Privacy Policy

1. Who we are

Nomax is a web studio that builds websites and web platforms. The controller of your personal data is Ihor Olehovych Fomenko, sole proprietor (FOP), Odesa, Ukraine.

For any privacy questions, contact us at nomax.agency@gmail.com or +44 7472 003-070.

Our representative in the UK under Article 27 of the UK GDPR: Denys Vynohradov, United Kingdom.

2. What data we collect

• Enquiry forms: your name, phone number, email address, the type of project, approximate budget, project description and the page you sent the form from.
• Analytics: if you accept analytics cookies, Google Analytics 4 collects information about your visit — pages viewed, device and browser type, approximate location and how you arrived on the site. We do not use it to identify you personally.
• Technical data: our server keeps standard logs (IP address, browser, time of request) to keep the website secure, and we use your IP address temporarily to protect our forms from spam.

3. Why we use it and our lawful basis

• To reply to your enquiry and prepare a proposal — steps taken at your request before entering into a contract (Article 6(1)(b) UK GDPR).
• Website analytics — your consent (Article 6(1)(a) UK GDPR). You can withdraw it at any time via “Cookie settings” at the bottom of the site.
• Website security and spam protection — our legitimate interests (Article 6(1)(f) UK GDPR).

We do not sell your data and we do not make automated decisions about you.

4. Cookies

• csrftoken — strictly necessary; protects forms against cross-site request forgery; kept for up to 1 year.
• cookie_consent — remembers your choice in the cookie banner; stored in your browser’s local storage until you clear it.
• _ga, _ga_* — Google Analytics; set only after you click “Accept” and kept for up to 2 years.

5. Who we share data with

We use trusted providers who process data on our behalf:

• Amazon Web Services — website hosting and file storage; servers located in London, UK.
• Google — Google Analytics (only with your consent) and the email service that receives enquiries.

6. International transfers

Our team works from the UK and Ukraine. When you send us an enquiry, you provide your data directly to us, and our team members handle it to prepare a reply. Google Analytics data may be processed in the United States under Google’s standard contractual clauses.

7. How long we keep data

• Enquiries — 3 years after our last contact with you. If we enter into a contract, we keep the data as long as the law requires for contract records.
• Google Analytics data — up to 14 months.
• Server logs — for the limited time needed to keep the website secure.

8. Your rights

You have the right to access your personal data, receive a copy of it, have it corrected or erased, restrict or object to its processing, and withdraw your consent. To exercise these rights, email us at nomax.agency@gmail.com — we will reply within one month.

If you believe your rights have been breached, you can complain to the Information Commissioner’s Office (ico.org.uk).

9. Changes to this policy

We may update this policy from time to time. The current version is always published on this page, with the date of the last update shown at the top.