Privacy Policy

1. General Provisions

This Privacy Policy defines the procedure for collecting, using, storing, transferring, and protecting the personal data of users of the chizz.team website (hereinafter referred to as the "Website").

CHIZZ (hereinafter referred to as "CHIZZ", "we", "us", or "our") respects the right of every user to privacy and takes the protection of personal data responsibly.

We process personal data in accordance with the applicable laws of Ukraine, in particular the Law of Ukraine "On Personal Data Protection", as well as the General Data Protection Regulation of the European Union (GDPR), if its provisions apply to the relevant processing.

This Policy applies to personal data obtained while visiting the Website, filling out contact forms, sending emails, and other ways of interacting with CHIZZ.

The use of the Website does not imply automatic consent to all types of personal data processing. In cases provided for by law, we obtain the user's separate consent.

2. Information about CHIZZ

CHIZZ is a design agency specializing in the design of digital products, user interfaces, websites, mobile applications, SaaS platforms, CRM, ERP, eCommerce, and internal business systems.

Name: CHIZZ

Website: chizz.team

Location: Kyiv, Ukraine

Email for privacy inquiries: legal@chizz.team

For all questions regarding the processing of personal data, the exercise of user rights, or the provisions of this Policy, you can contact the specified email address.

3. What Personal Data We Collect

3.1. Data provided voluntarily by the user

While interacting with the Website, the user may voluntarily provide us with the following personal data:

• First and last name.

• Email address.

• Phone number.

• Company or organization name.

• Information about services of interest to the user.

• Project description, its goals, requirements, and wishes.

• Information on the project's budget and timeline.

• Other information voluntarily provided through contact forms or during communication.

We ask users not to transmit confidential information through contact forms that is not necessary for considering the request.

3.2. Data that may be collected automatically

While visiting the Website, certain technical data may be processed automatically:

• IP address and approximate geographic location.

• Device, browser, and operating system type.

• Browser language and technical characteristics of the device.

• Addresses of visited pages.

• Date, time, and duration of the visit.

• Referral source to the Website.

• Information about interaction with interface elements.

• Data obtained using cookies and similar technologies.

The scope of automatically collected data depends on the functionality of the Website, the settings of the services used, and the user's choice regarding non-essential tracking technologies.

4. Purpose of Personal Data Processing

We collect and use personal data for specific, explicit, and legitimate purposes.

4.1. Processing requests

Personal data is used to receive and review requests, answer questions, clarify project details, prepare commercial proposals, and provide consultations.

4.2. Communication with users

Contact information may be used to communicate with the user regarding their request, discuss potential cooperation, and provide information about the requested services.

4.3. Provision of services

In the event of commencing cooperation, personal data may be used to organize work processes, fulfill contractual obligations, and maintain communication with clients.

4.4. Improvement of the Website

We may use analytical information to study visitor behavior, identify user experience issues, optimize navigation, increase the effectiveness of contact forms, and enhance the digital experience.

4.5. Ensuring security

Technical data may be used to protect the Website from spam, automated requests, fraudulent activities, unauthorized access, and other threats.

4.6. Compliance with legal requirements

In cases provided for by law, personal data may be processed to fulfill legal obligations, protect legitimate rights, and handle legal claims.

5. Legal Bases for Personal Data Processing

Depending on the nature of the processing and applicable law, we rely on the relevant legal bases.

5.1. Pre-contractual measures and performance of a contract

The processing of contact details and project information may be necessary to review a user's request, prepare a commercial proposal, conduct negotiations prior to entering into a contract, or perform contractual obligations.

5.2. Legitimate interest

We may process certain personal data to ensure the security of the Website, prevent abuse, organize business communication, and protect the legitimate interests of CHIZZ, provided that such interests do not override the rights and freedoms of users.

5.3. User consent

In cases where the processing of personal data requires consent, we obtain it in accordance with applicable law.

This may apply to the use of non-essential analytical cookies, similar tracking technologies, or sending marketing communications.

The user has the right to withdraw their consent. The withdrawal does not affect the lawfulness of processing carried out prior to such withdrawal.

