Privacy Policy

1. Personal data controller

The controller of personal data is the business entity providing services under the ITFB brand (IT for Business).

Contact for personal data requests: office@itfb.com.ua. Phones: +38 (050) 470-29-17, +38 (067) 523-77-57. Location: Kyiv, Ukraine.

If you need the Provider’s full legal details (legal name / sole proprietor full name, USREOU / tax ID) for a contract or data subject request, email office@itfb.com.ua.

2. What data we process

Depending on how you interact with the website and services, we may process: name; email address; phone number; message text and information you voluntarily provide; technical data (IP address, browser type, language, date/time of request, pages viewed); cookies and similar technologies; data needed to verify that a request is sent by a human (for example, a reCAPTCHA token); data needed to conclude and perform a contract (client details, contact persons, access credentials, infrastructure parameters).

We do not require special (sensitive) categories of personal data via website forms. Please do not send passwords, access keys, full payment card numbers, third-party data without a legal basis, or other confidential secrets through the website.

3. Purposes and legal bases

We process data to: respond to enquiries and prepare proposals; conclude, perform and support contracts; provide technical support; improve the website and services; ensure security and prevent fraud or abuse; comply with legal duties (including tax/accounting duties where applicable); protect our legitimate interests in disputes and claims.

Legal bases include: data subject consent (where requested or expressed by an action such as submitting a form); necessity for concluding/performing a contract or taking steps at your request before a contract; the Controller’s legitimate interests (security, aggregated analytics, protection of rights) where they do not override your rights and freedoms; compliance with a legal obligation.

4. Cookies, analytics and third-party services

The website may use cookies and similar technologies for site operation, preferences, traffic analytics and form protection. If Google Tag Manager / web analytics tools are connected, they may collect anonymised or pseudonymised technical data about website use under the relevant providers’ policies.

Contact forms may be protected by Google reCAPTCHA; Google’s terms then apply to that processing. Email and hosting may involve infrastructure providers acting as processors on our behalf under a contract / service terms.

You may restrict cookies in your browser settings. Some site features may work less well if cookies are disabled.

5. Who may receive data

We do not sell personal data. Access may be given to: authorised staff / contractors of the Provider as needed for their tasks; hosting, email, bot-protection and analytics providers solely to deliver those services; public authorities — only in cases and under procedures set by Ukrainian law; other persons — with your consent or where needed to perform a contract (for example, cooperating with your hosting provider on your instructions).

If a cross-border transfer occurs (where a provider’s tools are hosted outside Ukraine), we apply available organisational and technical measures and choose providers with a reasonable level of protection to the extent practicable for the chosen tools.

6. Retention periods

Enquiry data is kept for as long as needed to respond and continue communication, and for a reasonable period to protect against repeated abuse and claims (typically up to 3 years unless law or contract requires otherwise).

Contractual, primary and accounting records are kept for periods required by Ukrainian law. Technical logs and analytics are kept for shorter operational periods or in aggregated form.

After the retention period, data is deleted or anonymised, except where further retention is required by law or needed to protect rights in a dispute.

7. Your rights

Under the Law of Ukraine “On Personal Data Protection”, you have rights including to: know about sources of collection, location of your data, purposes of processing, and the Controller’s location; obtain information about conditions of access to data; access your personal data; submit a reasoned request to change or destroy data if it is processed unlawfully or is inaccurate; withdraw consent (where processing is based on consent); complain to the Ukrainian Parliament Commissioner for Human Rights or to a court; use legal remedies if personal data laws are violated.

To exercise your rights, email office@itfb.com.ua with the subject “Personal data”. We may ask you to verify your identity to the extent needed to prevent disclosure to third parties. We respond within a reasonable time, subject to legal requirements.

8. Security

We apply organisational and technical measures aimed at protecting data against accidental loss, unauthorised access, alteration or disclosure: need-to-know access, protected communication channels where appropriate, and access controls for work systems.

No method of transmission or storage over the internet is completely secure. By sending data through the website, you acknowledge residual risks and agree not to submit critical access secrets via website forms.

9. Children’s data

The ITFB website and services are intended for business users and adults. We do not knowingly collect children’s personal data. If you believe a child has sent us data, contact office@itfb.com.ua and we will take steps to delete it.

10. Changes to this policy

We may update this Policy. The current version is always available on this page with the update date. Continued use of the website after publication means you have reviewed the updated version as it relates to website use. For contractual relationships, changes apply as provided by the contract or by law.