Privacy Policy

Effective date: 20 August 2025
Applies to: budtut website(s) and lead forms

1) Who we are (Controller)

This website is operated by LLC BUDTUT, registered in Ukraine, at Mendeleeva St, 12, office, 94/1, 01103, Kyiv (“BUD TUT”, “we”, “us”).
Contact (privacy): [email protected]

2) Scope of this Notice

This Privacy Policy covers visits to our website/landing pages, contact & demo forms, and our use of cookies/SDKs.
If your company signs a separate agreement to use the BUD TUT workforce platform, that agreement (and the associated Data Processing Agreement) governs platform data. On the website, we act as a controller; within enterprise deployments, we generally act as a processor to the employer (controller).

3) Personal data we process

Identity & contact: name, company, role, work email, phone/messenger handle.
Lead & sales info: your form inputs, demo requests, and notes about your hiring needs.
Usage & technical: IP address, device/browser metadata, pages/events, referral source, consent logs.
Marketing preferences: your subscription and consent choices.
We do not intentionally collect special categories of data on the website.

4) Why we process your data (legal bases under GDPR)

Provide and secure the site; respond to your requests (Art. 6(1)(b) contract or Art. 6(1)(f) legitimate interests).
Analytics & product improvement; prevent abuse (Art. 6(1)(f) legitimate interests, balanced against your rights).
Marketing communications (Art. 6(1)(a) consent and applicable e-privacy rules; you can opt out anytime).
Compliance with legal obligations (Art. 6(1)(c)).

5) How we share information

We share personal data only with:

Service providers (hosting, analytics, CRM, consent/cookie platform, communications) under GDPR-compliant processing terms;
Enterprise customers (employers) you choose to contact or engage with;
Authorities, when required by law.
We do not sell personal data.

6) International data transfers

As a non-EU controller registered in Ukraine, we may transfer data outside the EEA. Where we do so, we implement appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs) and risk-based supplementary measures, and we assess provider jurisdictions case-by-case basis.

7) Retention

Website leads & interactions: typically 24 months after your last activity (or sooner upon request).
Consent records: kept as long as necessary to demonstrate compliance.
Processor data (enterprise customers): retained per the customer’s instructions and applicable laws.
After retention periods, we delete or irreversibly anonymise data.

8) Security

We apply technical and organisational measures appropriate to risk, including encryption in transit, access controls, least-privilege, logging/monitoring, and vendor due diligence. No method of transmission or storage is 100% secure, but we work to protect your data.

9) Your rights

Subject to law, you can request: access, rectification, erasure, restriction, portability, objection, and you may withdraw consent at any time without affecting prior processing.
To exercise rights, contact [email protected]. We may verify your identity and will reply within one month (extendable where permitted).

10) Children

This site targets professional/business users. We do not knowingly collect data from children. In Poland, the digital age of consent is 16 for information society services.

11) Supervisory authority & complaints

You can complain to a data protection authority. For Poland: UODO (Urząd Ochrony Danych Osobowych), ul. Stanisława Moniuszki 1A, 00-014 Warsaw, tel. +48 22 531 03 00, uodo.gov.pl. You may also contact your local EEA authority.

12) Changes to this Policy

We may update this Policy to reflect legal or operational changes. We will post the new version with a new Effective date. Material changes will be highlighted where appropriate.

13) Contact

LLC BUDTUT
Mendeleeva St, 12, office, 94/1, 01103, Kyiv, Ukraine
[email protected]