Privacy Policy

1. General Provisions

This Privacy Policy (the "Policy") explains how Profscale (hereinafter "Profscale", "we") collects, uses, and protects the personal data of visitors and clients of the website profscale.com (hereinafter the "Site").

We operate in accordance with the Law of Ukraine "On the Protection of Personal Data" No. 2297-VI of 01.06.2010 and — for visitors from the European Union — with the General Data Protection Regulation (GDPR, EU Regulation 2016/679).

By using the Site or submitting a contact form to us, you confirm that you have read this Policy and agree to the processing of your data under the conditions described below.

2. Who Is the Data Controller

The controller of personal data is Profscale. The contact for inquiries regarding data processing is [email protected].

3. What Data We Collect

3.1. Data You Provide Yourself

When you fill out a contact form, request an estimate, or send us an email, we receive:

• name;
• contact phone number;
• email;
• a file you optionally attach (brief, specification, link);
• the content of your message.

3.2. Data Collected Automatically

When you visit the Site, we technically log:

• IP address;
• browser type and version, interface language, device type;
• the date and time of the visit, the pages you viewed;
• the referral source (referer).

This data is used in aggregated form — for analytics, security, and development of the Site.

4. How We Use the Data

• contacting you in response to a request, a submitted form, or an email;
• preparing a commercial offer, budget estimate, or contract;
• fulfilling contractual obligations while working on a project;
• improving the Site, fixing errors, and analyzing behavior in aggregated form;
• ensuring the security of the Site and detecting malicious activity;
• complying with the requirements of tax and other Ukrainian legislation.

5. Legal Grounds for Processing

We process your data on one of the following grounds:

• consent — when you voluntarily fill out a form or agree to cookies;
• performance of a contract — when we prepare an offer or carry out work for you;
• legitimate interest — for basic analytics, the security of the Site, and communication with potential clients;
• legal obligation — for accounting and tax purposes in Ukraine.

6. To Whom We Transfer Data

We do not sell or transfer your personal data to third parties for marketing purposes. Data may be processed by trusted technical service providers, without whom the operation of the Site would be impossible:

• hosting provider — for storing data and operating the Site;
• transactional email service — for sending notifications about new inquiries;
• web analytics service — anonymous statistics on visitor behavior on the Site (more details in the Cookies Policy);
• contractors engaged for a specific project — only to the extent necessary to perform the work, and with an obligation to maintain confidentiality.

All subcontractors are obliged to maintain a level of data protection no lower than that established by this Policy. A list of specific counterparties is provided upon request at [email protected].

7. Transfer of Data Outside Ukraine

Some of our providers are located in the EU or the USA. This means that your data may be processed on servers outside Ukraine. We select only those providers that ensure an adequate level of data protection in accordance with the requirements of the GDPR and Ukrainian legislation.

8. Retention Period

• data from the contact form — up to 3 years from the last interaction, after which it is deleted or anonymized;
• data on completed contracts — for the periods specified by the tax legislation of Ukraine;
• technical log files — up to 12 months;
• cookies — for the periods described in the Cookies Policy.

You have the right to request the deletion of your data at any time — except in cases where we are obliged to retain it by law.

9. Your Rights

As a data subject, you have the right to:

• obtain access to your data and a copy of its processing;
• request the correction of inaccurate or incomplete data;
• request the deletion of data (the "right to be forgotten");
• restrict processing or object to it;
• withdraw consent to processing (this will not affect actions performed before the withdrawal);
• receive your data in a structured format (the right to data portability);
• file a complaint with the Ukrainian Parliament Commissioner for Human Rights or another relevant supervisory authority.

Users from the EU also have the right to file a complaint with the supervisory authority at their place of residence, work, or the place of the alleged violation (the Data Protection Authority of an EU country).

To exercise any of these rights, write to us at [email protected]. We will respond within 30 calendar days.

10. Security

To protect your data, we use:

• encryption of the connection via TLS (HTTPS) across the entire Site;
• encryption of data at rest on the servers of infrastructure providers;
• restricted access to the database — only for persons who need it for their work;
• regular updates of components and security monitoring.

One hundred percent security on the internet does not exist — that is the honest truth. If an incident occurs that affects your personal data, we will report it within 72 hours of detection, as required by the GDPR.

11. Cookies

The Site uses cookies. For details on their types and management, read the separate Cookies Policy.

12. Changes to the Policy

We may update this Policy to reflect changes in our processes or legal requirements. The current version is always available on this page with the date of the update indicated. We will highlight significant changes separately at the top of the document.

13. Contacts

For any questions regarding the processing of personal data, the exercise of your rights, or complaints, write to [email protected].

See also: Terms of Use · Cookies Policy.