Privacy Policy for Ukrainian Startups Association
This Privacy Policy explains how Association of Startups of Ukraine (“we”, “us”) collects and processes personal data when you use https://startups.org.ua/ (the “Website”).
1) Who is the controller
Controller: Association of Startups of Ukraine
Contact email: [email protected]
(Our postal address/city are not specified for this Website.)
2) What data we collect
We collect only the data needed to operate the Website and respond to requests.
A) Data you provide via forms (Fluent Forms)
When you submit a form, we may collect:
-
Name
-
Email
-
Phone
-
Comment/message content
Consent checkbox: Our forms include a consent/marketing checkbox. If you tick it, we may use your contact details for marketing communications.
No file uploads are collected via the form.
B) Payment data (WayForPay)
If you make a payment through the Website, the payment is processed by WayForPay. We may receive limited information such as payment status/confirmation, amount, date/time, and an order/reference identifier.
We do not store your full card details; they are handled by the payment provider.
C) Automatically collected data (cookies and similar technologies)
When you use the Website, we and our partners may collect:
-
IP address (often in truncated/technical form depending on settings)
-
Device and browser information
-
Approximate location (derived from IP)
-
Pages visited, clicks, referring/exit pages
-
Cookie identifiers / advertising identifiers
3) Cookies, analytics, and advertising technologies we use
We use the following tools (often through cookies or tags):
-
Google Tag Manager (GTM) – manages website tags.
-
Google Analytics (GA) – website analytics and performance measurement.
-
Google Ads / Remarketing – advertising measurement and remarketing.
-
Google Consent Mode – adjusts Google tags based on your consent choices (where enabled via a consent banner).
-
Meta (Facebook) Pixel – advertising measurement and remarketing on Meta platforms.
You can manage your cookie preferences via your browser settings and (where available) the Website’s cookie/consent banner.
4) How we use your data (purposes)
We process personal data to:
-
Respond to your requests and messages
-
Provide and maintain the Website
-
Improve Website performance and user experience (analytics)
-
Measure and optimize advertising campaigns (ads/remarketing)
-
Send marketing communications only if you have consented (e.g., via checkbox or other opt-in)
-
Process payments and accounting/record-keeping (if applicable)
-
Protect the Website and prevent fraud/abuse
5) Legal bases (where GDPR applies)
Depending on the situation, we rely on:
-
Consent (e.g., marketing opt-in, certain cookies/remarketing)
-
Contract / steps before a contract (e.g., requests that require follow-up, payment initiation)
-
Legitimate interests (e.g., basic site security, improving the Website)
-
Legal obligation (e.g., accounting or compliance requirements related to payments)
6) Who we share data with (processors and partners)
We may share data only as needed with:
-
Hosting provider: Hostinger (Website hosting)
-
Form processing: Fluent Forms / WordPress plugins used on the Website
-
Email marketing: SendPulse (if you opted in or we use it for operational communications)
-
Analytics/ads partners: Google (GTM/GA/Ads/Consent Mode), Meta (Pixel)
-
Payment provider: WayForPay (payment processing)
-
Authorized administrators/contractors: the Website owner and an engaged contractor (admin access)
Some partners may act as independent controllers for their own purposes (e.g., Google/Meta for advertising systems). Their privacy policies also apply.
7) International transfers
Our audience is global, and some service providers may process data outside your country. Where required, we use appropriate safeguards for international transfers (such as contractual protections).
8) Data retention
We keep personal data only as long as necessary for the purposes described above, to comply with legal obligations, resolve disputes, enforce agreements, or until you request deletion/withdraw consent (when applicable).
9) Security
We use reasonable technical and organizational measures to protect personal data (such as access controls and standard security practices). No method of transmission/storage is 100% secure, but we work to reduce risks.
10) Your rights
Depending on your location and applicable law, you may have rights to:
-
Access your data
-
Correct/update your data
-
Delete your data
-
Object to or restrict processing
-
Withdraw consent (where processing is based on consent)
-
Data portability (in certain cases)
-
Lodge a complaint with a supervisory authority
To exercise rights, contact: [email protected].
11) Marketing messages
If you opted in, you may receive emails via SendPulse. You can unsubscribe at any time using the link in the email or by contacting us at [email protected].
12) Children
The Website is not intended for children, and we do not knowingly collect children’s data. If you believe a child provided data, contact us to request deletion.
13) Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date shows when it was most recently revised.
