Privacy policy

Version of 31.10.2026

Who processes your data

The data controller is [CONTROLLER: sole proprietor — name after registration], operating under the Oberih Security brand. Contact for data matters: contact@oberihsec.com.

What data we receive

Only what you enter in the request form: name, company and website, phone or messenger, email, topic and comment.

We use no cookies, analytics or advertising trackers. The site only stores your light or dark theme choice in your browser; it is never sent anywhere.

Why

To reply to your request, run a free express check of publicly available information about your website and prepare a proposal.

Legal basis

Your consent given by the checkbox in the form (Art. 6(1)(a) GDPR; Art. 11 of Ukraine’s Law on Personal Data Protection), and steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR).

Who receives the data

Requests go to our work mailbox hosted by Hosting Ukraine LLC (servers in Ukraine) and, if enabled, to our work Telegram chat (Telegram processes data on servers outside Ukraine). Where data leaves the EU, we rely on your explicit consent (Art. 49(1)(a) GDPR).

If partner engineers join your project, they receive only the data they need and are bound by an NDA.

We never sell your data or share it for advertising.

How long we keep it

The site does not store requests in a database. Emails and messages with your request are deleted within 12 months if no contract is signed. If a contract is signed, we keep them for its duration and the periods required by law.

To block spam, the server temporarily (up to 1 hour) keeps an irreversible hash of your IP address. The hosting provider keeps technical access logs under its own policy.

Your rights

You can ask what data we hold about you, correct or delete it, withdraw consent or object to processing — email contact@oberihsec.com. We reply within 30 days.

You may also complain to the Ukrainian Parliament Commissioner for Human Rights or, in the EU, to your national data protection authority.

Security

The site works over HTTPS only. Client reports and working data are transferred and stored encrypted.