Legal
Privacy Policy
Last updated
fluxLab.dev ("we", "us") is a software development studio based in Kyiv, Ukraine. This policy explains what personal data this website (flux-lab.dev) collects, why, and what rights you have. It applies to visitors of this website only, not to the products we build for clients.
Who is responsible for your data
The data controller is fluxLab.dev, Kyiv, Ukraine. For any privacy question or request, email us at [email protected].
What we collect and why
Contact and support forms
When you use the contact form or the support widget we receive what you type: your name, email address, subject and message (the support widget asks only for a subject and a message). We use it solely to answer you and to discuss a potential collaboration. Legal basis: taking steps at your request before entering into a contract, and our legitimate interest in responding to enquiries (GDPR Art. 6(1)(b) and (f)).
Job applications
When you apply for a position we receive your name, email address, the position, your cover letter and the CV file you upload (PDF, DOC or DOCX). We use it only to assess your application and to contact you about it. Legal basis: taking steps at your request before entering into a contract (GDPR Art. 6(1)(b)). If we would like to keep your CV for future openings, we will ask for your consent first.
Together with your application we record how you reached the site: the page that linked to us, the address of the page you landed on including any campaign tags, the page you applied from, how long the form was open, your browser type, preferred language and the country derived from your IP address. This shows us which channels bring applicants and helps us spot automated submissions. Legal basis: our legitimate interest in understanding where applications come from (GDPR Art. 6(1)(f)).
Technical data
Our servers record standard request data such as your IP address, browser type and the pages you request in server logs used for security and troubleshooting. Your IP address is also used, in memory only, to limit how many form submissions a single address can make per minute. Legal basis: our legitimate interest in keeping the site secure and available (GDPR Art. 6(1)(f)).
Analytics
With your consent we use Google Analytics 4 to understand how visitors find and use the site: pages viewed, approximate location derived from your IP address, device and browser type, and whether a form was submitted. We do not use Google Analytics for advertising, and the data is not combined with the contents of your form submissions. Legal basis: your consent (GDPR Art. 6(1)(a)), which you give or refuse in the cookie banner and can change at any time on this page.
How messages reach us
Form submissions and uploaded CVs are delivered to our team through Telegram, so Telegram (Telegram FZ-LLC) processes them as our message delivery provider. We do not store form contents in a database on this website.
Who else receives data
- Google LLC (USA) as the provider of Google Analytics, only if you consent to analytics cookies. Google is certified under the EU-US Data Privacy Framework.
- Telegram FZ-LLC as the delivery channel for form submissions.
- Our hosting provider, on whose servers this website runs.
We do not sell personal data and we do not use it for advertising.
Cookies
| Cookie | Purpose | Duration |
|---|---|---|
cookie_consent | Remembers whether you accepted or declined analytics cookies. Strictly necessary. | 6 months |
_ga | Google Analytics: distinguishes visitors. Set only with your consent. | 2 years |
_ga_<id> | Google Analytics: keeps the session state. Set only with your consent. | 2 years |
Until you make a choice, and if you decline, Google Analytics runs in a cookieless mode that stores nothing on your device. You can change your choice at any time with the button at the bottom of this page.
How long we keep data
- Contact and support messages: up to 12 months after our last exchange, unless a collaboration follows.
- Job applications and CVs: up to 12 months after the position is closed, unless you ask us to delete them sooner.
- Server logs: up to 30 days.
- Analytics data: as configured in our Google Analytics account, at most 14 months for user-level data.
Your rights
Under the GDPR and Ukrainian data protection law you can ask us to access, correct, delete or restrict the processing of your personal data, object to processing based on legitimate interest, receive a copy of the data you gave us in a portable format, and withdraw consent at any time without affecting the lawfulness of earlier processing. Email [email protected] and we will respond within 30 days. You can also lodge a complaint with your local supervisory authority, or in Ukraine with the Ukrainian Parliament Commissioner for Human Rights.
Children
This website is not directed at children under 16 and we do not knowingly collect their data.
Changes to this policy
We will post any changes on this page and update the date at the top.
Your cookie choice
You can change whether analytics cookies are allowed. The cookie banner will appear again so you can choose.