5.4. Legal obligations

We may process personal data if necessary to comply with legal requirements.

6. Contact Forms and Requests

Contact forms are available on the Website, through which users can contact CHIZZ to discuss a project, receive a consultation, or request a commercial proposal.

When filling out the form, the name, email address, phone number, service type, and project description may be requested.

This data is used to process the request, clarify user needs, assess cooperation opportunities, and prepare a response.

Providing mandatory fields is necessary to submit the corresponding form. If the user does not provide such data, we may not receive sufficient information to process their request.

Submitting a contact form in itself does not imply subscription to promotional or marketing mailings.

We do not use personal data obtained through contact forms for sale to third parties.

7. Cookies and Similar Technologies

The Website may use cookies and similar technologies to ensure proper operation, maintain security, analyze traffic, and improve user experience.

Cookies are small files that may be stored on the user's device when visiting websites.

7.1. Necessary cookies

Used to ensure the basic functionality of the Website, the operation of individual components, maintenance of security, and protection against automated requests.

7.2. Analytical cookies

May be used to analyze traffic, study user interaction with the interface, and evaluate the performance of web pages.

7.3. Functional cookies

May be used to save individual user settings and improve the usability of the Website.

7.4. Cookie management

In cases where applicable law requires prior consent, non-essential cookies and similar technologies should only be used after obtaining it.

The user can restrict or delete cookies through their browser settings. However, disabling certain technologies may affect the operation of certain Website functions.

If a dedicated consent management tool is available to the user, they can use it to change their choices regarding non-essential technologies.

8. Analytics Services and Third-Party Technologies

CHIZZ uses third-party technological solutions to analyze Website performance, improve user experience, and ensure security.

8.1. Hotjar

Hotjar is used to study visitor behavior, analyze interaction with the interface, identify navigation issues, and evaluate the effectiveness of individual Website elements.

Depending on settings, the service may collect information about clicks, page scrolls, and other user actions.

8.2. Microsoft Clarity

Microsoft Clarity is used to analyze user experience, generate heatmaps, and record interactions with the Website.

Such data helps identify interface issues, evaluate user behavior, and improve Website functionality.

8.3. Contentsquare

Contentsquare is used to analyze user interactions with web pages, research user experience, and discover opportunities for interface optimization.

The amount of information processed depends on the service's functionality and integration settings.

8.4. Google reCAPTCHA

Google reCAPTCHA is used to protect contact forms from spam and automated submissions.

The service may analyze device technical specifications, browser information, and certain aspects of the user's interaction with the Website to determine the likelihood of automated activity.

During the operation of reCAPTCHA, certain information may be transferred to Google in accordance with the terms of use and privacy policy of this service.

8.5. Data processing by third-party services

The listed services may use cookies, browser local storage, and other technologies to perform their functions.

Service providers may process the information received in accordance with their terms, privacy policies, and contractual obligations.

CHIZZ seeks to limit the amount of information transferred to third-party services in accordance with the defined processing purposes.

In cases provided for by law, the use of non-essential analytical technologies requires the prior consent of the user.

9. Transfer of Personal Data to Third Parties

CHIZZ does not sell users' personal data.

We may transfer certain personal data to third-party service providers if necessary to ensure the operation of the Website, process requests, organize communication, or fulfill other legitimate purposes.

Such providers may include:

• Hosting and technical infrastructure providers.

• Contact form processing services.

• Email service providers.

• Analytics platforms.

• Spam and automated request protection services.

• Other technological providers involved in the operation of the Website.

We strive to provide third-party providers with access only to those personal data that are necessary to perform the relevant functions.

Personal data may also be disclosed in cases where this is required by applicable law or a lawful request from a competent state authority.

10. International Transfer of Personal Data

CHIZZ uses digital services of international providers, so certain personal data may be transferred or processed outside of Ukraine and the European Economic Area.

If the GDPR applies to the relevant transfer, it must be carried out in accordance with its requirements.

