Last updated: 31 July 2026
1. Who we are
Koval Web is a web studio based in Ukraine. We operate the website https://kovalweb.com/ and we decide how and why personal data collected through it is processed — in legal terms, we are the data controller.
- Legal entity: Limited Liability Company «Koval Web»
- Registered address: 69 Kutok, Bobiatyn, 80030, Ukraine
- Email: hello@kovalweb.com
2. What data we collect
2.1 Data you send us yourself
When you fill in the contact form we receive your name, your email address, the subject you select and the text of your message. Before sending, you confirm a consent checkbox. We ask for nothing else — the form does not require a phone number, company details or payment information.
2.2 Technical data
Like every website, ours receives technical data with each request: IP address, browser type and version, operating system, the page that referred you, and the date and time. This data arrives automatically — it is how the web works, not something we choose to collect.
2.3 Analytics
We use Cloudflare Web Analytics to see how many people read which pages. It is a privacy-first tool: it sets no cookies, does not fingerprint your device, does not build a profile of you and does not follow you to other websites. We see aggregated numbers only — page views, referring sites, countries, browsers — never individual visitors.
2.4 What we deliberately do not do
We do not use Google Analytics, advertising pixels, remarketing tags, heatmaps, session recording or any cross-site tracking. We do not sell, rent or exchange personal data. We do not carry out profiling or automated decision-making. This website has no user accounts, no comments and no newsletter.
3. Cookies
This site uses a minimal set of cookies:
- pll_language — remembers whether you read the site in Ukrainian, Russian or English. Stored for one year.
- a cookie that remembers you dismissed the cookie notice, so it is not shown to you again.
Both are written by the page in your own browser. Our server sets no cookies for visitors at all: WordPress issues additional technical cookies only to people who log in to the site’s administration area — that is us, not you.
None of them are used for advertising or tracking. You can delete or block cookies in your browser settings. The site will keep working, but it may forget your language and show the cookie notice again.
4. Why we process your data, and on what legal basis
- Contact form data — so that we can read your message and reply to it. Legal basis: your consent, and our legitimate interest in answering enquiries about our work.
- Technical data — to deliver the website, keep it available and secure, and prevent abuse. Legal basis: our legitimate interest in a working, secure website.
- Aggregated analytics — to understand which articles and pages are useful. Legal basis: our legitimate interest in improving what we publish.
5. Who else can see your data
We share data only with providers that make the website work. They act on our instructions and may not use your data for their own purposes.
- Ukraine.com.ua (ukraine.com.ua) — our hosting provider. It stores the website files and its database on servers in Ukraine.
- Cloudflare, Inc. — delivers the site through its global network, protects it from attacks, and provides the analytics described above. Cloudflare processes technical request data, including IP addresses.
- Our email provider — delivers messages sent through the contact form to our inbox.
Article pages display the author’s avatar, which is loaded from Gravatar (Automattic Inc.). When the page loads, your browser requests that image directly from gravatar.com, and that service receives your IP address.
6. International transfers
The website itself is hosted in Ukraine. Cloudflare, however, operates a global network, so a request may be served by an edge server outside Ukraine, inside or outside the European Economic Area. Such transfers rely on the standard contractual clauses and other safeguards published by Cloudflare.
7. How long we keep your data
- Messages from the contact form — for as long as we need to handle your enquiry and for a reasonable period afterwards, up to 24 months, after which they are deleted.
- Server logs — 30 days.
- Analytics — aggregated figures only; no personal data is retained.
8. Your rights
You may ask us to confirm whether we hold data about you and to give you a copy of it; to correct data that is wrong; to delete your data; to restrict or object to processing; and to receive your data in a portable format. Where processing is based on consent, you may withdraw that consent at any time — this does not affect processing carried out before you withdrew it.
Write to hello@kovalweb.com and we will reply within 30 days. If you believe we have handled your data improperly, you may complain to the Ukrainian Parliament Commissioner for Human Rights, or — if you are in the EU or EEA — to the data protection authority of your country.
9. Security
The website is served over HTTPS. Access to our mailbox and to the site’s administration area is limited to people who need it and is protected by individual passwords. No system is perfectly secure, but this site does not hold payment data or special categories of personal data at all.
10. Children
This website is addressed to businesses and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has sent us personal data, write to us and we will delete it.
11. Changes to this policy
If we change this policy, we will update the date at the top of this page. Material changes will be described here.
12. Contact
Limited Liability Company «Koval Web»
69 Kutok, Bobiatyn, 80030, Ukraine
hello@kovalweb.com