Privacy Policy

What personal data the mr.freedom website collects, why, how we protect it and how you can manage your data.

Updated: 13 October 2026

Contents

1. General information

This Policy explains what personal data the mr.freedom website (artemhimich.com) collects, for what purpose, how it is stored and what rights you have. It is based on the EU General Data Protection Regulation (GDPR), which applies when we offer our services to people in the European Union, as well as on the Law of Ukraine “On Personal Data Protection”.

Data controller — Artem Himich, an individual based in Ukraine (“we”). For all questions about data processing, email info@himich.co.ua.

2. What data we collect

Source	What data	Required?
Short request form	Name, contact details (Telegram username or number, Viber, WhatsApp or email), services you’re interested in, message	Name and contact — yes, the rest — optional
“Free first screen design” brief	Name and contact, company name, business description, website goal, current website and social media, brand identity details, website examples, additional wishes, files (logo, brand book, examples)	Name and contact — yes, the rest — optional
Messenger and email correspondence	Your name, contact details and the content of messages you send yourself	No
Server technical logs	IP address, browser and device type, date and time of the request, page address	Collected automatically to run and secure the website
Cookies	Cookie identifiers, data about page visits, scrolling and clicks (form fields are masked)	Analytics and marketing — only with your consent

Data you provide and data collected automatically

Please don’t send passport details, bank details, health data or other sensitive information through the forms — they aren’t needed to discuss a website.

3. Purposes and legal bases

Purpose	Legal basis
Replying to your request or question and contacting you by the method you chose	Steps taken at your request before entering into a contract (Art. 6(1)(b)) and your consent (Art. 6(1)(a))
Preparing a free first screen design concept, a proposal or a cost estimate	Steps taken at your request before entering into a contract (Art. 6(1)(b))
Concluding and performing a website development contract	Performance of a contract (Art. 6(1)(b))
Keeping the website running and secure, protecting forms from spam and bots	Our legitimate interest (Art. 6(1)(f))
Analysing website traffic and advertising effectiveness	Your consent (Art. 6(1)(a))
Keeping accounting and tax records	Legal obligation (Art. 6(1)(c))

Why we process data and on what basis under Article 6(1) GDPR

4. How data is stored and who has access

Requests from the forms are sent over a secure connection (HTTPS) and delivered via the Telegram Bot API to a private chat that only I, as the controller, can access. Service access keys are stored on the server and never appear in the page code. The forms are protected against automated submissions.

We don’t sell personal data or share it with third parties for their own purposes. The following service providers may process data only to the extent needed to run the website:

Telegram — delivering requests to the controller’s private chat;
Cloudflare, Inc. (USA) — website hosting and server technical logs;
Google LLC (Google Analytics, Google Ads) — cookies only with your consent; without consent — anonymised signals in Google Consent Mode;
Microsoft Corporation (Microsoft Clarity) — recordings of page interactions and heatmaps; text you type into forms isn’t recorded; cookies only with your consent;
Meta Platforms Ireland Ltd. (Meta Pixel) — only if you allow marketing cookies.

We may also disclose data at the lawful request of public authorities in the cases and manner provided by law.

5. International data transfers

The controller is based in Ukraine, and the servers of the providers listed above may be located outside the European Economic Area, including in the USA. Transfers to providers in the USA rely on the EU–US Data Privacy Framework or on the European Commission’s Standard Contractual Clauses used by these providers. Transfers of your request to the controller in Ukraine are necessary to reply to you and to take steps you’ve asked for before entering into a contract (Art. 49(1)(b) GDPR).

6. Retention periods

Requests and correspondence without a contract — up to 3 years from the last interaction, then deleted.
Client data — for the duration of the contract and the periods required by law for keeping records.
Server technical logs — within the periods set by the hosting provider.
Cookies — the periods listed in the Cookie Policy.

You can ask us to delete your data earlier — see “Your rights”.

7. Your rights

Under the GDPR, you have the right to:

access your personal data and receive a copy of it (Art. 15);
have inaccurate data corrected (Art. 16);
have your data erased (Art. 17);
restrict processing (Art. 18);
receive your data in a structured, machine-readable format and transfer it to another controller (Art. 20);
object to processing based on our legitimate interest (Art. 21);
withdraw your consent at any time — this doesn’t affect the lawfulness of processing carried out before the withdrawal (Art. 7(3));
lodge a complaint with a data protection supervisory authority, in particular in the EU country where you live or work (Art. 77).

8. Data security

data is transmitted only over a secure HTTPS connection;
access keys are stored on the server, not in the page code;
forms are protected against bots and submissions are rate-limited;
only the controller has access to requests;
without your consent, analytics and advertising services don’t set cookies or receive identifiers.

In the event of a data breach likely to affect your rights, we’ll notify you and, where required by law, the competent supervisory authority.

9. Children’s data

The website is intended for business owners and their representatives and isn’t aimed at children. We don’t knowingly collect data from people under 16. If you believe a child has sent us their data, let us know and we’ll delete it.

10. Cookies

How the website uses cookies and how to manage them is described in detail in the Cookie Policy.

11. Changes to this policy

We may update this Policy, for example when we add new services or when laws change. The current version is always available on this page, and the update date is shown at the top. If the changes are significant, we’ll ask for your consent again.

12. Contact

Artem Himich, an individual based in Ukraine. Email for personal data requests: info@himich.co.ua.

If you believe your rights have been violated, you can contact a data protection supervisory authority or a court. However, we’d appreciate it if you wrote to us first — we’ll try to resolve the issue quickly.