Privacy policy
Last updated: November 5, 2026
This policy explains which personal data we process when you use this website, send us a brief or work with us, why we do it, who receives the data, how long we keep it and what rights you have. We process personal data in accordance with the Law of Ukraine “On Personal Data Protection” and, where it applies to you, the EU General Data Protection Regulation (GDPR) and the data protection law of your country.
1. Who is responsible for your data
The controller of your personal data is:
Individual Entrepreneur Oleksandr Bunin
148 Borshchahivska St., Kyiv 03056, Ukraine
Entry in the Unified State Register of Ukraine No. 2000730000000058280 of November 25, 2020
E-mail: info@restreto-labs.com
The name shown on this website is the name under which we present our work, not a separate legal entity. For any question about your data, write to the e-mail above.
2. What data we process and why
2.1. The brief you send through the contact form. Your name, the contact you leave (an e-mail address, a phone number or a Telegram username), the services you tick, what you write about your project and the language of the page. We use them to read your brief, contact you, discuss your project and prepare a proposal. We process them to take the steps you ask for before a possible contract and, by sending the form, you agree to this processing.
2.2. Messages you send us directly by e-mail or in a messenger: your contact details and what you write. We use them to answer you, on the same grounds as a brief.
2.3. Clients and their representatives. Names, positions and business contact details of the people we work with, company details, bank details for payments and signatures on documents. We use them to conclude and perform contracts, issue invoices and keep the accounting records that Ukrainian tax law requires. We process them to perform the contract and to meet our legal obligations.
2.4. Technical data. When you open the website, your browser sends its IP address and technical details (browser, device, time and the page requested); our hosting provider may record them in server logs for security and to keep the website running. When you send a brief, we keep the IP address in the server’s memory for a few minutes to limit repeated sending and do not store it. We rely on our legitimate interest in keeping the website secure and working.
2.5. Data in our clients’ projects. When we build or run a product for a client, we may have access to personal data of that client’s users or customers. We process it only on the client’s instructions and under the contract with them, keep it confidential, and the client remains responsible for it as controller.
2.6. We do not sell personal data, do not use it to show you advertising and do not make decisions about you by automated means alone.
3. Cookies and analytics
3.1. The website does not use cookies or similar technologies (such as local storage, analytics or advertising pixels). Fonts and images are served from the website itself.
3.2. If we add analytics or other tools that store or read information on your device, we will update this policy before we do and ask for your consent where the law requires it.
4. Who receives your data
4.1. Members of our team and subcontractors who work on your request or project, all bound by confidentiality.
4.2. Service providers that process data for us: hosting, e-mail and messaging, electronic signature (for example DocuSign), project management and code repositories (for example Jira and GitHub) and our bank for payments. They receive only what their service needs.
4.3. Public authorities, courts and other parties when Ukrainian law or the law that applies to you requires it.
5. Transfers between countries
We work from Ukraine with clients in many countries, and our service providers may process data outside your country. When you are in the EU, the EEA, Switzerland or another country that restricts transfers abroad, we transfer your data to Ukraine and to our providers only on the grounds that law provides, such as the transfer being necessary to answer your request or to perform a contract with you, or under the safeguards the provider offers.
6. How long we keep your data
6.1. A brief or message that does not lead to cooperation: up to 12 months after our last contact, so we can pick the conversation up again; then we delete it.
6.2. Contracts, invoices and correspondence about them: for the term of the contract and then for as long as Ukrainian tax and accounting law requires, or as long as we need them to establish or defend legal claims.
6.3. Server logs: for as long as our hosting provider keeps them, usually a few weeks. The IP address used to limit repeated sending: a few minutes, in memory only.
7. How we protect your data
We limit access to personal data to the people who need it for the work, use services that encrypt data in transit, keep access credentials to our and our clients’ systems confidential and delete data we no longer need.
8. Your rights
8.1. You may ask us to tell you whether we process your data and to give you a copy; to correct inaccurate data; to delete data or restrict its processing; to object to processing based on our legitimate interest; and to receive the data you gave us in a machine-readable format.
8.2. Where we process your data with your consent, you may withdraw it at any time; this does not affect processing that took place before.
8.3. To exercise these rights, write to info@restreto-labs.com. We answer within 30 days and may ask you to confirm your identity first.
8.4. You may also complain to a data protection authority: in Ukraine, the Ukrainian Parliament Commissioner for Human Rights; in the EU or the EEA, the authority of the country where you live or work; in Switzerland, the Federal Data Protection and Information Commissioner.
9. Children
Our services are for businesses and professionals. The website is not intended for children, and we do not knowingly collect personal data of persons under 16.
10. Changes and language versions
10.1. We may update this policy; the date at the top shows the current version. If a change affects how we use data you have already given us, we will tell you before it applies.
10.2. This policy is published in Ukrainian and English. If the two versions differ, the Ukrainian version prevails.
11. Contact
Questions about this policy or your data: info@restreto-labs.com. How we work with clients is described in our Terms of use.