General provisions
This policy explains what personal data the theonebly.com website collects, why, how long we keep it, and what rights you have.
It is also the Privacy Policy that the request forms on the website refer to. By checking the consent box in a form or by submitting a request, you confirm that you have read this document.
We process data in accordance with the Law of Ukraine “On Personal Data Protection”; the data of visitors from the European Union is also processed in accordance with the EU General Data Protection Regulation (GDPR).
Who processes your data
The owner of your personal data (in GDPR terms, the controller) is the THEONEBLY team, which runs this website.
- Phone: +380 63 676 71 71
In the rest of this policy, it is referred to as “we,” “us,” or “our.”
What data we collect
Data you send us yourself
Through the request forms on the website, we receive:
- your name, phone number, and email address;
- your Telegram username — in the short request form;
- your company name, approximate budget, the services you are interested in, a description of your project, and how you heard about us — in the detailed form with the budget calculator;
- your consent to this policy.
If you call us or message us on WhatsApp or Telegram, we see your phone number, profile name, and the messages you send.
Please do not send passwords, payment details, or other sensitive information through the forms — we do not need them to work on your project.
Data collected automatically
- technical request data: IP address, browser and device, language, the pages you open, and the date and time. The server that hosts the website records this data in its logs;
- data from cookies and the Meta advertising pixel — see the “Cookies, analytics, and advertising” section for details.
Why we process data
- To respond to your request: to contact you, clarify your requirements, hold a consultation, and prepare an estimate or a commercial proposal.
- To enter into and perform a contract if we start working together: to agree on the work, report on it, and issue invoices.
- To protect the forms from spam: to distinguish humans from bots (Google reCAPTCHA).
- To evaluate our advertising: to understand which ads bring in visitors and requests, and to show THEONEBLY ads to people who may be interested in them (Meta Pixel).
- To keep the website running: to ensure its speed and security and to deal with technical failures.
- To comply with the law: for example, to keep accounting and tax records.
We do not sell your data, and we do not make automated decisions about you that would have legal consequences for you.
Legal bases
We process data only on the grounds provided for in Article 11 of the Law of Ukraine “On Personal Data Protection” and, for visitors from the EU, in Article 6 of the GDPR:
- your consent — in the request form and for advertising cookies; you can withdraw it at any time (Art. 6(1)(a) GDPR);
- entering into and performing a contract — when you ask us to prepare a proposal or we are already working together (Art. 6(1)(b) GDPR);
- legal obligations — accounting and tax record-keeping (Art. 6(1)(c) GDPR);
- legitimate interests — protecting the website and forms from abuse, and keeping technical server logs (Art. 6(1)(f) GDPR).
Cookies, analytics, and advertising
Cookies are small files that the website stores in your browser. We use the following:
Necessary cookies
wp-wpml_current_language— remembers the website language. Stored for one day._lscache_vary— a technical cookie of the LiteSpeed caching system, which makes pages load faster. The same system may save a flag in your browser’s storage (sessionStorage) that disappears as soon as you close the tab._GRECAPTCHA— set by Google reCAPTCHA to protect the forms from spam and bots. To do this, Google analyzes technical browser data and your actions on the page. Stored for up to six months. Google’s Privacy Policy and Terms of Service apply to reCAPTCHA.
Advertising cookies
_fbp— set by the Meta Pixel to count visits and requests coming from ads on Facebook and Instagram, and to show THEONEBLY ads to people who have already visited the website. Stored for 90 days.- If you are logged in to Facebook or Instagram in this browser, Meta may link your visits to the website with your profile through its own cookies (for example,
fr). How Meta uses this data is described in its Privacy Policy.
We use advertising cookies and the Meta Pixel on the basis of your consent. If we add other analytics or advertising services, we will update this section.
How to opt out
- delete cookies or block them in your browser settings. Without the necessary cookies, the language switcher and forms may not work properly;
- turn on blocking of third-party cookies and tracking in your browser;
- limit personalized ads in the ad settings of your Facebook or Instagram account.
Who we share data with
Access to your data is limited to our employees who need it for their work and to the services the website relies on:
- hosting provider — the website runs on its servers, and the technical logs are stored there;
- email and Telegram: requests from the forms reach us by email and in our work Telegram chat;
- Google (Google Ireland Limited, Google LLC) — reCAPTCHA to protect the forms;
- Meta (Meta Platforms Ireland Limited, Meta Platforms, Inc.) — the advertising pixel;
- WhatsApp and Telegram — if you message us there; they process the correspondence under their own rules;
- public CDNs jsDelivr and cdnjs — your browser loads libraries for the website’s animations and galleries from them, so they receive technical request data: your IP address and browser information;
- public authorities — only in the cases and in the manner provided for by law.
Some of these services process data outside Ukraine, including in the EU and the US. Such transfers are made in accordance with Article 29 of the Law of Ukraine “On Personal Data Protection” and, for data from the EU, with the safeguards provided for by the GDPR (for example, the European Commission’s standard contractual clauses).
How long we keep data
- Requests and correspondence that did not lead to us working together — 12 months from the last contact.
- Client data — for as long as the contract is in effect and for 3 years after it ends (the general limitation period).
- Accounting documents — for as long as the law requires.
- Technical server logs — for the retention period set by the hosting provider.
- Cookies — the periods are listed in the “Cookies, analytics, and advertising” section.
When the period expires, we delete the data or anonymize it so that you can no longer be identified from it. We do so earlier if you ask us to and the law does not require us to keep it.
Your rights
Under Article 8 of the Law of Ukraine “On Personal Data Protection” and, for visitors from the EU, Articles 15–22 of the GDPR, you have the right to:
- know what data about you we hold, where it came from, why we process it, and who we share it with;
- receive a copy of your data, including in a machine-readable format;
- require us to correct inaccurate data or complete incomplete data;
- require us to delete your data or restrict its processing;
- object to processing, including for advertising;
- withdraw your consent at any time — this does not affect the lawfulness of processing before the withdrawal;
- file a complaint with the Ukrainian Parliament Commissioner for Human Rights (ombudsman.gov.ua) or the data protection authority in your EU country, or go to court.
How to exercise your rights
Call us at +380 63 676 71 71 or send your request through the contact form on the website, using the same phone number or email address you provided in your request — this way we can make sure that the data request was sent by you. Within 10 business days, we will tell you whether it will be fulfilled, and we will fulfill it within 30 calendar days at the latest. This is free of charge.
How we protect data
The website runs over a secure HTTPS connection. Only those who need it for their work have access to requests and to the website’s admin area.
No method of transmitting data over the internet is completely secure. If a data breach occurs that may put your rights at risk, we will take measures to mitigate its consequences and will notify you.
Children
The website and our services are intended for businesses. We do not knowingly collect data from anyone under the age of 16. If you believe that a child has sent us their data, write to us — we will delete it.
Changes to this policy
We update this policy when there are changes to the website, the services we use, or the law. The new version takes effect when it is published on this page; its date is shown at the top. We will also announce material changes on the website.
Contact us
Ask questions about your personal data by phone at +380 63 676 71 71 or through the contact form on the website.
The rules for using the website are set out in the Terms of Use.