Depending on the circumstances, adequacy decisions of the European Commission, standard contractual clauses, or other statutory mechanisms may apply.

For more information regarding the international transfer of personal data, the user may contact legal@chizz.team.

11. Retention Periods for Personal Data

We retain personal data for no longer than necessary to achieve the purposes for which it was obtained, unless a different period is established by applicable law.

The retention period depends on the nature of the information and the purpose of its processing.

Contact form data is stored for the period necessary to review the request, prepare a response, and maintain related business communication.

If a request leads to the conclusion of a contract, the relevant information may be retained for the duration of the contractual relationship and an additional period necessary to fulfill legal obligations or protect legitimate rights.

Technical and analytical data is retained according to the purposes of processing, the settings of the respective services, and applicable legal requirements.

Upon expiration of the necessary period, personal data is deleted or anonymized, unless there are legal grounds for its further storage.

12. Personal Data Protection

CHIZZ takes appropriate technical and organizational measures to protect personal data from unauthorized access, loss, unlawful use, alteration, or disclosure.

Such measures may include the use of secure HTTPS connection, access restriction to information, protection of contact forms, access control to work services, and the use of other information security mechanisms.

We strive to ensure access to personal data only to those individuals who need it to perform the relevant tasks.

At the same time, no method of transmitting or storing information on the Internet can guarantee absolute security.

13. User Rights

Depending on applicable law, users may have the following rights regarding their personal data.

13.1. Right of access

The user has the right to obtain information about the processing of their personal data and access to the relevant data in cases provided for by law.

13.2. Right to rectification

The user may request the rectification of inaccurate or completion of incomplete personal data.

13.3. Right to erasure

The user may request the erasure of their personal data if there are grounds provided for by law.

13.4. Right to restriction of processing

In cases specified by law, the user may request restriction of the processing of their personal data.

13.5. Right to object

The user may object to certain types of personal data processing, in particular processing based on legitimate interest, in accordance with applicable law.

13.6. Right to data portability

In cases provided for by the GDPR, the user may receive their personal data in a structured, machine-readable format and transmit it to another controller.

13.7. Right to withdraw consent

If the processing of personal data is carried out on the basis of consent, the user has the right to withdraw it at any time.

13.8. Right to lodge a complaint

The user has the right to contact the competent personal data protection authority if they believe that the processing of their data violates applicable law.

13.9. Automated decision-making

CHIZZ does not use personal data obtained through contact forms for solely automated decision-making that produces legal or similarly significant effects for the user.

To exercise their rights, the user can send a request to legal@chizz.team.

We review such requests within the timeframes established by applicable law.

If necessary, we may request additional information to verify the identity of the applicant and prevent unauthorized access to personal data.

14. Children's Personal Data

The CHIZZ Website is intended for business representatives, potential clients, partners, and other persons interested in professional services.

We do not knowingly collect personal data of children for marketing purposes or the provision of services without an appropriate legal basis.

If we become aware that a child's personal data was obtained in violation of applicable law, we will take necessary measures to stop the relevant processing and delete such data, unless otherwise provided by law.

15. Links to Third-Party Resources

The Website may contain links to third-party websites, social networks, portfolio platforms, and other external resources.

CHIZZ does not control the privacy policies of third-party websites and does not determine the ways personal data is processed by their owners.

When following links to third-party resources, we recommend reviewing their respective privacy policies.

16. Changes to the Privacy Policy

CHIZZ reserves the right to periodically update this Privacy Policy due to changes in legislation, Website functionality, technologies used, or personal data processing procedures.

The current version of the Privacy Policy is posted on this page.

The date of the last update is indicated at the beginning of the document.

In cases where changes significantly affect user rights or the nature of personal data processing, we will take additional informing measures in accordance with the requirements of applicable law.

17. Contact Information

If you have any questions regarding this Privacy Policy, the procedure for processing personal data, or the exercise of your rights, you may contact us.

CHIZZ

Website: chizz.team

Location: Kyiv, Ukraine

Email: legal@chizz.team

We will review your inquiry and provide a response in accordance with the requirements of applicable law.