Privacy Policy

Last updated: 08/05/2026

1. General Provisions

This Privacy Policy (hereinafter — the "Policy") defines the procedure for processing and protecting the personal data of users of the website www.haiq.agency (hereinafter — the "Site"), operated by:

Name: [COMPANY NAME / SOLE PROPRIETOR]
Address: [LEGAL ADDRESS]
EDRPOU / RNPK: [CODE]
Email: hello@haiq.agency
Phone: +380 68 319 56 56

The Policy is developed in accordance with:

GDPR (Regulation (EU) 2016/679) — for users from the EU/EEA
Law of Ukraine "On Personal Data Protection" No. 2297-VI — for users from Ukraine
Directive 2002/58/EC (ePrivacy) — regarding the use of cookies and electronic communications

2. Data We Collect

Category	Examples	Source
Contact data	First name, last name, email, phone	Forms on the website
Message content	Text of message, inquiries	Contact forms
Technical data	IP address, browser type, OS, device	Automatically upon visit
Cookie data	Session identifiers, preferences	Cookies and trackers
Analytics data	Pages visited, time on site, traffic sources	Google Analytics, etc.
Account data	Login, password (hashed), order history	Upon registration

3. Purposes and Legal Bases for Processing

Purpose	Legal basis (GDPR)	Legal basis (Ukrainian Law)
Responding to your requests and providing services	Art. 6(1)(b) — performance of contract / pre-contractual measures	Art. 8 — data subject's consent
Registration and authorization on the website	Art. 6(1)(b) — performance of contract	Art. 8 — consent
Analytics and website improvement	Art. 6(1)(a) — consent (via cookies)	Art. 8 — consent
Marketing and newsletters	Art. 6(1)(a) — consent (separate)	Art. 8 — consent
Compliance with tax and legal obligations	Art. 6(1)(c) — legal obligation	Art. 8 — legal requirements
Fraud prevention and security	Art. 6(1)(f) — legitimate interests	Art. 8 — legitimate interests

4. Data Retention Periods

Data type	Retention period	Basis
Contact data (inquiries)	[3 years] from last contact	Within justified business purposes
Account data	Until account deletion + [30 days]	Until consent withdrawal
Analytics data (cookies)	[13 months] from collection	CNIL/EDPB recommendation
Marketing consent	Until withdrawal + [30 days] for deletion	GDPR Art. 7(3)
Financial/tax documents	[3 years / 5 years] as required by law	Tax legislation
Consent records (consent log)	Until expiration of potential claims	GDPR Art. 17(3)(b)(e)

5. Data Sharing with Third Parties

We may share your personal data with the following categories of recipients:

Hosting providers: [Hostinger] — storage and processing of website data
Payment systems: [Stripe / LiqPay / Wayforpay] — payment processing
Analytics services: Google Analytics, [Hotjar / Clarity] — only with consent
Email services: [Mailchimp / SendGrid / Amazon SES] — sending emails
Marketing platforms: Meta (Facebook), Google Ads — only with consent
Government authorities: upon lawful request

Cross-border data transfer

If your data is transferred outside Ukraine or the EU/EEA (e.g., to the USA), we ensure appropriate safeguards:

Standard Contractual Clauses (SCCs) — EU Regulation 2021/914
Transfer Impact Assessment (TIA) — where necessary
Ukraine is recognized as a country with an adequate level of protection for GDPR purposes (EU Decision 2022/2573 of February 23, 2022, suspended due to martial law — please verify the current status)

Note: The EU adopted the adequacy decision for Ukraine's data protection in 2022, but its application has been suspended. The current status must be verified at the time of implementation.

6. Cookies

We use the following categories of cookies:

Category	Purpose	Consent required
Necessary	Authentication, security, shopping cart	No
Analytical	Google Analytics, statistics	Yes
Marketing	Meta Pixel, Google Ads	Yes
Functional	Language, region, preferences	Yes

You can manage cookies through the settings at any time by clicking "Privacy Settings" in the website footer.

7. User Rights

Under the GDPR (for users from the EU/EEA):

Right of access (Art. 15) — obtain a copy of your data
Right to rectification (Art. 16) — correct inaccurate data
Right to erasure (Art. 17) — "right to be forgotten"
Right to restriction of processing (Art. 18)
Right to data portability (Art. 20) — receive data in a machine-readable format
Right to object (Art. 21) — against processing based on legitimate interests
Right to withdraw consent (Art. 7(3)) — at any time, as easily as it was given
Right to lodge a complaint with a supervisory authority (Art. 77)

Under the Law of Ukraine No. 2297-VI (for users from Ukraine):

Right to information about data processing
Right to access your data
Right to correct inaccurate data
Right to protection against automated processing
Right to withdraw consent
Right to appeal the data controller's actions to the Ukrainian Parliament Commissioner for Human Rights

How to exercise your rights:

Send a request to hello@haiq.agency with the subject line "Data Subject Rights Request." Please include:

Your name and contact details
Which right you wish to exercise
Specific data (if applicable)

We will respond within 30 days (GDPR Art. 12(3)). In complex cases, this period may be extended up to 90 days, with notification of the reasons.

8. Automated Decision-Making and Profiling

We do not use automated decision-making that produces legal or similarly significant effects for you. We may use profiling for analytical purposes with your consent.

9. Data Security

We apply technical and organizational security measures in accordance with Article 32 of the GDPR:

Data encryption in transit (TLS/SSL)
Password hashing (bcrypt / Argon2)
Access restriction based on the need-to-know principle
Regular backups
Access logging for personal data
Regular security updates and patches

10. Data Breach Notification

In the event of a personal data breach that may pose a risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours of becoming aware of it (GDPR Art. 33) and will inform you if the risk is high (GDPR Art. 34).

11. Policy Changes

We reserve the right to update this Policy. We will notify you of significant changes by email or via a banner on the website. The current version is always available on this page with the date of the latest update.

12. Contact Information

For questions regarding the processing of personal data, exercising your rights, or withdrawing consent, please contact:

Email: hello@haiq.agency
Phone: +380 68 319 56 56
Website: www.haiq.agency

Supervisory authorities:

EU: National data protection authority of your country (list: edpb.europa.eu)
Ukraine: Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua)