MBVYN

Privacy Policy

Effective date: 6 November 2026

This Privacy Policy explains how personal data is collected, used, and protected when you visit this website (mbvyn.com) or interact with the services offered through it. We aim to comply with the EU General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection".

1. Who is responsible for your data

The data controller is Mykola-Bohdan Vynnytskyi, a private entrepreneur registered in Ukraine, operating under the brand MBVYN. You can reach the controller at m.bvynnytskyi@gmail.com.

2. What data we collect

We only collect personal data that you provide directly:

  • Email address — when you sign up for product notifications via the "Get notified" form on the Products page.
  • Email address for the newsletter — when you subscribe through the Substack form on the Subscribe page. The form is provided by Substack, and your address is stored there.
  • Booking details — your name, email, time zone, and any answers to booking questions when you schedule a meeting through the Cal.com booking links.
  • Direct correspondence — any information you choose to share when you contact us by email or social media.

We also measure how the site is used, without cookies and without identifying you:

  • Page views — counted with Cloudflare Web Analytics by page, referring website, country, and browser or device type. It sets no cookies, uses no local storage, and does not follow you across other websites.
  • Clicks on our redirect links (mbvyn.com/go/…) — counted on our own server by link, date, referring source, campaign tag, and whether the click came from an automated bot or link preview. No IP address, device identifier, or cookie is stored with these counts.

We do not use advertising trackers or non-essential cookies.

3. Why we use your data and on what legal basis

  • To send you the newsletter or product release notifications after you subscribe — based on your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
  • To organize meetings you book (mentorship, consulting, or general calls) — based on the performance of a contract or pre-contractual steps at your request (GDPR Art. 6(1)(b)).
  • To respond to direct messages you send — based on our legitimate interest in answering your inquiry (GDPR Art. 6(1)(f)).
  • To understand which pages and links are useful through the aggregate counts described in section 2 — based on our legitimate interest in maintaining and improving the website (GDPR Art. 6(1)(f)). These counts do not identify you.

4. Who processes your data on our behalf

We rely on the following third-party processors. Each operates under their own privacy terms and security measures:

  • Kit (operated by ConvertKit, LLC, USA) — email subscription management for product notifications. See kit.com/privacy.
  • Substack (Substack, Inc., USA) — newsletter subscriptions and delivery, through the form on the Subscribe page. See substack.com/privacy.
  • Cal.com (Cal.com, Inc., USA) — meeting scheduling. See cal.com/privacy.
  • Netlify (Netlify, Inc., USA) — website hosting. Netlify may process basic request data (e.g. IP address) for security and infrastructure purposes, and stores the anonymous link-click counts described in section 2. See netlify.com/privacy.
  • Cloudflare (Cloudflare, Inc., USA) — cookieless website analytics (Cloudflare Web Analytics). See cloudflare.com/privacypolicy.
  • Google Workspace (Google LLC, USA) — email correspondence and calendar (Google Calendar / Google Meet).

We do not sell your personal data to anyone.

5. International data transfers

Some of our processors are based outside Ukraine and the EU/EEA (mainly the United States). When personal data is transferred there, the relevant providers rely on safeguards such as Standard Contractual Clauses approved by the European Commission and, where applicable, the EU–US Data Privacy Framework.

6. How long we keep your data

  • Newsletter / product-notification subscribers — until you unsubscribe (each marketing email includes an unsubscribe link).
  • Booking records — for as long as needed to deliver the meeting and for up to 3 years afterwards for record-keeping purposes, unless you request earlier deletion.
  • Direct correspondence — for as long as needed to handle your request and a reasonable period afterwards.
  • Page-view and link-click counts — these are aggregate and do not identify you; we keep them only as long as they are useful for improving the site.

7. Your rights

Under GDPR and Ukrainian law you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of your data ("right to be forgotten");
  • request restriction of processing or object to processing;
  • request a copy of your data in a portable format;
  • withdraw consent at any time, where processing is based on consent;
  • lodge a complaint with a supervisory authority — in Ukraine, the Verkhovna Rada Commissioner for Human Rights; in the EU, the data protection authority of your country of residence.

To exercise any of these rights, email m.bvynnytskyi@gmail.com. We will respond within 30 days.

8. Cookies and tracking

This website does not set cookies for analytics or advertising, and does not use advertising trackers. Page views are measured with Cloudflare Web Analytics, which uses no cookies or local storage, and clicks on our /go/ redirect links are counted on our own server as anonymous totals. Because neither involves cookies or identifies you, no consent banner is shown.

The newsletter form on the Subscribe page is provided by Substack. It loads only when you choose to open it, and from then on it is subject to Substack's own privacy and cookie policy. If any of this changes, this policy will be updated and, where required, you will be asked for consent.

9. Children

This website and the services offered through it are not directed to children under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top will reflect the latest revision. Material changes will be communicated through the website or by email where appropriate.

11. Contact

Questions about this Privacy Policy or how your data is handled? Email m.bvynnytskyi@gmail.com.