Privacy Policy

    Last updated: May 2026

    This Privacy Policy explains how DForce ("we", "us", or "our") collects, uses, stores, and protects information about you when you visit our website at dforce.com.ua (the "Site"). We are committed to processing your personal data in accordance with the EU General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection".

    1. Who We Are

    DForce is a product, design, and technology services company based in Ukraine. For any questions about this policy or your personal data, contact us at a.bakhtalovskyi@dforce.com.ua.

    2. What Data We Collect

    We collect only the data necessary to operate the Site and respond to your enquiries:

    • Information you provide via the contact form: name, email address, and the content of your message. Submitting the form is voluntary.
    • Technical data collected automatically: IP address, browser type and version, device type, operating system, referring URL, pages visited, time and date of access, and similar diagnostic data.
    • Cookies and similar technologies: see our Cookie Policy for details.

    3. How We Use Your Data

    • To respond to enquiries submitted through the contact form.
    • To send a confirmation email acknowledging your enquiry.
    • To operate, maintain, and improve the Site.
    • To analyse anonymised usage of the Site to understand how visitors engage with our content.
    • To protect the Site from spam, abuse, and automated attacks.
    • To comply with legal obligations.

    4. Legal Basis for Processing (GDPR)

    • Consent — for non-essential cookies and analytics. You provide consent via the cookie banner and may withdraw it at any time.
    • Legitimate interest — for protecting the Site against fraud and abuse (including via reCAPTCHA), and for measuring aggregate site performance.
    • Performance of pre-contractual measures — for processing your contact form submission in order to respond to your enquiry.

    5. Third-Party Services and Data Sharing

    We do not sell your personal data. We rely on a small number of trusted service providers, each acting as an independent controller or processor under their own privacy policies:

    • Netlify, Inc. — hosts the Site and serves its content. Netlify may process technical logs (incl. IP addresses) for security and performance. Netlify Privacy Policy.
    • Resend (Resend Inc.) — delivers contact-form emails on our behalf. The name, email address, and message you submit are transmitted to Resend solely to send the email. Resend Privacy Policy.
    • Google LLC — Google Analytics (via gtag.js) collects anonymised usage statistics. IP addresses are processed in shortened form. Google Privacy Policy.
    • Google LLC — reCAPTCHA v2 protects the contact form against automated submissions. Use of reCAPTCHA is subject to the Google Privacy Policy and Terms of Service.
    • Google Fonts serves web fonts used on the Site. A connection to Google servers occurs when fonts load.

    6. International Data Transfers

    Some of our processors are located outside Ukraine and the European Economic Area (notably in the United States). Where required, transfers rely on the European Commission's Standard Contractual Clauses or equivalent safeguards provided by the respective service provider.

    7. Data Retention

    • Contact form messages: kept in our email inbox for as long as necessary to respond to your enquiry and for a reasonable period afterwards for record-keeping (typically up to 24 months), unless you request earlier deletion.
    • Technical logs and analytics: retained according to the providers' default retention periods (typically 14–26 months for Google Analytics).
    • Cookies: retained according to the durations described in our Cookie Policy.

    8. Your Rights

    Under GDPR and Ukrainian law, you have the right to:

    • Access the personal data we hold about you.
    • Request rectification of inaccurate or incomplete data.
    • Request erasure of your personal data ("right to be forgotten").
    • Restrict or object to the processing of your data.
    • Request portability of the data you provided to us.
    • Withdraw consent for processing based on consent, at any time.
    • Lodge a complaint with a supervisory authority — in the EU, your local Data Protection Authority; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.

    To exercise any of these rights, email a.bakhtalovskyi@dforce.com.ua. We will respond within 30 days.

    9. Security

    We apply reasonable technical and organisational measures to protect your data: TLS encryption in transit, restricted access to systems handling personal data, and rate-limiting and anti-bot measures (reCAPTCHA, honeypot) on the contact form. No method of transmission or storage is fully secure, however, and we cannot guarantee absolute security.

    10. Children's Privacy

    The Site is not directed at children under the age of 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us so we can delete it.

    11. Changes to This Policy

    We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent revision. Material changes will be communicated by updating the Site.

    12. Contact

    For any questions, requests, or complaints regarding your personal data or this policy, contact us at a.bakhtalovskyi@dforce.com.ua.

    We value your privacy

    We use cookies to improve your browsing experience, display personalized content, and analyze our traffic. By clicking "Accept", you consent to the use of cookies. Cookie Policy