Skip to content

Legal

Privacy Policy

Effective: August 13, 2026

We wrote this in plain language on purpose. Short version: we collect only what you type into our forms or chat, we use it to reply to you, we never sell it, and you can ask us to delete it at any time.

Who we are

Wideweb is a web development agency based in Odesa, Ukraine, working with clients worldwide. For the purposes of the EU General Data Protection Regulation (GDPR), we are the data controller for the personal data described here. Contact for anything privacy-related: office@wideweb.pro.

What we collect, and why

  • Contact and project forms (contact page, project popup, free audit, agency inquiries): your name, email address, message, and any optional details you add (website URL, platform). We use these to reply and discuss your project — the legal basis is taking steps at your request before entering a contract (GDPR Art. 6(1)(b)).
  • AI assistant (the /ai page): messages you type are processed to generate responses, and if you submit a project brief through it, that brief reaches us by email like a form would. Please don't share sensitive personal data in the chat — it's a project-scoping tool, not a confidential channel.
  • Analytics: we use Google Analytics 4 to understand which pages are visited, from what devices and approximate locations. This uses cookies — details on the Cookies page.
  • Technical and security data: our infrastructure providers process IP addresses to serve the site and block abuse — including the bot check (Cloudflare Turnstile) on our forms and short-lived, in-memory rate limiting of form submissions. Legal basis: our legitimate interest in keeping the site secure and functional.

We do not collect payment data, we have no user accounts, and we do not buy, sell or enrich personal data from any other source.

Who processes it on our behalf

  • Cloudflare — hosting, content delivery, security and the AI assistant infrastructure.
  • Resend — delivers form submissions to our inboxes as email.
  • Google — analytics (Google Analytics 4).
  • Calendly — only if you choose to book a call; booking happens on Calendly's site under their privacy policy.
  • YouTube — the video on our Meet Us page uses YouTube's privacy-enhanced mode and loads nothing until you press play.

Some of these providers are based in the United States. Transfers rely on recognized safeguards — the EU–US Data Privacy Framework where the provider is certified, and EU Standard Contractual Clauses otherwise.

How long we keep it

  • Form and email correspondence: for as long as our conversation and business relationship reasonably require, then deleted.
  • Analytics data: up to 14 months (Google Analytics default), then automatically deleted.
  • Security data (IP-based rate limiting): minutes — it lives in short-term memory, not a database.

Your rights — EU & UK

If you are in the EU, EEA or UK you can ask us for: access to your data, correction, deletion, restriction of processing, a portable copy, or to object to processing based on legitimate interest. You can also withdraw any consent at any time. Email office@wideweb.pro — we answer these ourselves, usually within days, always within a month. You also have the right to complain to your local supervisory authority.

Your rights — US residents

We do not sell personal information and do not share it for cross-context behavioral advertising — there is nothing to opt out of. If your state's privacy law (California, Virginia, Colorado and others) grants you access or deletion rights, email us and we will honor them the same way we do for EU residents, without discrimination.

Children

Our site and services are aimed at businesses and are not directed to children under 16. We do not knowingly collect their data.

Changes

If we change how we handle data — for example, adding a new tool — we will update this page and its effective date. Significant changes get a visible note, not a silent edit.