Privacy Policy

This Policy explains what personal data the serm.ua website collects, why it is collected, how long it is stored, and what rights visitors have. We collect minimal data and do not use it for any purposes other than those stated here.

1. Data Controller

The personal data controller is FOP Malenko Hryhorii Serhiiovych, tax ID 3157912973, address: 5 Larysy Rudenko St., Apt. 89, Kyiv, 02149. For inquiries regarding personal data, please contact: privacy@serm.ua.

2. What data we collect

• Consultation form data.Name or pseudonym, contact channel (email, phone, or messenger), and the text of the message — only what you choose to provide. We intentionally do not ask you to describe the details of your case in the form: specifics are discussed verbally after a non-disclosure agreement is signed.
• Correspondence data.The content of emails and messages you exchange with us.
• Technical data.IP address, browser and device type, pages viewed, and time of visit — to the extent described in the Cookie Policy.

We do not collect sensitive categories of data through the website and do not ask you to provide them.

3. Purpose and legal basis

Processing is carried out in accordance with the Law of Ukraine "On Protection of Personal Data" and, where applicable, the EU General Data Protection Regulation (GDPR).

• Responding to consultation requests.Data: form submissions, correspondence. Basis: pre-contractual measures; consent provided by submitting the form.
• Contract conclusion and performance.Data: form submissions, correspondence. Basis: contract.
• Site operation and security.Data: technical data. Basis: legitimate interest (site stability and security).
• Traffic analytics.Data: technical data. Basis: cookie consent.
• Compliance with legal requirements.Data — as needed. Basis — law.

4. Confidentiality of requests

Consultation requests are processed by a limited number of individuals. We do not share them with third parties, use them for mailing lists, publish them as case studies, or mention clients publicly—neither during nor after our cooperation. Case details are discussed only after a non-disclosure agreement (NDA) has been signed.

5. Who we share data with

Data is received only by service providers essential for the site and communication to function: hosting and form processing (Webflow), email, and Google Analytics 4 (Google LLC). They process data according to our instructions and their own privacy policies. Some providers are located outside of Ukraine and the EU, including in the USA; transfers are based on contractual data protection safeguards.

We do not sell personal data or share it with other parties, except as expressly required by law.

6. Retention periods

• Inquiries and correspondence for which no contract has been concluded,— 12 months after the last contact, after which it is deleted.
• Contractual data— for the duration of the contract and the document retention periods established by law.
• Technical data— in accordance with Cookie policies.

7. Your rights

You have the right to know what data we process, obtain a copy of it, correct it, delete it, restrict its processing, object to it, transfer the data to another controller, and withdraw your consent at any time.

Send a request to privacy@serm.ua — we will respond within 30 days. You may also file a complaint with the Ukrainian Parliament Commissioner for Human Rights or your country's supervisory authority.

8. Security

The connection to the website is secured via the HTTPS protocol. Access to inquiries is restricted to a limited number of individuals; the services where data is stored are protected by two-factor authentication.

9. Age

The website is intended for individuals aged 18 and over. We do not knowingly collect data from children.

10. Changes

The current version is always published on this page with the date of the last update. Significant changes will not apply to previously collected data without your consent.