This page explains what data we collect when you visit ukrainix.com, why we collect it, how long we keep it, and what control you have over it. We use one analytics tool (Google Analytics 4), one bot-protection service on our contact form (Google reCAPTCHA), and a contact form that emails us directly. That's the entire data picture.

We are Ukrainix, a boutique Drupal agency based in Ukraine, acting as the data controller for everything on this site. Last updated: 25 May 2026.

Information we collect

When you browse the site

Our server records standard access logs for every page request: IP address, browser user-agent, referrer URL, requested path, response code, and timestamp. These exist to keep the site running, debug errors, and detect abuse. We do not link them to any identity.

If you accept analytics cookies (see below), Google Analytics also records page views and basic event data on your visit, tied to a randomly-generated visitor ID stored in a first-party cookie.

When you contact us

Our contact form collects your name, email address, and message body. We use those to reply to your enquiry — nothing else. They are emailed to sales@ukrainix.com and stored in our site database until you ask us to delete the record or the enquiry is resolved.

To stop form spam, the contact form is protected by Google reCAPTCHA v3, which scores each submission for bot-likelihood. Google receives your IP, browser characteristics, and interaction signals as part of that scoring. We never see the underlying data, only the score.

Cookies

We use three categories of cookie. Functional cookies are always on; analytics cookies require your explicit consent via the banner you saw on first visit. There are no advertising or tracking cookies on this site.

• Functional — SESS* / SSESS* (Drupal session, only set if you log in — i.e. for our staff), and klaro (remembers your cookie choice for 180 days). First-party, required for the site to work.
• Analytics (consent required) — _ga and _ga_CCV5BENKK8, set by Google Analytics 4 once you click Accept. Used to count unique visitors and aggregate page-view data. First-party, expire after 2 years.
• Bot protection (contact page only) — Google reCAPTCHA may set short-lived cookies on its own domain (google.com) when you submit the form. Required for the form to work.

You can change your analytics choice at any time via the Cookies link in the footer, or by clearing the klaro cookie in your browser.

Legal basis for processing

• Legitimate interests (UK/EU GDPR Art. 6(1)(f)) — server logs, session cookies, reCAPTCHA. Running and protecting the site.
• Consent (Art. 6(1)(a)) — Google Analytics. You opt in, you can withdraw at any time.
• Contract / pre-contractual steps (Art. 6(1)(b)) — contact-form submissions. We process your message to respond to it.

Your rights

Under UK and EU data protection law you can ask us to:

1. confirm what data we hold about you and provide a copy (access);
2. correct anything that's wrong (rectification);
3. delete data we no longer need to keep (erasure);
4. restrict how we use your data while a dispute is resolved;
5. receive your data in a portable format (portability);
6. object to processing based on legitimate interests;
7. withdraw consent for analytics at any time.

To exercise any of these, email sales@ukrainix.com. We aim to respond within 30 days. If you are unhappy with our response, you may complain to your national data protection authority (in the UK, the ICO).

How long we keep data

• Server logs: 30 days, then rotated out automatically.
• Contact-form submissions: until the enquiry is closed, then deleted on request or within 24 months of last contact.
• Google Analytics event data: 14 months (Google's data retention setting on our property).
• Cookies: see the table above for each cookie's lifetime.

Security

The site runs on hardened Drupal 10 with security updates applied on the same day they ship. All traffic is HTTPS-only with HSTS. Admin access is restricted by role and requires unique credentials per editor. Database backups are encrypted at rest.

International data transfers

Google Analytics and reCAPTCHA are operated by Google LLC in the United States. Both services rely on the EU–US Data Privacy Framework (and the UK Extension) as the lawful basis for transferring personal data outside the EEA/UK. Google is DPF-certified. We use no other US-based or third-country processors.

Links to other sites

Our case studies and blog posts may link to client sites, GitHub, drupal.org and similar. Once you leave ukrainix.com, this policy no longer applies — check the destination site's own policy.

Changes to this policy

If we change what we collect or how we use it, we update this page and bump the "last updated" date at the top. Material changes (new vendors, new categories of data) will also trigger a fresh consent prompt on your next visit.

Contact

Questions or requests about your data: sales@ukrainix.com. We read every message and respond personally.