Privacy Policy

Who we are

WELIR Design operates welir.com. The controller responsible for personal data collected through this website is Welir Ltd..

For privacy questions or requests, contact support@welir.com.

What data we collect and why

When you contact us

We collect the information you provide through our contact form or by email, such as your name, email address, Telegram or WhatsApp contact, company, project details, budget and message.

We use it to respond to enquiries, send you a confirmation that we received your message, discuss projects and prepare proposals. Where the GDPR applies, our legal basis is taking steps towards a contract at your request (Article 6(1)(b)), where relevant, or our legitimate interest in managing business enquiries and correspondence (Article 6(1)(f)).

When we work together

We process contact details, project correspondence, documents and billing information to manage our work, fulfil contractual obligations and comply with applicable accounting and tax laws.

Depending on the circumstances, our legal bases are contractual necessity, legitimate interests and legal obligations (Articles 6(1)(b), (f) and (c) GDPR).

When you browse the website

Our hosting provider may process technical information, including your IP address, browser information, requested pages and access times, to deliver the website and maintain its security. This is based on our legitimate interest in operating and protecting the website (Article 6(1)(f) GDPR).

With your consent, we may also use:

• Google Analytics 4 to understand website traffic and improve our services.
• Google Ads to measure advertising performance and support advertising activities.

These tools may process information about page views, interactions, referral sources, devices and approximate location. Consent is the legal basis for optional analytics and advertising processing (Article 6(1)(a) GDPR).

We use Google Consent Mode to manage these choices. Analytics and advertising tags are blocked until the relevant consent is given.

For details, see our Cookie Policy.

Please do not send sensitive personal information through our contact form or email.

Who we share data with

We do not sell personal data for money.

We may share information with service providers that help us operate our business, including website hosting, email and document services, contact form processing, accounting and invoicing services, and Google services where applicable.

These providers receive information only as needed for their services and process it under applicable contractual and legal arrangements.

We may also disclose information when legally required or when necessary to protect our legal rights.

International data transfers

Personal data may be processed in Ukraine, the European Economic Area, the United States and other countries where we or our service providers operate.

The European Commission has not issued an adequacy decision for Ukraine. Where international transfer restrictions apply, we use legally permitted transfer mechanisms and applicable safeguards, including contractual protections or adequacy arrangements where relevant.

You can contact us for information about the safeguards applicable to a particular transfer.

How long we keep data

We keep personal data only as long as necessary for the purposes described in this policy.

• Enquiries: generally up to 24 months after our last communication.
• Client and project records: for the duration of our work and afterwards as needed for legal obligations or potential claims.
• Accounting information: for the periods required by applicable law.
• Website security logs: according to our hosting provider’s retention settings and security needs.
• Google Analytics: user-level and event-level data according to our configured retention settings, generally no longer than 14 months.
• Cookies: according to the periods described in our Cookie Policy.

We may retain information longer where required by law or necessary to resolve a dispute.

How we protect data

We take reasonable technical and organisational measures to protect personal data, including encrypted website connections, controlled access and appropriate service provider safeguards.

No online service can guarantee absolute security.

Your privacy rights

Depending on the law that applies to you, you may have the right to:

• Access your personal data and request a copy.
• Correct inaccurate information.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests.
• Request data portability where applicable.
• Withdraw consent at any time.

Withdrawal does not affect processing carried out lawfully before consent was withdrawn.

To exercise your rights, email support@welir.com. We may need to verify your identity. Where the GDPR applies, we normally respond within one month, subject to legally permitted extensions.

You may also lodge a complaint with the relevant data protection authority, including an authority in the EU/EEA, the UK Information Commissioner’s Office or the Ukrainian Parliament Commissioner for Human Rights, as applicable.

Other information

External links. Our website may link to external websites and services, such as Calendly for booking calls. Their own privacy policies apply when you visit or use them.

Children. Our services are intended for businesses and are not directed at children.

Automated decisions. We do not make solely automated decisions about you that have legal or similarly significant effects.

Your choice. You are not required to submit an enquiry. However, we need your contact information to respond to your message. Basic technical data is processed when you visit the website.

Changes to this policy

We may update this Privacy Policy as our website, services or legal obligations change. The latest version will be published here with an updated date.

For questions, contact support@welir.com.