Privacy Policy

Information Collection

We collect information you provide directly to us: name, email, phone, company name via the contact form. We may also receive documents (invoices, financial data) you transfer for verification and correction as part of our B2B services. Technical data (IP address, browser type) may be collected automatically when you visit the site.

Data Usage

We use collected data exclusively for: providing OCR data verification and manual correction services; communicating with you regarding your inquiry or ongoing cooperation; fulfilling contractual obligations; improving the quality of our services. We do not use your data for marketing communications without your consent. The legal basis for processing your data is: performance of a contract or pre-contractual measures (Art. 6(1)(b) GDPR); our legitimate interest in ensuring service quality (Art. 6(1)(f) GDPR); your consent, where applicable (Art. 6(1)(a) GDPR).

Data Protection

The security of your data is our priority. We sign Non-Disclosure Agreements (NDA) with every client and partner. Access to documents and data is granted only to authorized members of our team. We apply organizational and technical measures to protect against unauthorized access, leakage or destruction of data.

Third-Party Disclosure

We do not sell, transfer, or disclose your confidential data to third parties, except: when required by applicable law; with your written consent; to trusted subcontractors directly involved in fulfilling your orders — exclusively under NDA conditions. As a data processor we also use services of Google LLC (USA): Google Tag Manager and Google Analytics 4 — solely for website traffic analysis and only with your consent. Data transfer to the USA is carried out on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR.

Your Rights

• access your personal data we hold;
• correct inaccurate information;
• delete your data after the end of cooperation;
• restrict the processing of your data;
• data portability (Art. 20 GDPR);
• object to data processing (Art. 21 GDPR);
• lodge a complaint with the Ukrainian Parliament Commissioner or your local EU supervisory authority.

Policy Changes

We may update this Privacy Policy as needed. Any changes are published on this page with an updated date. If the changes are significant, we will notify you directly.

Cookies & Analytics

We use two types of cookies. Essential (technical): store your cookie consent choice in the browser localStorage (key: vilibri_cookie_consent). They do not identify you personally and are required for the banner to function. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Analytical: used exclusively after receiving your explicit consent via the banner. Until consent is given, no analytical cookies are set and no data is collected. Legal basis: your consent (Art. 6(1)(a) GDPR). You may withdraw your consent at any time by clearing your browser localStorage or by contacting us.

Google Tag Manager & Google Analytics 4

Our website uses Google Tag Manager (GTM) and Google Analytics 4 (GA4) — services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Tag Manager is loaded on every page visit for technical tag management purposes. During this request, your IP address is technically transmitted to Google's servers. This is done on the basis of our legitimate interest (Art. 6(1)(f) GDPR) in managing analytical tools, and is implemented via Google Consent Mode v2, which by default sets the status "denied" for all data collection types. Google Analytics 4 is activated exclusively after receiving your explicit consent. After consent is given, GA4 collects: anonymized visit data (pages, session duration, traffic source), device and browser type, approximate geographic location (country/city level). GA4 does not collect personal data (name, email). Data is retained in Google Analytics for up to 14 months. Data transfer to the USA is carried out on the basis of Standard Contractual Clauses (SCCs) pursuant to Art. 46(2)(c) GDPR. For more information: Google Privacy Policy: policies.google.com/privacy. Google Data Processing Terms: business.safety.google/privacy.

Data Retention Period

Personal data is stored for the duration of the contract with the client and for 3 (three) years after its termination, unless a different period is required by applicable law. Technical data (IP address, browser type) is stored for no longer than 12 months. Data collected via the contact form is stored until your request is processed, but no longer than 24 months in the absence of further cooperation. After the retention period expires, data is deleted or anonymized.

Contact Us

If you have any questions about our privacy policy, please contact us: info@vilibri-one.com.ua