Legal
Last updated
Privacy Policy
This policy explains how personal data is handled when you visit this website, contact us, buy consulting services, use Keepsake, make a one-time contribution, or start a monthly supporter subscription.
Controller
The data controller is Dmytro Yankovskyi, trading as UngaBunga, a sole proprietor registered in the Czech Republic under IČO 29984734, with a registered address at Vysočanská 237/101, 190 00, Praha 9 - Střížkov, Czech Republic.
Privacy questions and requests can be sent to dizzzmas.dev@gmail.com.
Data we collect
We collect only what we need to run the business:
- Contact and project data. Your name, email address, company, and any information you choose to send when you enquire about consulting or product support.
- Payment and subscription data. Your name, email, billing country, contribution or subscription amount, subscription status and billing interval, Stripe customer ID, payment status, and payment metadata. Card payments are processed by Stripe; we do not receive or store full card numbers.
- Technical data. Standard server and hosting logs, such as IP address, browser type, requested pages, and timestamps, generated when you visit the site.
- Keepsake usage data. If Keepsake collects usage or diagnostic data, this will be described in the product itself before it is enabled.
We do not use advertising trackers, third-party analytics, or non-essential cookies on this website.
Why we use personal data
We rely on the following legal bases under the GDPR:
- Contract. To respond to your enquiry, provide consulting services, operate your Keepsake access, process one-time contributions and supporter subscriptions, and provide support.
- Legitimate interests. To keep the website and Keepsake secure, prevent abuse, fix bugs, and improve the services. We balance these interests against your rights.
- Legal obligation. To keep accounting and tax records, handle complaints, and comply with lawful requests.
- Consent. Where we ask for consent — for example, for optional product diagnostics or marketing emails — you can withdraw it at any time.
Processors and recipients
We share personal data only with service providers that help us operate the business, and only to the extent necessary. These currently include:
- Stripe for payment processing and fraud prevention;
- our hosting and infrastructure providers for serving the website and Keepsake;
- our email provider for correspondence; and
- professional advisers, such as accountants or lawyers, where required.
These providers process data on our behalf under appropriate contractual safeguards. Some may process data outside the European Economic Area. Where that happens, we rely on an adequacy decision or standard contractual clauses approved by the European Commission.
We may also disclose data if required by law, to protect our rights, or in connection with a reorganisation of the business.
Retention
We keep personal data only for as long as necessary for the purpose it was collected:
- enquiry and project correspondence: [RETENTION PERIOD] after the relationship ends;
- payment, subscription, and tax records: for the period required by Czech accounting and tax law; and
- server logs: for a short operational period, unless needed to investigate a security incident.
When data is no longer needed, we delete it or anonymise it.
Your rights
Subject to applicable law, you have the right to:
- access your personal data and receive a copy;
- correct inaccurate or incomplete data;
- request erasure of data we no longer need to keep;
- restrict or object to certain processing;
- receive your data in a portable format; and
- withdraw consent where processing is based on consent.
To exercise a right, email dizzzmas.dev@gmail.com. We may need to verify your identity before acting on a request.
If you believe your data has been handled unlawfully, you can complain to the Czech Office for Personal Data Protection (Úřad pro ochranu osobních údajů, UOOU) or the supervisory authority in your country of residence.
Cookies
This website uses no analytics, advertising, or tracking cookies. The hosting provider may set strictly necessary technical cookies or process request logs to deliver the site securely. If that changes, this policy and any required consent mechanism will be updated before non-essential cookies are used.
Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections, access controls, and reputable payment and hosting providers. No system is completely secure, but we work to limit the data we hold and the number of people who can access it.
Changes
We may update this policy to reflect changes in the services or the law. The current version applies from the date shown at the top of this page. Material changes will be communicated where appropriate.
Contact
For any privacy question or request, email dizzzmas.dev@gmail.com.