This privacy policy explains what personal data is collected when you use oleksii.design (the “Site”), why it is collected, and the rights you have over it. It is written to comply with the EU General Data Protection Regulation (GDPR) and applicable national data-protection law.
1. Who is responsible for your data
The data controller for this Site is Oleksii Koval, an independent designer based in the European Union. You can reach me at any time about privacy matters at oleksii.koa@gmail.com.
2. What data I collect
I keep data collection to the minimum needed to run the Site and reply to you.
- Contact form. When you use the contact form, I receive the message you write and any contact details you choose to provide (for example your email address, Telegram handle, or name). These fields are optional and entirely up to you — please share only what you want me to have.
- Direct messages. If you email me or message me on LinkedIn or Telegram, I receive whatever information you include in that message.
- Product analytics (with your consent). If you agree via the cookie banner, the Site loads PostHog to understand how visitors navigate and use it — for example pages viewed, clicks, device type, and an approximate location derived from your IP address. This helps me improve the Site. PostHog is loaded only after you opt in, sets its cookies only then, and you can decline at any time. I do not use it to advertise to you or sell your data.
- Local preferences. Your theme choice (light/dark) and your cookie-consent decision are stored in your browser’s local storage. They stay on your device, are never sent to me, and are not used to identify you.
3. Why I use it and the legal basis
- To respond to you and discuss potential work. Legal basis: your consent and/or taking steps at your request prior to entering into a contract (Art. 6(1)(a) and 6(1)(b) GDPR).
- To understand and improve the Site using product analytics (PostHog). Legal basis: your consent (Art. 6(1)(a) GDPR), given through the cookie banner and withdrawable at any time without affecting prior processing.
- To host the Site and keep it secure, including the server logs my hosting provider keeps to operate and protect it. Legal basis: my legitimate interest in running a functioning, secure website (Art. 6(1)(f) GDPR).
4. Who processes the data
I do not sell your data or share it for advertising. A small number of service providers process data on my behalf as processors:
- Web3Forms — delivers contact-form submissions to my inbox. See the Web3Forms privacy policy.
- Netlify — hosts the Site and processes server logs needed to deliver and secure it. See the Netlify privacy policy.
- PostHog — provides product analytics, but only after you consent via the cookie banner. See the PostHog privacy policy.
- Google (Gmail) — stores and lets me read the email correspondence we exchange.
Some of these providers may process data outside the European Economic Area. Where that happens, the transfer is covered by appropriate safeguards such as the EU Standard Contractual Clauses.
5. How long I keep it
I keep contact messages and correspondence for as long as needed to handle your enquiry and any resulting working relationship, and delete them once they are no longer relevant. Anonymous analytics are retained in aggregate only. You can ask me to delete your data at any time (see Section 7).
6. Cookies
The Site sets analytics cookies (PostHog) only after you agree through the cookie banner. If you decline, no analytics cookies are set. It never uses advertising cookies. You can withdraw consent at any time by clearing this site’s storage in your browser, which makes the banner appear again so you can choose afresh.
Aside from analytics, the only browser storage in use is the local preference described in Section 2 (your theme choice and consent decision), which is technically necessary and does not require consent.
7. Your rights
Under the GDPR you have the right to:
- access the personal data I hold about you;
- have inaccurate data corrected;
- have your data erased;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting prior processing.
To exercise any of these rights, email oleksii.koa@gmail.com. You also have the right to lodge a complaint with your local data-protection supervisory authority if you believe your data has been mishandled.
8. Changes to this policy
I may update this policy as the Site evolves. The “Last updated” date at the top reflects the most recent revision; please check back from time to time.