Legal

Privacy Policy

Effective May 29, 2026

This Privacy Policy explains how Olexander Cheberko (“I,” “me,” “my”) collects, uses, shares, and protects personal data when you visit cheberko.com(the “Site”) or engage me for services. It complies with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA / CPRA).

1. Who I am (Data Controller)

Olexander Cheberko
Mykolaiv, Ukraine
Email: zarevi4@gmail.com
Telegram: @Alex_flowgrammer

For all privacy-related questions, requests, or complaints, contact me at the email above. I respond within 30 days as required by GDPR Article 12.

2. What data I collect

2.1 Information you give me

  • Contact form submissions: name, email, project type, message content.
  • Direct communication: information you share via email, Telegram, or video calls.
  • Project files: any code, content, credentials, or documents you share for the work I do for you.

2.2 Information collected automatically

  • Technical data: IP address, browser type, device info, operating system, referring URL, pages visited, time spent.
  • Cookies: see the Cookies Policy for details. You can opt out of non-essential cookies via the consent banner.

3. Legal basis (GDPR Article 6)

  • Contract performance: processing client data to deliver services.
  • Legitimate interest: Site analytics, fraud prevention, securing the Site.
  • Consent: non-essential cookies, marketing emails (where applicable).
  • Legal obligation: tax records, anti-money laundering compliance.

4. How I use your data

  • Respond to your inquiries and deliver services.
  • Send invoices and process payments.
  • Improve the Site through aggregate analytics.
  • Comply with legal obligations (taxes, accounting).
  • Detect and prevent fraud or abuse.

I do not sell your data, share it with advertising networks, or use it to train AI models.

5. Who I share data with

I share personal data only with the following categories of recipients, and only as needed:

  • Hosting: Vercel Inc. (USA — Standard Contractual Clauses).
  • Email: Google Workspace (USA — SCCs).
  • Analytics: only if you consent — no third-party analytics are loaded otherwise.
  • Payment processors: Wise, Stripe, or PayPal, depending on engagement.
  • Accountants and tax authorities: where legally required.

6. International transfers

Some recipients are located outside the EU/EEA. I rely on Standard Contractual Clauses (SCCs) and, where available, adequacy decisions for these transfers.

7. How long I keep your data

  • Contact-form submissions: 12 months after last interaction.
  • Client project data: 6 years (tax obligation).
  • Analytics data: 26 months (aggregated and anonymized).
  • Marketing consent: until withdrawn.

8. Your rights (GDPR)

  • Right to access the personal data I hold about you.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure(“right to be forgotten”).
  • Right to restrict processing.
  • Right to data portability (receive your data in a machine-readable format).
  • Right to object to processing based on legitimate interest.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with your local Data Protection Authority.

To exercise any right, email zarevi4@gmail.com. I do not charge for these requests.

9. California residents (CCPA / CPRA)

If you are a California resident, you have additional rights:

  • Right to know what personal information is collected.
  • Right to delete personal information.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information — I do not sell or share personal information for cross-context behavioral advertising.
  • Right to non-discrimination for exercising these rights.

10. Children

The Site is not directed to children under 16. I do not knowingly collect data from anyone under 16. If you believe I have, email me and I will delete it immediately.

11. Security

I implement reasonable technical and organizational measures (HTTPS, encrypted backups, access controls, password managers, MFA). However, no system is 100% secure. If a breach affects you, I will notify you without undue delay as required by GDPR Article 34.

12. Changes to this policy

I may update this Privacy Policy. Material changes will be announced on the Site and, where required, by email. The “Effective” date at the top reflects the latest version.

13. Questions

Reach out anytime at zarevi4@gmail.com or via Telegram @Alex_flowgrammer.