Privacy Policy

Version of 4 October 2026. This is a translation; if the versions differ, the Ukrainian version prevails.

Who receives the data

Sole proprietor Bohdan Khomyn, Lviv, Ukraine — for requests sent through this website, orders from private individuals and business emails. For contracts with companies and entrepreneurs (audits and one-off work on invoice), the data is also received by OLBO PRODUCTION LLC (TOV “OLBO PRODAKSHEN”, company code 42772536, Lviv, Ukraine), which concludes these contracts and issues the invoices. Questions about your data, for both: hello@olbo.com.ua.

What we collect

• The “Questions?” assistant (OLBO bot): our server looks up the answer and the conversation is not stored. In anonymous Vercel statistics we count only answer topics, choices in “Find the right service” and clicks on “Fill in the brief” — no question text, name, contact details or IP. A question the assistant could not answer is sent anonymously to the studio’s Telegram so we can add the answer to the website; email addresses and phone numbers in it are hidden. We receive your name and email only if you fill in “Write to a person”.
• From the forms on this website — only what you enter in the brief, question or audit request form yourself: name, company, email, phone, project description, your website address.
• Anonymised visit statistics from our hosting provider Vercel (pages, referring source, country, device type) — no cookies and no data that could identify you.
• Where you came to the site from (utm tags, referring site, first page) — kept only within your browser tab; it reaches us only if you send a request, and is attached to it.
• If you came via a link in our email, we see that the page was opened by your institution — this tells us whether the email was useful. The institution code from the link is kept only in your browser’s local storage. If you do not want our emails, use the unsubscribe link in the email (more on cookies and statistics).
• Google Analytics and Google Ads measurement — only if you agreed in the banner. Without consent, Google scripts are not loaded. Google Ads runs only on pages for private individuals. Google does not receive the content of your request. You can change your choice on the Cookies page.
• There are no personalised ads or remarketing on the website.
• Accessibility settings are stored only in your browser and are not sent to us.
• To protect against spam, the server temporarily counts, in memory only, the number of requests from one IP address. For requests (brief, question, audit) the address is not stored.
• When you accept the contract on the order page: name, email, order number, package, contract edition, time, the boxes you ticked, and your IP address and browser type at the moment of acceptance — as proof that the contract was concluded.
• Card data is processed by LiqPay (JSC CB PrivatBank); we do not see or store it. From LiqPay we receive only the payment status and order number.
• For refunds — identity document details (series and number) and the Ukrainian taxpayer number (if any) and, for a refund to an IBAN, the IBAN. The document details are needed for the refund receipt required by Ukrainian tax law, the taxpayer number — to identify the applicant. We do not collect copies of documents.

Business contacts

If we wrote to you first, we took the company’s address from its website, its official LinkedIn page or a public brand directory. We write only to general company addresses (such as hello@ or info@), not to personal ones. The purpose is to offer services related to your company’s website. The legal basis is legitimate interest (Article 6(1)(f) GDPR): we offer a service related to the company’s business, and you can opt out with one word.

We keep the company name, the address, the date of our email and your reply for up to 12 months. If you reply “no”, we keep only the address on a list of those we will not write to again. We send these emails from the studio’s work mailbox and do not pass this data to anyone else.

You have the right to know what data we hold about you, to have it corrected or deleted, to restrict its processing or to object to it: reply “no” or write to hello@olbo.com.ua. We reply within 30 days. You can also lodge a complaint with the data protection authority in your country or, in Ukraine, with the Ukrainian Parliament Commissioner for Human Rights.

Why

To reply to your request and prepare an offer, and for orders — to conclude and perform the contract, issue a fiscal receipt, make refunds and prove the contract in case of a dispute. We do not sell your data or pass it to third parties other than the services named below.

Where it is stored

Your request goes to the studio’s work chat in Telegram and to the studio’s work email; the email is sent through the Resend mail service. The website and anonymised visit statistics are hosted on Vercel. If you consented to Google Analytics and Google Ads, Google also processes the statistics and data about visits from ads. There is no separate database of requests on the website. The record of contract acceptance is kept in the same Telegram work chat and studio email; you receive a copy of the contract by email.

Retention

Order data, the contract, the consent record and refund documents are kept for 3 years after the contract is performed (limitation period) and as long as tax accounting requires.

Your rights

Under the Law of Ukraine “On Personal Data Protection”, you can find out what data we hold about you and have it corrected or deleted. Write to us and we will delete it within 10 working days. Order data cannot be deleted before the retention period ends, as it is needed to perform the contract, for accounting and to protect the parties’ rights; we will stop any other processing on request.