Privacy Policy

Version of 4 November 2026

This page explains what data we collect on barbaro.agency, why, where it is stored and how you can control it.

Who is responsible for your data

Data controller: Bohdana Ivanivna Ostapyk, a sole proprietor (FOP) registered in Ukraine, trading as Barbaro Communications.

For any question about your data, email admin@barbaro.agency or call +38 (093) 418 78 33.

What data we collect

When you send a request through the form:

• your name;
• your email address or phone number;
• the description of your task and the topics you selected, if any.

Along with the request, we automatically record the date and time, your IP address and browser type. We need this to confirm your consent and to protect the form from spam.

When you subscribe to new blog articles: your email address, language, the date and time of the request and of the confirmation, IP address, browser type and the consent wording. Subscription is double opt-in: it only starts after you click the link in our email.

If you allow analytics cookies, Google Analytics collects visit statistics: which pages were viewed, from what device and where the visit came from.

Please do not send sensitive data through the form, such as health information, passport details or bank details.

Why we use it

• to reply to your request and arrange a call;
• to prepare a proposal for your task;
• to send you new blog articles if you subscribed;
• to protect our forms from automated abuse;
• if you allowed analytics: to understand which parts of the site are useful and improve it.

Sending a request through the form does not subscribe you to anything. We do not sell or share your data for advertising.

Legal basis

• your consent, given by ticking the box in the form: Article 11 of the Law of Ukraine “On Personal Data Protection”, Article 6(1)(a) GDPR;
• steps taken at your request before a possible contract: Article 6(1)(b) GDPR;
• protecting the form from spam: legitimate interest, Article 6(1)(f) GDPR.

Where data is stored and who can access it

• the email with your request goes to the agency’s work inbox on the barbaro.agency domain;
• a confirmation of your consent (name, contact, date, consent wording, IP) is sent as a separate email to our administrative inbox, admin@barbaro.agency;
• the list of blog subscribers is kept in closed storage on Hostinger servers, and each confirmed subscription is also sent to admin@barbaro.agency;
• a record of your request and consent is kept in a closed log on the servers of our hosting provider, Hostinger, with no public access;
• only the Barbaro Communications team handling your request can access it.

Hostinger and the email provider for barbaro.agency process data only as technical processors so that the site and email work. Google processes visit statistics only if you allowed analytics cookies.

How long we keep it

• requests: up to 2 years after our last contact, unless we sign a contract;
• if we start working together: as long as needed to fulfil the contract and meet legal requirements;
• subscriptions: until you unsubscribe. After that we keep only the record of consent and unsubscription for up to 3 years as proof that our emails were lawful, and delete it on request;
• technical anti-spam records: up to one day, in hashed form;
• Google Analytics statistics: no longer than 14 months.

Cookies and analytics

The site works without cookies. Google Analytics cookies (_ga, _ga_*) are set only after you click “Allow” in the banner. If you click “Decline”, Google Analytics is not loaded at all.

Your choice is saved in your browser (the bc_consent entry). You can change it at any time via “Cookie settings” at the bottom of the site. If you withdraw consent, we remove the Google Analytics cookies from your browser.

Google Analytics 4 does not store IP addresses. Data may be processed on Google LLC servers in the United States; Google LLC is certified under the EU-U.S. Data Privacy Framework.

Your rights

Under Article 8 of the Law of Ukraine “On Personal Data Protection” and the GDPR, you can:

• find out what data we hold about you and get a copy;
• correct inaccurate data;
• ask us to delete your data or restrict its processing;
• object to processing;
• receive your data in a machine-readable format;
• withdraw your consent at any time. This does not affect processing that happened before you withdrew it.

You can unsubscribe from our emails via the link in the confirmation email or by replying “unsubscribe” to any of our emails.

If you believe your rights have been violated, you can contact the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua). EU residents can also contact their national data protection authority.

Changes

If we update this policy, the new version will appear on this page with a new date. Consent you gave earlier applies to the version in force when you sent your request.