Privacy Policy

1. Who processes your data

The controller of personal data is Maksim Vorobiov, founder of akitalab (website akitalab.com.ua). For any question about your data, write to akitamedialab@gmail.com.

This policy applies to visitors from Ukraine, Cyprus and other countries. Processing complies with the Law of Ukraine “On Personal Data Protection” and, for visitors from the European Economic Area, the United Kingdom and Switzerland, with the EU General Data Protection Regulation (GDPR).

2. What data we process

• Form data: name, phone, e-mail, niche or vacancy, chosen format of work, and the language and address of the page the request was sent from.
• Traffic source data: ad click identifiers (gclid, gbraid, wbraid, fbclid, ttclid), UTM tags, referrer, page and time of the first visit, and an anonymous visitor ID. They reach us together with the request so I can see which ad it came from.
• Technical data: IP address, browser and device type, language, pages viewed. The services that run the site receive them (section 5).
• Correspondence: if you write by e-mail or messenger, we see your contact details and the content of your messages.

3. Why and on what legal basis

• Replying to your request, running the strategy session and preparing a proposal — steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).
• Providing services and corresponding during our work together — performance of a contract (Art. 6(1)(b) GDPR).
• Protecting the form from spam and bots (Cloudflare Turnstile, a hidden field, a fill-time check) — legitimate interest (Art. 6(1)(f) GDPR).
• Analytics and ad measurement (Google Analytics 4, Google Ads, Meta Pixel and Conversions API, storing the traffic source). In the EEA, the UK and Switzerland — only with your consent (Art. 6(1)(a) GDPR); until then these tools are switched off. In other countries, including Ukraine — legitimate interest in measuring advertising; you can opt out with the “Cookie settings” button at the bottom of the page.
• Meeting legal obligations, including accounting ones, once we work together (Art. 6(1)(c) GDPR).

We make no automated decisions about you that have legal effects for you. Providing data in the form is voluntary, but without a phone number or e-mail we cannot reply to your request.

4. How long we keep data

• Requests and correspondence that did not lead to work together — up to 24 months after the last contact, then deleted.
• Client data — for the duration of our work and the periods required by law for contracts and reporting.
• Cookies and browser storage — for the periods in the Cookie Policy. If you decline cookies, the traffic source data stored in your browser is erased immediately.

You can ask us to delete your data earlier at any time — see section 6.

5. Who receives your data

We do not sell personal data. It is processed by the services that run the site and the request flow, each under its own data processing terms:

• Cloudflare, Inc. (USA) — website hosting, the request queue (Cloudflare Workers) and bot protection for the form (Turnstile).
• Make.com (Celonis SE, Germany, processing in the EU) — passes the request to the request sheet and a notification to me and, with your consent, to the Meta Conversions API.
• Google (Google Ireland Ltd, Google LLC) — Google Analytics 4, Google Ads, Google Sheets for the request log, Gmail for correspondence, Google Fonts (Google receives your IP address when fonts load).
• Meta (Meta Platforms Ireland Ltd) — Meta Pixel and Conversions API for ad measurement; in the EEA only with your consent.
• Telegram — a notification to me about a new request, and correspondence if you write on Telegram.

Some of these services process data outside the EEA, including in the USA. Such transfers rely on GDPR mechanisms: European Commission adequacy decisions (including the EU–US Data Privacy Framework for certified companies) or the EU Standard Contractual Clauses in these services’ data processing agreements.

6. Your rights

• Access your data and get a copy.
• Correct inaccurate data.
• Have your data erased.
• Restrict processing.
• Receive your data in a machine-readable format.
• Object to processing based on legitimate interest, including ad measurement.
• Withdraw consent at any time with the “Cookie settings” button at the bottom of every page. This does not affect processing carried out before withdrawal.

Write to akitamedialab@gmail.com — I will reply within one month. If you believe your rights have been infringed, you can complain to a supervisory authority: in Cyprus, the Commissioner for Personal Data Protection (dataprotection.gov.cy); in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in other EEA countries, the authority of your country.

7. Security

The site runs over HTTPS only, access to requests is restricted, and we take reasonable technical and organisational measures to protect data from unauthorised access, loss or disclosure.

8. Cookies

Which cookies and similar technologies the site uses, how long they are kept and how to manage consent is described in the Cookie Policy.

9. Changes and contact

We update this policy when the services or the way we process data change. Current version: 18 October 2026. Questions about your data: akitamedialab@gmail.com.