can be disabled through the banner or cookie settings. Advertising signals are disabled. This describes the current mode; lack of an opt-out is not described as explicit consent. Browser-storage details are listed in the Cookie policy.

4. Who has access

Only those who need it for their duties:

• UPLIFY team — least-privilege access.
• Hosting and infrastructure: Hetzner Online GmbH (physical servers in Germany, EU), Cloudflare Inc. (CDN, WAF, bot protection).
• Google: Google Workspace for corporate email, Google Sheets for selected forms and Google Analytics 4 for site analytics, subject to the cookie-settings choice.
• Enquiry delivery: enquiries are stored on the site and in UPLIFY OS and sent to our team in Telegram. Google Sheets is used for selected forms. Email is used for replies and automatic-check results; this does not mean every ordinary enquiry is copied to email. Google and Telegram process data for these functions, not for unrelated third-party marketing mailings.
• AI providers: UPLIFY uses AI for content and diagnostic workflows. The express scan may send Anthropic the domain, language and short descriptions of detected issues to edit the card wording. The form email is not included in that request: it is used to store the enquiry and deliver the report. Do not put passwords or unnecessary sensitive information in free-text fields.
• State authorities — only upon lawful request.

We do NOT pass your data to ad brokers, data aggregators, or third-party marketing platforms without your direct consent.

5. How long we keep data

• Form data: up to 24 months after last interaction, then deleted or anonymized.
• Contract data: at least 3 years post-engagement, or longer where required by Ukrainian tax law (standard primary-document retention is 1,095 days; some categories require 1,825 days).
• GA4 analytics: this policy provides for up to 14 months of event and user data retention. This is not the cookie lifetime. Google’s aggregated standard reports may be kept longer; Google data-deletion settings and a personal-data erasure request are separate mechanisms.
• Server logs: 30 days.

6. Your rights

Under Ukrainian personal-data law and GDPR where it applies, you can:

• Find out what data we hold.
• Receive a copy of your data.
• Correct inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict processing.
• Withdraw consent at any time.
• Lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with your national data protection authority.

To exercise any right, email hello@uplify.agency with subject "Data subject request". We respond within 30 calendar days.

7. Cookies & analytics

For the cookie list and analytics-choice controls, see the Cookie policy. To change your choice quickly (e.g., disable analytics), use the "Cookie settings" button in the footer of any page.

8. Contact

Questions about this policy — hello@uplify.agency or Telegram @uplify_agency.