Privacy Policy

Last updated: 28 April 2026

This Privacy Policy applies to STAGEM (operating as Vladyslav Kozak, sole proprietor (PE) under Ukrainian law, IPN 3451614577, hereinafter "STAGEM," "we," "us," or "our"). It explains how we collect, use, store, and protect your personal information when you engage with our services, communicate with our team, or visit our website at stagem.agency.

By using our services or website, you agree to the practices described in this Privacy Policy. If you do not agree with any part of this policy, please do not use our website or services.

1. Who We Are

STAGEM is a Magento development agency operating as a registered sole proprietor under Ukrainian law. We work with eCommerce brands across the U.S., Canada, the European Union, and other regions.

For data protection inquiries, you can contact us at vk@stagem.agency or +38 (068) 015 74 07.

2. Information We Collect

2.1 Information You Provide Directly

When you contact us, fill out a form on our website, or work with us as a client, we may collect:

• Contact information — name, email address, phone number

• Company details — company name, industry, website

• Project information — current platform, project scope, technical requirements, goals, timeline

• Communication content — messages you send via email, contact form, Telegram, WhatsApp, or LinkedIn

• Billing information — for clients, we collect details necessary for invoicing (typically through separate invoicing services)

2.2 Information We Collect Automatically

When you visit our website, we automatically collect certain technical data:

• Browser type and version

• Device type, operating system, screen resolution

• IP address and approximate geolocation (city/country level)

• Pages visited, time spent, navigation patterns

• Referral source — how you found our website

This information is collected through cookies, analytics tools, and standard server logs. For details on cookies specifically, please see our Cookie Policy.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To respond to inquiries and communicate about potential or active projects

• To deliver and manage our services for active clients

• To analyze website usage and improve our content and services

• To send relevant updates about our work, blog content, and industry insights (only with your explicit consent)

• To process payments and meet financial record-keeping obligations

• To comply with legal and regulatory requirements

• To protect the security of our website, systems, and infrastructure

• To prevent fraud and unauthorized access

We do not use your information for automated decision-making or profiling that produces legal or significant effects.

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, we process your personal data under the following legal bases:

• Consent — for marketing communications and non-essential cookies

• Contract performance — to deliver services to active clients

• Legitimate interests — to respond to inquiries, improve our services, and protect our infrastructure

• Legal obligation — to meet financial reporting and tax requirements under Ukrainian law

5. Third-Party Services We Use

We use the following third-party services that may process your data on our behalf:

• Google Analytics 4 (Google LLC) — website analytics. Subject to Google's Privacy Policy

• Microsoft Clarity (Microsoft Corporation) — user behavior analytics and session recordings (anonymized). Subject to Microsoft's Privacy Statement

• Framer (Framer B.V.) — website hosting and form processing. Subject to Framer's Privacy Policy

• Telegram (Telegram FZ-LLC) — communication channel, when you choose to contact us via Telegram

• WhatsApp (Meta Platforms, Inc.) — communication channel, when you choose to contact us via WhatsApp

• LinkedIn (LinkedIn Corporation) — communication and outreach platform

We do not sell, rent, or trade your personal information to any third party. We share information only with the services listed above as necessary to provide our services and operate our website.

6. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence, including the United States (where Google, Microsoft, and Meta operate) and other regions where our service providers are based.

When we transfer data internationally, we rely on appropriate safeguards, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission

• The data protection certifications maintained by our service providers (such as Google's compliance with EU-U.S. Data Privacy Framework)

7. Data Retention

We retain personal information only as long as necessary for the purposes described in this policy:

• Contact form submissions: up to 12 months from submission, unless we begin a project together

• Project communications and documentation: for the duration of the engagement plus 24 months

• Financial records (invoices, contracts): 7 years, as required by Ukrainian tax law

• Marketing communication subscribers: until you unsubscribe

• Website analytics data: retention periods set by Google Analytics (default 14 months) and Microsoft Clarity (default 13 months)

After the retention period ends, we either delete or anonymize the data.

8. Your Rights

Depending on your location, you have certain rights regarding your personal data.

8.1 If You Are in the European Economic Area or the UK (GDPR)

You have the right to:

• Access the personal data we hold about you

• Correct inaccurate or incomplete data

• Delete your personal data ("right to be forgotten")

• Restrict how we process your data

• Object to processing based on legitimate interests

• Data portability — receive your data in a structured, commonly used format

• Withdraw consent at any time, where processing is based on consent

• Lodge a complaint with your local data protection authority

8.2 If You Are in California (CCPA)

You have the right to:

• Know what personal information we collect about you and how it's used

• Delete personal information we have collected

• Opt out of the sale of personal information (note: we do not sell personal information)

• Non-discrimination for exercising your rights

8.3 How to Exercise Your Rights

To exercise any of these rights, contact us at vk@stagem.agency. We will respond to your request within 30 days. We may need to verify your identity before processing requests.

9. Data Security

We implement reasonable technical and organizational measures to protect your information, including:

• HTTPS/SSL encryption for all data transmitted through our website

• Restricted access to client data within our team

• Secure cloud-based storage with reputable providers

• Regular security reviews of our systems and processes

Despite these measures, no online platform can guarantee 100% security. If a data breach occurs that affects your personal information, we will notify you and the relevant authorities as required by applicable law.

10. Cookies

Our website uses cookies and similar technologies for:

• Essential website functionality

• Analytics (Google Analytics 4, Microsoft Clarity)

• Performance and usability improvements

For a detailed list of cookies and how to manage them, please see our Cookie Policy.

You can manage or disable cookies through your browser settings. Disabling cookies may affect some website functionality.

11. Third-Party Links

Our website may contain links to third-party websites, services, or platforms (such as Clutch, LinkedIn, Instagram). We are not responsible for the privacy practices or content of these third parties. We encourage you to review their privacy policies before interacting with them.

12. Children's Privacy

Our services are not directed to individuals under 16. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us, and we will take steps to delete that information.

13. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, services, or legal requirements. The "Last updated" date at the top of this page indicates when the policy was last revised.

For significant changes, we will provide notice through our website or, where appropriate, via email. We encourage you to review this policy periodically.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information:

• Email: vk@stagem.agency

• Phone: +38 (068) 015 74 07

• LinkedIn: linkedin.com/company/stagem

For the data controller's full registration details (legal address), please contact us — these details are available upon legitimate request.

We aim to respond to all privacy-related inquiries within 5 business days.