Privacy Policy

We collect only what you send us through the form, plus a few technical details the form needs to work.

• Contact form: your name and phone number (required), and a message if you choose to add one.
• Along with the request we automatically keep some context: the page you wrote from and the site language (Ukrainian or English). This lets us see straight away which sign or service you're asking about.
• When you submit the form, we check your IP address for a few minutes — only to protect the form from spam. Your IP is not stored together with your request.

We don't collect any payment details and there are no user accounts on the site.

We use the data from the form to:

• get in touch with you — call you back or reply to your request;
• arrange a free on-site visit, measure and quote and prepare an offer for your specific site;
• clarify the details of the order if you decide to go ahead.

The technical data (page, language, IP during the check) helps us understand the context of your request and keep the form safe from spam bots. We don't use your contacts for mailings — we don't run a marketing email list.

We process your data on these grounds:

• Your consent. By submitting the form you consent to us processing the contact details you provide so we can reply. You can withdraw consent at any time (see the section on your rights).
• Our legitimate interest. On this basis we protect the form from spam and look at anonymous visit statistics to make the site work better.

For EU visitors the legal bases are Art. 6(1)(a) (consent) and Art. 6(1)(f) (legitimate interest) of the GDPR. In Ukraine, processing follows the Law of Ukraine “On Personal Data Protection” — primarily on the basis of your consent.

We don't sell your data and we don't pass it to advertising networks. To handle your request and run the site we rely on a few processors:

• Telegram (Telegram Messenger Inc.) — we receive the form request as a message in Telegram, so your name, phone and text arrive in our working chat.
• Resend — an email delivery service that also sends the request to our inbox at office@theface.com.ua (used when the email channel is enabled).
• Vercel Inc. — site hosting, cookieless web analytics and bot protection for the forms (Vercel BotID): this is where the site itself runs and where anonymous visit statistics are collected.
• Google (Google Ireland Limited) — Google Analytics: anonymous visit statistics.
• PostHog Inc. — product analytics: which pages people open and what they do there.

Each service receives only the data it needs for its task and processes it under its own terms.

We keep form requests (in Telegram and in the inbox) for as long as we need to handle your enquiry and fulfil the order, and after that for the period set for our records: [retention period].

If you didn't become a customer, you can ask us to delete your details sooner — and we will. The anonymous visit statistics aren't tied to you personally and are kept in aggregated form.

You have the right to:

• find out what data of yours we hold and get a copy of it;
• correct inaccurate data;
• have your data deleted (the 'right to be forgotten');
• restrict or object to processing;
• withdraw consent — this doesn't affect processing that already happened before withdrawal.

To exercise any of these rights, email office@theface.com.ua — we'll reply within a reasonable time. If you believe we're handling your data wrongly, you can contact a supervisory authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU, the data protection authority in your country.

The site shows no ads and sets no advertising cookies from ad networks. We don't use your data for retargeting and we don't pass it to advertising networks.

Vercel Web Analytics runs without cookies: it counts page views and events that matter to us (for example, a tap on the phone number or a successful form submission) in an anonymous form, with no cross-site tracking.

Google Analytics and PostHog do set analytics cookies and show us which pages people actually use and where they get stuck. We use them only to improve the site, on the basis of our legitimate interest (see the legal basis section). Session recording is switched off in PostHog.

If you would rather not be counted, you can turn this off on your side: block analytics cookies in your browser settings, switch on tracking protection (Firefox, Safari and Brave all have it), or install an extension such as uBlock Origin or Google's own Analytics opt-out add-on. The site works exactly the same either way.

Your name, phone or message text never reach analytics.

Some of our processors (Telegram, Resend, Vercel, Google, PostHog) are international companies, so your data may be processed on servers outside Ukraine and the EU — including in the United States (the servers behind Google Analytics and PostHog). When we pass data to such services, we choose ones that apply recognised safeguards (including the EU Standard Contractual Clauses) and provide a level of protection comparable to the requirements of the GDPR and Ukrainian law.

For any questions about your data — access, correction, deletion or withdrawal of consent — write to office@theface.com.ua or reach us at 29 Olzhycha St, Kyiv.

We update this policy from time to time — for example, if the service that delivers requests changes. The current version is always published on this page, and the date it was last updated is shown here.