Privacy policy

Who processes the data

The site xpro.com.ua belongs to XPro Development Studio, Chernivtsi. Send any question about personal data to manager@xpro.com.ua — we reply within one business day.

What data we receive

Personal data reaches us through one route only — the contact form on the site.

• Required: your name and phone number — without them we cannot reply.
• Optional: company name, email and a description of the task.
• Sent automatically with the form: the page you wrote from and the interface language — so we answer to the point and in the same language.
• Technical: the sender’s IP address. It is needed to protect the form from spam and is kept in the enquiry log.

Why

To get in touch, discuss the task and prepare an offer. We do not use this data for mailings, advertising or profiling — and we do not pass it to anyone.

The basis for processing is your own action: you send the form in order to get a reply.

Where the data is kept

The enquiry arrives in the studio’s working Telegram chat and is written in parallel to a log file on our server in XPro’s own data center in Chernivtsi. Only studio staff who handle enquiries have access to that log.

Telegram acts as the delivery channel for the message. In passing the enquiry through it, we rely on that service’s own terms.

On its way to our server the form passes through Cloudflare, just like any other page of the site. Here Cloudflare is an intermediary that forwards the request, not a place of storage: enquiries end up only in Telegram and in the log on our server.

How long we keep it

For as long as the correspondence about your enquiry lasts, and a reasonable period after it — so that we remember the context if you come back. You can ask us to delete the data at any time, and we will do so within thirty days.

Cookies and visit statistics

Without your permission the site sets no cookies and loads no advertising pixels. The page language is determined by its address, not by a saved value.

On your first visit we ask whether Google Analytics may be switched on. Until you press “Allow”, the Google script is not loaded at all — the page sends no request to Google. If you decline, it stays that way.

If you allow it, Google Analytics sets the cookies _ga and _ga_51P08XTF1J for up to two years. They hold a random browser identifier that links separate visits together. Google receives the addresses of the pages viewed, the referring source, device and browser type, approximate city, and the fact that the contact form was sent — without its content: your name, phone number and message never reach analytics. Google Analytics does not store IP addresses. Advertising features and ad personalisation are switched off. The data is processed by Google on its servers, including outside Ukraine, and kept for up to 14 months.

We need this to see which pages get read and which sources enquiries come from. The basis for processing is your consent, and withdrawing it is as easy as giving it: the “Cookie settings” link at the bottom of every page opens the same window. After you decline, the Google Analytics cookies are removed from your browser.

Your answer itself is kept in the browser’s local storage under the key xpro-consent — only so that we do not ask every time. It is not sent anywhere from your browser.

The site runs behind Cloudflare, which is both a content delivery network and protection against attacks. Cloudflare counts anonymous visit statistics: which page was opened, where the visitor came from, which browser, and how fast the page loaded. This shows us which pages get read and where the site is slow.

Cloudflare statistics work without cookies and do not depend on your answer about Google Analytics. They do not build a profile of you, do not tie separate visits to one person, and do not follow you across other sites. We see aggregate numbers only, never individual visitors.

Cloudflare sits between you and our server, so technically it sees your IP address — a page cannot be delivered otherwise. We do not access that data and do not move it anywhere.

The web server keeps an ordinary access log — as any website does. Those records are used for diagnostics and protection against abuse.

Your rights

You can find out what data of yours we hold, correct it, withdraw your consent or ask us to delete everything. Just write to manager@xpro.com.ua from the same contact you gave in the form.

If it concerns data inside our mobile application, there is a separate deletion request form. We process such requests within thirty days and confirm the outcome.

Children

The site is addressed to businesses, and we do not knowingly collect data from anyone under 16. If that has happened by mistake, write to us and we will delete the record.

Changes

If we start processing data differently, we will update this page and change the date at the top. It is worth checking here before sending the form again after a long gap.