Policy privacy

This Policy describes how 62px collects and processes the personal data of users of the 62px.com website. The controller is established in Ukraine, so Ukraine's Law No. 2297-VI on the Protection of Personal Data applies to the processing. For users in the EU, Regulation (EU) 2016/679 (GDPR) applies in addition, by virtue of its Article 3(2), because services are offered to people located in the EU.

1. Operator and Data Controller

The data controller (within the meaning of the GDPR), and the party to client contracts, is a sole proprietor (FOP) registered in Ukraine; "62px" is the trading name under which they operate. The registered name, registration number and address are stated in the contract and provided on request. For any data-protection request, contact us at info@62px.com.

Contact for personal data processing matters: privacy@62px.com. General enquiries: info@62px.com.

2. What Data We Collect

• Contact details: name, email, phone, messenger — when you submit a form, brief or request.
• Content of your enquiry: message text, project description, attachments.
• Contractual data: details required to conclude and perform a contract (where a contract is entered into).
• Technical data: IP address, device and browser type, pages visited, cookies and analytics data.

We do not collect special categories of data (relating to health, political views, etc.) and do not request them through forms.

3. Purposes of Processing

• To contact you in response to your request (enquiry, brief, cost estimate).
• To prepare a commercial proposal and contract.
• To fulfil contractual obligations where a contract has been concluded.
• To improve the website through anonymous analytics.
• To comply with legal requirements (accounting and tax record-keeping in the country of registration).

4. Legal Bases for Processing

Legal bases under the GDPR (Art. 6):

• Consent — Art. 6(1)(a), for analytics and marketing cookies.
• Performance of a contract — Art. 6(1)(b), for processing client data.
• Legitimate interests — Art. 6(1)(f), for processing enquiries prior to entering into a contract.
• Legal obligation — Art. 6(1)(c), for retaining accounting records.

5. Retention Periods

• Data from enquiries that do not result in a contract — up to 12 months, after which it is deleted.
• Client data under a contract — for the duration of the contract and thereafter in accordance with accounting and tax law requirements.
• Analytics data — in anonymised form, within the period set by the analytics service.

Once the retention periods expire or consent is withdrawn, the data is deleted unless there are other lawful grounds for retention.

6. Who We Share Data With

We do not sell your data. We engage contractors (processors) with whom data processing agreements (DPAs) are in place:

• Hosting and infrastructure providers.
• Google LLC — analytics, work tools.
• Cloudflare — site protection and delivery.
• Email and messenger communication services.

Disclosure to government authorities — only where required by law.

7. Cross-Border Data Transfers

GDPR. Data is processed on the servers of our hosting and work-tool providers. Where services that process data outside the EU are used (for example, Google Analytics, Cloudflare), transfers are carried out on the basis of the Standard Contractual Clauses (SCC) approved by the European Commission.

8. Your Rights

Regardless of jurisdiction, you have the right to:

• Access your data and obtain a copy of it.
• Request rectification (correction) of inaccurate data.
• Request erasure of data ("the right to be forgotten").
• Restrict or object to processing.
• Withdraw consent previously given.
• Receive your data in a machine-readable format (portability — GDPR).
• Lodge a complaint with a supervisory authority (see Section 13).

To exercise your rights, write to privacy@62px.com. We respond without undue delay — no later than 30 days.

9. Cookies

The website uses cookies: strictly necessary (site operation), analytics and preferences. Analytics and marketing cookies are set only with your consent via the cookie banner. You can manage your choices in your browser settings and in the consent banner.

10. Security

We apply technical and organisational protection measures: connection encryption (HTTPS), access restriction, backups, regular updates. Complete protection on the internet cannot be guaranteed, but we minimise the risks.

11. Children

The website and services are not intended for persons under 16, and we do not knowingly collect their data. If such data has reached us by mistake, please write to us and we will delete it.

12. Changes to the Policy

We may update this Policy. The current version is always published on this page with the date of the last update. Where possible, we will additionally announce material changes.

13. Contacts

• Privacy enquiries: privacy@62px.com
• General enquiries: info@62px.com
• Telegram: @px62
• GDPR supervisory authority: you may lodge a complaint with the supervisory authority of your habitual residence in the EU. For those located in Cyprus — Office of the Commissioner for Personal Data Protection, dataprotection.gov.cy
• Ukrainian supervisory authority: Ukrainian Parliament Commissioner for Human Rights, ombudsman.gov.ua