1. General Provisions

1.1. This Privacy Policy (hereinafter referred to as "Policy") describes how the personal data of users of the Design+ website (hereinafter referred to as "Site") is collected, used, and protected.

1.2. By using the Site, you agree to the processing of your personal data in accordance with this Policy.

1.3. The Site Administration reserves the right to amend this Policy. Changes take effect from the moment they are published on the Site.

2. Definitions

Personal data - any information relating to an identified or identifiable natural person.

Processing of personal data - any action or set of actions performed with personal data.

Data subject - a natural person whose personal data is processed.

Controller - a natural person-entrepreneur who determines the purposes and means of processing personal data.

3. Categories of personal data collected

3.1. Data provided voluntarily:

• First and last name

• Email

• Phone number

• Company/project name

• Description of needs and wishes regarding services

• Other information provided in contact forms

3.2. Data collected automatically:

• IP address

• Browser type and version

• Operating system

• Pages visited by the user

• Time spent on the Site

• Source of transition to the Site

3.3. Cookies and similar technologies:

• Technical cookies to ensure the operation of the Site

• Analytical cookies to study user behavior

• Browser local storage files

4. Purposes of processing personal data

4.1. Personal data is processed for the following purposes:

• Provision of web design and consulting services

• Communication with potential and existing clients

• Responding to inquiries and requests

• Improving the quality of services and the functionality of the Site

• Marketing communications (with user consent)

• Analysis of site traffic and efficiency

5. Legal grounds for processing

5.1. The processing of personal data is carried out on the basis of:

• Consent of the data subject

• Performance of a contract or taking steps at the request of the data subject

• Compliance with legal obligations of the controller

• Protection of vital interests of the data subject

• Realization of legitimate interests of the controller

6. Retention period of personal data

6.1. Personal data is retained for the period necessary to achieve the purposes of processing:

• Contact information of clients - for 3 years after the last request

• Data on completed projects - for 5 years for reporting and portfolio

• Technical data and logs - for 12 months

• Marketing communication data - until consent is withdrawn

6.2. After the retention periods, personal data is deleted or anonymized.

7. Transfer of personal data to third parties

7.1. Personal data may be transferred to the following categories of recipients:

• IT service and hosting providers (to ensure the operation of the Site)

• Analytics and marketing services (Google Analytics, social networks)

• Payment systems (when making payments through a sole proprietor)

• Government authorities (in cases provided by law)

7.2. The transfer of personal data outside Ukraine is carried out in accordance with the requirements of current legislation.

8. Protection of personal data

8.1. The following measures are taken to protect personal data:

• Data encryption during transmission (SSL/TLS)

• Access restriction to personal data

• Regular updates of security systems

• Access control and audit of employee actions

• Data backup

8.2. In case of a security breach of personal data, data subjects will be notified within 72 hours.

9. Use of cookies

9.1. The Site uses cookies for:

• Ensuring the functionality of the Site

• Remembering user settings

• Collecting traffic statistics

• Personalizing content

9.2. The user can manage cookies through browser settings, but this may affect the functionality of the Site.

10. Rights of data subjects

10.1. A data subject has the right to:

• Access their personal data

• Correct inaccurate or incomplete data

• Delete personal data

• Restrict processing

• Data portability

• Object to processing

• Withdraw consent at any time

10.2. To exercise their rights, a data subject can contact through the contact form on the Site or via email.

11. Marketing communications

11.1. The sending of marketing materials is carried out only with the user's consent.

11.2. The user can opt-out of receiving marketing messages at any time by using the link in the email or by contacting the Site administration.

12. Rights of minors

12.1. The Site is not intended for use by individuals under 18 years of age.

12.2. If it becomes known that personal data of a minor was collected without parental consent, such data will be deleted.

13. Changes to the Privacy Policy

13.1. Users will be notified of significant changes to the Policy via the Site or by email.

13.2. Continued use of the Site after changes implies consent to the new version of the Policy.

14. Contact Information

14.1. For questions regarding the processing of personal data, you can contact us through the contact forms on the Site.

14.2. Responses to inquiries are provided within 30 calendar days.

15. Complaints and appeals

15.1. In case of disagreement with the processing of personal data, the subject has the right to file a complaint with the Commissioner of the Verkhovna Rada of Ukraine on human rights.

15.2. All disputes are attempted to be resolved out of court through negotiations.