Privacy notice

1. Who we are

Aerium Labs LLC (“we”, “us”) is a company registered in Ukraine. We are the controller of the personal data processed through this website.

For anything about your data, write to privacy@aeriumlabs.com.

2. What we collect

When you use the contact form

• your name, so we can address you;
• your work email address, so we can reply;
• your company (optional);
• what you would like built (optional), so our reply is useful.

With each submission our server also records the time, a one-way hash of your IP address (to stop abuse and repeated submissions) and the browser identifier your browser sends. We do not store your IP address itself.

When you browse

Your cookie choice is stored in your own browser. Analytics cookies are set only if you allow them (see section 7). Fonts, scripts and images load from this website’s own domain, so browsing the site sends nothing to third parties until you consent to analytics.

3. Why we use it, and the legal basis

• To answer your enquiry and discuss a possible project: steps taken at your request before entering into a contract (GDPR Art. 6(1)(b)).
• To keep the form free of spam and abuse: our legitimate interest in running the site safely (GDPR Art. 6(1)(f)).
• To understand how the site is used, only with your consent (GDPR Art. 6(1)(a)). You can withdraw consent at any time.

We process personal data in line with the EU General Data Protection Regulation where it applies to us, and with the Law of Ukraine “On Personal Data Protection”.

4. Who processes it for us

We do not sell personal data or share it with advertisers. We use these processors:

• Amazon Web Services hosts the site, stores form submissions and sends our emails, from the EU (Ireland) region.
• Google provides Google Analytics 4, only if you accept analytics cookies.
• Our email provider receives a copy of each enquiry in our inbox: [REPLACE BEFORE LAUNCH — email provider and region].

5. Transfers outside the EEA

We are based in Ukraine, outside the European Economic Area, so your enquiry reaches people outside the EEA when we read it. Google may process analytics data outside the EEA. Where EU law requires a safeguard for such a transfer, we rely on the European Commission’s Standard Contractual Clauses.

6. How long we keep it

• Form submissions are deleted automatically 24 months after you send them.
• Server logs are deleted after 30 days.
• Email correspondence is kept while the conversation, and any contract that follows, needs it, plus any period the law requires for business records.

You can ask us to delete your data sooner by writing to privacy@aeriumlabs.com. We act on verified requests within 30 days.

7. Cookies

• Necessary. One entry in your browser’s local storage remembers your cookie choice. It needs no consent.
• Analytics, with consent only. Google Analytics 4 cookies (_ga, _ga_*) for aggregate visitor statistics. Until you accept, Google Consent Mode stays in its “denied” state and the analytics script is not loaded at all.

You can change your choice at any time in cookie settings. Withdrawing consent stops further collection. To delete analytics data already collected, write to privacy@aeriumlabs.com.

8. Your rights

You have the right to:

• access the personal data we hold about you;
• have it corrected or completed;
• have it erased;
• restrict or object to our processing of it;
• receive it in a portable format;
• withdraw consent, without affecting processing that happened before;
• complain to a data protection authority: in the EU, the authority in your country; in Ukraine, the Ukrainian Parliament Commissioner for Human Rights.

Write to privacy@aeriumlabs.com to use any of these rights. We may ask you to confirm your identity first.

9. Security

Traffic to this site is encrypted (TLS 1.2 or later). Form submissions are encrypted at rest, IP addresses are stored only as one-way hashes, and access to submissions is limited to the people who answer them.

10. Changes

When this notice changes, the date at the top changes with it. If a change affects how we use data you have already given us, we will tell you before it takes effect.