Effective 18 September 2026
1. Controller and contact
BuildByAndrew is operated by Individual Entrepreneur Andrii Dmytrovych Mahas, Ivano-Frankivsk, Ukraine. For privacy questions or requests, email [email protected].
This policy is intended to provide the information required when personal data is received in connection with a project enquiry.
2. Data processed
This is a portfolio and service website. It does not provide user accounts, subscriptions, payments or a newsletter.
Information you choose to provide
- Your name and email address.
- Project type, preferred timeline and project description.
- Any information you include in an email or message sent through Telegram, WhatsApp, LinkedIn or Upwork.
Technical information
The hosting provider may automatically record limited server-log information such as IP address, browser or device information, request time, requested page and referrer. These logs are used to deliver and secure the website, diagnose errors and prevent abuse. They are not used here for advertising or profiling.
4. Cookies and tracking
This website does not set cookies and does not use local storage or session storage. It does not contain analytics, advertising pixels, behavioural tracking or automated profiling.
The Manrope font is served directly from this website, so opening a page does not create a font request to Google. Ordinary hosting logs are not cookies.
Because no optional cookies are used, there is no consent banner. If analytics, advertising or another non-essential technology is added later, this policy and the consent mechanism will be updated before that technology is enabled where consent is required.
5. Service providers and external links
Limited data may be handled by providers needed for the website and communication:
- The hosting provider processes technical requests and server logs to deliver and protect the website.
- Cloudflare provides content delivery and security services and may process IP addresses, request metadata and network-error reports under the Cloudflare Privacy Policy.
- Google processes information when you open the pre-filled Gmail page or send an email through Gmail, under the Google Privacy Policy.
- Telegram, WhatsApp, LinkedIn and Upwork process data only when you choose to follow their links or contact me through those services, under their own policies.
Some providers may process data outside Ukraine. I do not sell personal data or share project enquiries for third-party advertising.
6. Retention and security
Project enquiries and related correspondence are normally kept for up to 24 months after the last meaningful contact. They may be kept longer when needed to perform a contract, meet a legal or accounting duty, resolve a dispute or protect legal rights. Data may be deleted earlier when it is no longer needed or after a valid deletion request.
Server logs are retained according to the hosting provider’s security settings and are not used for marketing. Reasonable technical and organizational measures are used to protect correspondence, but no internet or email system can be guaranteed completely secure.
7. Your rights
Depending on the applicable law, you may ask to access, correct or delete your personal data; object to or restrict processing; receive information about recipients; or withdraw consent where processing is based on consent.
Send a request to [email protected]. I may need enough information to verify that the request concerns you. You may also submit a complaint to the Ukrainian Parliament Commissioner for Human Rights or another competent supervisory authority.
8. Changes to this policy
This policy may be updated when the website, contact process, providers or legal requirements change. The effective date above shows when the current version applies.