MBVYN

Privacy Policy

Effective date: 25 April 2026

This Privacy Policy explains how personal data is collected, used, and protected when you visit this website (mbvyn.com) or interact with the services offered through it. We aim to comply with the EU General Data Protection Regulation (GDPR) and the Law of Ukraine "On Personal Data Protection".

1. Who is responsible for your data

The data controller is Mykola-Bohdan Vynnytskyi, a private entrepreneur registered in Ukraine, operating under the brand MBVYN. You can reach the controller at m.bvynnytskyi@gmail.com.

2. What data we collect

We only collect personal data that you provide directly:

  • Email address— when you sign up for product notifications via the "Get notified" form on the Products page.
  • Booking details — your name, email, time zone, and any answers to booking questions when you schedule a meeting through the Cal.com booking links.
  • Direct correspondence — any information you choose to share when you contact us by email or social media.

We do not use website analytics, advertising trackers, or non-essential cookies. The site does not collect IP addresses, device identifiers, or browsing behavior on its own.

3. Why we use your data and on what legal basis

  • To send you product release notifications after you subscribe — based on your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time.
  • To organize meetings you book (mentorship, consulting, or general calls) — based on the performance of a contract or pre-contractual steps at your request (GDPR Art. 6(1)(b)).
  • To respond to direct messages you send — based on our legitimate interest in answering your inquiry (GDPR Art. 6(1)(f)).

4. Who processes your data on our behalf

We rely on the following third-party processors. Each operates under their own privacy terms and security measures:

  • Kit (operated by ConvertKit, LLC, USA) — email subscription management for product notifications. See kit.com/privacy.
  • Cal.com (Cal.com, Inc., USA) — meeting scheduling. See cal.com/privacy.
  • Netlify (Netlify, Inc., USA) — website hosting. Netlify may process basic request data (e.g. IP address) for security and infrastructure purposes. See netlify.com/privacy.
  • Google Workspace (Google LLC, USA) — email correspondence and calendar (Google Calendar / Google Meet).

We do not sell your personal data to anyone.

5. International data transfers

Some of our processors are based outside Ukraine and the EU/EEA (mainly the United States). When personal data is transferred there, the relevant providers rely on safeguards such as Standard Contractual Clauses approved by the European Commission and, where applicable, the EU–US Data Privacy Framework.

6. How long we keep your data

  • Newsletter / product-notification subscribers — until you unsubscribe (each marketing email includes an unsubscribe link).
  • Booking records — for as long as needed to deliver the meeting and for up to 3 years afterwards for record-keeping purposes, unless you request earlier deletion.
  • Direct correspondence — for as long as needed to handle your request and a reasonable period afterwards.

7. Your rights

Under GDPR and Ukrainian law you have the right to:

  • access the personal data we hold about you;
  • request correction of inaccurate data;
  • request deletion of your data ("right to be forgotten");
  • request restriction of processing or object to processing;
  • request a copy of your data in a portable format;
  • withdraw consent at any time, where processing is based on consent;
  • lodge a complaint with a supervisory authority — in Ukraine, the Verkhovna Rada Commissioner for Human Rights; in the EU, the data protection authority of your country of residence.

To exercise any of these rights, email m.bvynnytskyi@gmail.com. We will respond within 30 days.

8. Cookies and tracking

This website does not set non-essential cookies and does not use analytics or advertising trackers at this time. If this changes in the future, this policy will be updated and, where required, you will be asked for consent.

9. Children

This website and the services offered through it are not directed to children under 16. We do not knowingly collect data from children.

10. Changes to this policy

We may update this Privacy Policy from time to time. The "Effective date" at the top will reflect the latest revision. Material changes will be communicated through the website or by email where appropriate.

11. Contact

Questions about this Privacy Policy or how your data is handled? Email m.bvynnytskyi@gmail.com.