Privacy policy

1. General provisions

This Privacy Policy describes how Lonch ("we", the "Company") collects, uses and protects the personal data of website visitors. We process personal data in accordance with the Law of Ukraine "On Personal Data Protection" No. 2297-VI of 01.06.2010 and, for visitors from the European Union, in accordance with the General Data Protection Regulation (GDPR).

By using this website you agree to the terms of this Policy. If you do not agree with them, please do not use the website and do not submit your data to us.

2. What data we collect

2.1. Data you provide directly

When you fill in a contact or request form on the website, we collect:

• your name;
• your email address;
• your phone number;
• the subject and text of your message, including information about your project.

2.2. Data collected automatically

When you visit the website, we and our analytics partners may automatically collect:

• cookies and similar technologies;
• anonymised Google Analytics 4 data (page views, traffic sources, device and browser type);
• Meta Pixel advertising analytics data (when advertising campaigns are active);
• utm parameters and the referring page address;
• your IP address and approximate city-level location.

3. Purposes of processing

We use your data solely to:

• respond to your request and contact you about your project;
• prepare a commercial proposal and estimate timelines and budget;
• analyse website traffic and improve its usability and content;
• measure the effectiveness of advertising campaigns;
• comply with legal requirements.

4. Legal grounds for processing

We process personal data on the following grounds:

• your consent — when you voluntarily submit data via forms on the website;
• legitimate interest — for analytics, website security and communication regarding your requests;
• performance of a contract — when we cooperate with you or prepare to enter into a contract.

5. Data retention

We keep data from submitted forms no longer than necessary to process your request and maintain further communication, and in any case no longer than 3 years from the last contact. Analytics data is stored according to the settings of the respective services: up to 14 months for Google Analytics 4. You may request earlier deletion of your data — see section 7.

6. Sharing data with third parties

We do not sell or share your personal data with third parties for their marketing purposes. To the extent necessary for the website to operate, the following parties may have access to data:

• Google (Google Analytics 4) — anonymised analytics;
• Meta Platforms (Meta Pixel) — advertising analytics;
• the hosting provider that runs the website;
• public authorities — only in cases required by law.

7. Your rights

Under the Law of Ukraine "On Personal Data Protection" and the GDPR you have the right to:

• obtain information about which of your data we process;
• request correction of inaccurate data;
• request deletion of your data (the "right to be forgotten");
• restrict processing or object to it;
• receive your data in a machine-readable format (data portability);
• withdraw your consent at any time;
• lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or with the supervisory authority of your country.

8. Cookies and language selection

Cookies are small text files stored in your browser. We use them for the correct operation of the website, remembering your language preferences and analytics. You can delete or block cookies in your browser settings — the website will remain accessible, although some features may not work correctly.

On your first visit we choose the website language from your browser settings and the country of your IP address. The country is looked up on our own server in a local database (IP Geolocation by DB-IP), and your IP address is not stored or sent anywhere for this purpose. The selected language is kept in the lonch_locale cookie for one year, and you can change it at any time with the language switcher.

9. Data security

We apply technical and organisational security measures: encrypted connections (HTTPS), restricted access to data within the team and regular software updates.

10. Contact us

For any questions regarding the processing of personal data, contact us via the contact form or at info@lonch.digital. We respond to personal data requests within 30 days.

11. Changes to this Policy

We may update this Policy from time to time. The current version is always published on this page together with the date of the latest update.