Privacy Policy

Last updated: 3 December 2025

1. Introduction

Welcome to chyshkala.com. I am Ihor (Harry) Chyshkala, a Full Stack Developer and Technical Consultant based in Manchester, United Kingdom. I am committed to protecting your privacy and handling your personal data in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how I collect, use, store, and protect your personal information when you visit my website or use my services.

2. Data Controller

The data controller responsible for your personal data is:

Ihor Chyshkala

Manchester, United Kingdom

Email: privacy@chyshkala.com

3. Information I Collect

3.1 Information You Provide

When you contact me or request my services, you may provide:

  • Name and email address
  • Message content and project details
  • Company name (if applicable)
  • Payment information (processed securely by Stripe)

3.2 Information Collected Automatically

When you visit my website, I may automatically collect:

  • IP address and approximate location (country/city)
  • Browser type and operating system
  • Pages visited and time spent on site
  • Referring website

4. How I Use Your Information

I use your personal data for the following purposes:

  • To respond to inquiries: Process and respond to your contact form submissions
  • To provide services: Deliver the services you have requested
  • To process payments: Handle invoicing and payment processing
  • To improve the website: Analyse usage patterns to enhance user experience
  • To comply with legal obligations: Meet legal and regulatory requirements

5. Legal Basis for Processing

Under UK GDPR, I process your personal data based on:

  • Consent: For analytics cookies and marketing communications
  • Contract: To provide services you have requested
  • Legitimate interests: To improve my website and services, respond to inquiries
  • Legal obligation: To comply with applicable laws

6. Third-Party Services

I use the following third-party services that may process your data:

Google Analytics

Used for website analytics to understand how visitors use my site. Data is anonymised and no personally identifiable information is stored.

Google Privacy Policy →

Stripe

Used for secure payment processing. Payment details are handled directly by Stripe and are not stored on my servers.

Stripe Privacy Policy →

Resend / Gmail

Used for sending email notifications when you submit contact forms.

Sanity.io

Content management system for blog posts and projects. Does not process visitor personal data.

7. Cookies

My website uses cookies to enhance your experience. For detailed information about the cookies I use, please see the cookie banner when you first visit the site.

Types of Cookies Used

  • Essential cookies: Required for the website to function properly (e.g., theme preference)
  • Analytics cookies: Help me understand how visitors use the site (Google Analytics)

You can manage your cookie preferences at any time through your browser settings or by clicking the cookie settings link in the footer.

8. Data Retention

I retain your personal data only for as long as necessary to fulfil the purposes for which it was collected:

  • Contact form submissions: Retained for up to 2 years after last correspondence
  • Client project data: Retained for 6 years for legal and tax purposes
  • Analytics data: Automatically deleted after 14 months (Google Analytics default)

9. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Right of access: Request a copy of your personal data
  • Right to rectification: Request correction of inaccurate data
  • Right to erasure: Request deletion of your data ("right to be forgotten")
  • Right to restrict processing: Request limitation of how your data is used
  • Right to data portability: Request transfer of your data in a machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact me at privacy@chyshkala.com.

10. Data Security

I implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These measures include:

  • SSL/TLS encryption for all data transmission
  • Secure hosting infrastructure
  • Regular security updates and monitoring
  • Limited access to personal data on a need-to-know basis

11. International Transfers

Some of the third-party services I use may transfer your data outside the UK. Where this occurs, I ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions, to protect your data in accordance with UK GDPR.

12. Children's Privacy

My website and services are not directed at individuals under the age of 18. I do not knowingly collect personal data from children. If you believe I have inadvertently collected data from a child, please contact me immediately.

13. Changes to This Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or legal requirements. I will post any changes on this page and update the "Last updated" date. I encourage you to review this policy periodically.

14. Complaints

If you have concerns about how I handle your personal data, please contact me first at privacy@chyshkala.com. I will do my best to resolve your concerns.

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection:

Information Commissioner's Office

Website: ico.org.uk

Helpline: 0303 123 1113

15. Contact Me

If you have any questions about this Privacy Policy or how I handle your personal data, please contact me:

Ihor Chyshkala

Email: privacy@chyshkala.com

Website: Contact Form