This Privacy Policy describes how Halsoft ("we", "us", or "our") collects, uses, and protects your personal information when you visit our website at halsoft.net or contact us about our services. Halsoft is registered in Estonia and committed to full compliance with the General Data Protection Regulation (GDPR).
1. Information We Collect
We collect personal information that you voluntarily provide to us when you use our contact form or communicate with us directly. This includes:
- Contact information: Your name and email address (required), and optionally your company name and phone number.
- Project details: Information about your project type, budget range, and any details you share in your message.
- Communication records: Any subsequent email or chat correspondence we exchange.
We also automatically collect certain technical data when you visit our website, including your IP address, browser type, operating system, referring URLs, and pages visited. This data is collected via analytics tools (see Section 5).
2. How We Use Your Information
We use the information we collect to:
- Respond to your inquiries and provide the services you request.
- Assess your project requirements and prepare proposals.
- Communicate about project progress, updates, and support.
- Send occasional service-related communications (not marketing without consent).
- Improve our website and understand how visitors use it.
- Comply with legal obligations.
Our legal basis for processing your personal data is (a) your consent, (b) performance of a contract or pre-contractual steps, and (c) our legitimate interests in running and improving our business, where those interests do not override your rights.
3. Data Security
We take the security of your personal data seriously. We implement appropriate technical and organizational measures to protect your information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encrypted data transmission via HTTPS/TLS on all pages.
- Access controls limiting data access to authorized personnel only.
- Regular security reviews and vulnerability assessments.
- Secure storage of data with reputable cloud infrastructure providers.
While we strive to protect your data, no method of transmission over the internet is 100% secure. We will notify you promptly if a data breach occurs that is likely to result in a risk to your rights and freedoms.
4. Cookies
Our website uses cookies and similar tracking technologies. Cookies are small text files placed on your device to help us understand how you interact with our site.
- Essential cookies: Required for basic website functionality. These cannot be disabled.
- Analytics cookies: Used to collect anonymous usage data to help us improve the website. You may opt out by adjusting your browser settings or using a browser extension such as the Google Analytics Opt-out Add-on.
You can control or delete cookies through your browser settings. Note that disabling certain cookies may affect your experience on our website.
5. Third-Party Services
We use the following third-party services that may process your personal data:
- Google Analytics: Website analytics. Data is processed in accordance with Google's Privacy Policy.
- Vercel:Website hosting and edge infrastructure. Data is processed under Vercel's data processing agreement.
- Email service providers: Used to manage and send email communications.
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
6. Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected, including legal and business requirements:
- Contact form submissions and related communications are retained for up to 3 years, or for the duration of an ongoing client relationship.
- Analytics data is retained in accordance with Google Analytics' data retention settings (default 14 months).
- When data is no longer needed, we securely delete or anonymize it.
7. Your Rights (GDPR)
As a company registered in Estonia (EU), we are subject to GDPR. If you are in the European Economic Area, you have the following rights regarding your personal data:
- Right of access: Request a copy of the personal data we hold about you.
- Right to rectification: Request correction of inaccurate or incomplete data.
- Right to erasure:Request deletion of your personal data ("right to be forgotten").
- Right to restriction: Request that we limit the processing of your data in certain circumstances.
- Right to data portability: Receive your data in a structured, machine-readable format.
- Right to object: Object to processing based on legitimate interests or direct marketing.
- Right to withdraw consent: Withdraw consent at any time where processing is based on consent.
To exercise any of these rights, please contact us at contact@halsoft.net. We will respond within 30 days. You also have the right to lodge a complaint with the Estonian Data Protection Inspectorate (www.aki.ee).
8. International Data Transfers
Our servers and service providers may be located outside the European Economic Area. When we transfer data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission, to protect your information.
9. Children's Privacy
Our website and services are not directed at children under the age of 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected data from a child, please contact us immediately.
10. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will post the updated policy on this page with a revised "Last updated" date. For significant changes, we will notify you by email if we have your contact details.
11. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
- Email: contact@halsoft.net
- Address: Stryiska 113D, Lviv, 79000, Ukraine
- Company registration: Estonia, European Union