This policy explains how Cyborg Studio processes the personal data of website visitors and clients. We comply with the EU General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection".
Who processes your data
The data controller is the digital agency Cyborg Studio, Odesa, Ukraine. For any questions about personal data, email cyborgstudio.od@gmail.com or call +380 67 250 60 02.
What data we collect
- Enquiry form data: your name, phone number or Telegram handle, project description and selected budget.
- Technical enquiry data: the page the form was sent from, the site language, your IP address and browser details.
- Calls and messages: your phone number and whatever you tell us by phone, via the callback widget or in messengers.
- Cookies and analytics: only with your consent — see our cookie policy.
We do not request payment details, identity documents or special categories of data through the website.
Why and on what legal basis
- To respond to your enquiry, prepare a proposal and conclude a contract — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
- To provide services under a contract and correspond about the project — performance of a contract (Art. 6(1)(b) GDPR).
- To protect the site from spam and abuse (IP address, browser details) — legitimate interest (Art. 6(1)(f) GDPR).
- Analytics and advertising — your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
- Accounting and tax records for contracts — legal obligation (Art. 6(1)(c) GDPR).
Who we share data with
We do not sell personal data. Only studio staff who handle enquiries and the services the website relies on have access to it:
- our hosting provider — the server that runs the website and stores enquiries;
- Google (Gmail) — a copy of each enquiry is sent to the studio's mailbox;
- Telegram — a notification about a new enquiry is sent to the studio's work chat;
- Binotel — if you use the callback widget;
- Google and Meta — analytics and advertising, only with your consent.
Transfers outside the EU
The studio operates from Ukraine, and some services (Google, Meta, Telegram) process data in other countries. Such transfers rely on the European Commission's standard contractual clauses, the EU–US Data Privacy Framework (for certified companies) or Art. 49(1)(b) GDPR where the transfer is necessary to handle your enquiry.
How long we keep data
- Enquiries — up to 3 years after our last contact with you, after which they are deleted.
- Data relating to contracts — for as long as accounting and tax laws require.
- Cookies — retention periods are listed in our cookie policy.
Your rights
You may at any time request access to your data, its correction or deletion, restriction of processing and data portability, object to processing based on legitimate interest and withdraw your consent. To do so, email cyborgstudio.od@gmail.com — we will reply within 30 days. You also have the right to lodge a complaint with the data protection authority of your EU country or with the Ukrainian Parliament Commissioner for Human Rights.
How we protect data
The website runs over HTTPS only, and enquiries are available only in a password-protected admin panel accessible to a limited number of staff.
Children
The website is intended for businesses. We do not knowingly collect data from anyone under 16.
Changes to this policy
We may update this policy; the current version is always published on this page. Last updated: 27.09.2026.
