Privacy Policy

Effective date: 25 August 2026

This Privacy Policy explains how the administration of svitli.agency (the “Website”), operating under the Svitli Agency brand (“we”, “us”, the “Agency”), collects, uses, stores and protects the personal data of Website visitors and prospective and current clients.

By using the Website, submitting a form or contacting us, you acknowledge that you have read this Policy. If you do not agree with it, please do not provide personal data through the Website.

1. Who is responsible for your data

The Svitli Agency Website administration is the controller of personal data collected through the Website.

Website: https://svitli.agency/
Email: [email protected]
Telephone: +380 98 89 77 878
Offices: 48/2 Lvivska Street, Odesa, Ukraine; 233-B Nezalezhnosti Street, Ivano-Frankivsk, Ukraine

2. Personal data we may collect

Depending on how you interact with the Website, we may collect the following categories of data:

Contact details: name, telephone number, email address, username or contact details for a messaging service.
Enquiry information: company name, website address, selected service area, comments, message content and any other information that you voluntarily enter in a form.
Files: documents, images, specifications or other materials that you voluntarily attach to an enquiry.
Technical data: IP address, browser type and version, device type, operating system, language, visit date and time, pages visited, traffic source and other Website logs.
Interaction data: pages viewed, clicks, session duration, form interactions and other actions on the Website.
Cookie and similar-technology data: session identifiers, user preferences, analytics and advertising identifiers, depending on your settings and consent.

We do not ask you to submit special categories of personal data through our forms, including health information, biometric data, political opinions or religious beliefs. Please do not include such data in messages or files unless it is objectively necessary and has been agreed with us in advance.

3. How we collect personal data

We may obtain personal data:

directly from you when you complete a form, call us, email us or contact us through a messaging service;
automatically through cookies, server logs and analytics technologies;
from advertising, analytics or communications providers, subject to their settings and your interaction with them;
from a representative of your company or a business partner where they lawfully provide your business contact details.

4. How we use personal data

We may process personal data to:

respond to an enquiry, provide a consultation and prepare a proposal;
contact you by telephone, email or your selected messaging service;
enter into and perform a contract, provide services and maintain project communications;
review attached materials and assess the requested work;
improve the Website, its structure, content, usability and the quality of our services;
analyse Website traffic, advertising performance and enquiry sources;
prevent fraud, spam, misuse and technical threats;
comply with legal requirements and protect our rights and legitimate interests;
send informational or marketing communications where you have consented or where otherwise permitted by law. You may opt out at any time.

5. Legal bases for processing

Depending on the circumstances, we process personal data on the basis of:

your consent;
the need to take steps at your request before entering into a contract or to perform a contract;
our legitimate interests, including service development, analytics, Website security and the protection of our rights, provided that these interests are not overridden by your rights and freedoms;
compliance with legal obligations.

Processing is carried out in accordance with the Law of Ukraine “On Personal Data Protection”. Where the EU General Data Protection Regulation (“GDPR”) applies to a particular processing activity, we also comply with its requirements.

6. Cookies and analytics technologies

The Website may use cookies and similar technologies to operate correctly, remember settings, analyse traffic and measure the effectiveness of advertising campaigns.

Cookies may include:

strictly necessary cookies, which support the Website’s basic operation and security;
functional cookies, which remember selected preferences;
analytics cookies, which help us understand how visitors use the Website;
marketing cookies, which are used to measure and personalise advertising.

Where consent is required for non-essential cookies, we request it before using them. You can change cookie settings in your browser or through any consent-management tool available on the Website. Disabling certain cookies may affect some Website functions.

7. Who may receive personal data

We do not sell personal data. For the purposes described in this Policy, personal data may be accessed by:

authorised Svitli Agency staff and contractors;
hosting, technical support, CRM, email, cloud storage and backup providers;
analytics, advertising, communications and anti-spam providers;
messaging services and other communication channels where you select the relevant option;
professional consultants, auditors or legal advisers;
public authorities, but only where disclosure is required by law.

These parties receive only the data necessary to perform their functions and are required to maintain appropriate confidentiality and security.

8. International data transfers

Certain technical, analytics or communications providers may process data outside Ukraine or the European Economic Area. Where required, we use legally recognised safeguards, such as an adequacy decision, standard contractual clauses, binding contractual commitments or other lawful transfer mechanisms.

9. Data retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including responding to an enquiry, performing a contract, complying with legal and accounting obligations, resolving disputes and protecting rights.

Prospective-client enquiry data is generally retained for no longer than three years after the last substantive interaction unless there is a lawful reason to keep it for longer. Current and former client data may be retained throughout the relationship and for applicable statutory periods afterwards. Cookie lifetimes depend on the cookie type and the relevant provider’s settings.

10. How we protect personal data

We use reasonable organisational and technical security measures, including access restrictions, account management, software updates, backups, secure transmission methods and provider oversight. However, no method of transmitting or storing information can guarantee absolute security.

11. Your rights

Subject to applicable law, you may have the right to:

ask whether we process your personal data and obtain access to it;
request correction of inaccurate or incomplete data;
request deletion where there is no lawful reason to retain the data;
request restriction of processing or object to processing;
withdraw consent without affecting the lawfulness of processing carried out before withdrawal;
opt out of marketing communications;
receive data in a structured, commonly used format where the right to data portability applies;
lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights or another competent supervisory authority.

To exercise your rights, email [email protected]. To protect personal data, we may ask you to verify your identity and clarify the scope of your request.

12. Children’s data

The Website is intended for business users and is not designed to knowingly collect children’s personal data. If you become aware that a child has provided us with personal data without the appropriate consent of a parent or legal guardian, please contact us. We will review the request and take appropriate action.

13. Third-party links and content

The Website may contain links, widgets or embedded content provided by third parties. Their processing of personal data is governed by their own privacy policies. We recommend reviewing those policies before providing personal data.

14. Changes to this Policy

We may update this Policy from time to time due to changes in law, Website functionality or our processing activities. The current version will always be published on this page with its effective date.

15. Contact us

For questions about privacy, personal data processing or the exercise of your rights, please contact us: