Privacy Policy

1. Who we are

Blackframe systems is a trade name of PE Chaikovskyi Oleksii, an individual entrepreneur registered in Ukraine (Chernivtsi, 58000, Ukraine). In this policy "we", "us" and "our" mean PE Chaikovskyi Oleksii acting as Blackframe systems.

We are the data controller for personal data collected through this website. Questions about your data: hello@blackframe.systems.

2. What this policy covers

This policy explains what personal data we collect when you visit blackframe.systems or contact us through it, why we collect it, who we share it with and what rights you have. It applies to visitors from any country; where the EU General Data Protection Regulation (GDPR) applies, we follow it.

3. Data we collect

When you send the contact form

• Name, email address and message; company name and phone number if you provide them
• Your consent to this policy
• IP address and browser user agent (for security and spam prevention)
• How you found us: campaign tags (UTM parameters), advertising click identifiers (for example gclid, fbclid, rdt_cid), the page you landed on and the referring website

When you browse the website

• Without your consent: only what is strictly necessary for the site to work and stay secure, plus the campaign information of your current visit, kept in your browser until you close the tab and used only if you send us a message.
• With your consent: analytics and advertising data collected by Google Analytics, Google Ads, Meta, Reddit and OpenAI through cookies and similar technologies, such as pages viewed, device and browser information, approximate location and ad interactions. Details are in our Cookie Policy.

4. Why we use it and our legal bases

• To answer your inquiry and prepare a possible engagement — steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)) and our legitimate interest in responding to business inquiries (Art. 6(1)(f)).
• To protect the website and the form from spam and abuse — legitimate interest (Art. 6(1)(f)).
• To know which of our marketing channels led to your inquiry — legitimate interest in measuring our marketing (Art. 6(1)(f)).
• Analytics and advertising measurement — your consent (Art. 6(1)(a)), which you can withdraw at any time via "Cookie settings" in the footer.
• Accounting and legal obligations if we work together — legal obligation (Art. 6(1)(c)).

When you have given advertising consent and send the form, a one-way hashed (SHA-256) version of your email address and phone number may be shared with Google and Meta to match the inquiry with an ad interaction. They cannot read the original values from the hash.

5. Who receives your data

We do not sell your personal data. We use the following service providers, which process data on our behalf or as independent controllers under their own terms:

• Vercel Inc. (USA) — website hosting
• Neon Inc. (USA) — database where contact form submissions are stored
• Cloudflare Inc. (USA) — storage and delivery of website media
• Telegram — internal notifications about new inquiries
• Google (Google Ireland Ltd / Google LLC) — reCAPTCHA, Google Tag Manager; with consent, Google Analytics and Google Ads
• Meta Platforms Ireland Ltd — with consent, Meta Pixel
• Reddit Inc. — with consent, Reddit Pixel
• OpenAI — with consent, the ChatGPT Ads measurement pixel

6. International transfers

We are based in Ukraine and several providers are based in the USA. Where personal data of people in the EU is transferred outside the EU, we rely on the EU–US Data Privacy Framework for certified providers or on the European Commission's Standard Contractual Clauses.

7. How long we keep it

• Contact form submissions: up to 12 months from the date of submission, unless they become part of a contract and must be kept longer by law, or you ask us to delete them earlier.
• Your cookie choice: until you change it or clear your browser storage.
• Analytics and advertising data: as described in the Cookie Policy and in the providers' own settings.

8. Your rights

Depending on where you live you have the right to access, correct or delete your personal data, to restrict or object to its processing, to data portability and to withdraw consent at any time without affecting earlier processing. You can also opt out of analytics and advertising at any time through "Cookie settings" in the footer.

Residents of US states with privacy laws (such as California): we do not sell personal information. Advertising pixels may count as "sharing" for cross-context behavioural advertising; they only run if you accept advertising cookies, and you can opt out at any time through "Cookie settings".

To exercise your rights, write to hello@blackframe.systems or see our Data Deletion page. If you are in the EU you may also complain to your local data protection authority; in Ukraine, to the Ukrainian Parliament Commissioner for Human Rights.

9. Security

We use appropriate technical and organisational measures, including encrypted connections, access restricted to authorised persons and providers with recognised security practices.

10. Children

This website is intended for businesses and is not directed at children under 16.

11. Changes

We may update this policy. The current version is always on this page with its "Last updated" date.

12. Contact

PE Chaikovskyi Oleksii (Blackframe systems), Chernivtsi, 58000, Ukraine — hello@blackframe.systems