Privacy Policy

Who controls your data

The data controller is sole proprietor Rostyslav Romanovych Zhuravchak, trading as West Estate Lviv, registered under Ukrainian law under record number 2004150010004114755. The registered address is 21/37 Oleny Telihy Street, Lviv 79017, Ukraine. Contact: hello@westestate.com.ua.

We process personal data in accordance with applicable Ukrainian data-protection law and, where it applies, the General Data Protection Regulation of the European Union (GDPR).

Information we collect

When you submit an enquiry or consultation request, we collect the information you provide, which may include your name, email address, telephone number, service or property of interest, preferred consultation date, preferred contact channel and any optional message.

If you contact us by email, telephone, WhatsApp, Telegram or another channel, we keep the correspondence and the information you choose to share. Please obtain the relevant person's permission before sending us personal data about someone else.

We also receive limited technical information, such as IP address, browser and device type, operating system, page path, referral source and usage events. We use this information for security, spam prevention, service routing and website analytics in line with your cookie choices.

Payments are processed by WayForPay. West Estate Lviv receives payment status and transaction details needed to match a payment to a consultation request, but does not receive or store your full payment-card details.

Why we use personal data

We use personal data to answer enquiries, assess whether we can assist, arrange and deliver consultations and agreed services, manage property enquiries, issue payment confirmations, maintain business and accounting records, protect the website, prevent fraud and comply with legal obligations.

We may use aggregated or de-identified information to understand how the website is used and improve its content and performance. We send marketing messages only where we have a lawful basis to do so, and you may opt out at any time.

Legal bases

Where the GDPR applies, our legal bases may include taking steps at your request before entering into a contract, performing a contract, complying with a legal obligation, pursuing legitimate interests such as responding to enquiries and maintaining website security, and your consent where consent is required. You may withdraw consent at any time without affecting processing that took place before withdrawal.

Who receives personal data

We may share relevant information with authorised staff, professional advisers, notaries, translators, property owners or agents, accountants and other specialist partners when this is necessary to assess or deliver the service you request. We disclose only what is reasonably required for the agreed work.

We may also disclose information where required by law, to establish or defend legal rights, to prevent fraud, or in connection with a lawful transfer of the business or its assets. We do not sell personal data and do not provide it to third parties for their independent direct marketing without your consent.

Website and payment providers

The website uses Vercel for hosting and aggregated analytics, Payload CMS with Supabase infrastructure for content and enquiry storage, Cloudflare Turnstile for form security when enabled, Resend for enquiry notifications when configured, Google Analytics 4 only after analytics consent, and WayForPay for payment processing.

These providers may process data in other countries. Where applicable, transfers are protected through an adequacy decision, contractual safeguards or another lawful transfer mechanism required by data-protection law.

How long we keep information

We keep personal data only for as long as needed for the purpose for which it was collected and to meet legal, accounting or dispute-resolution obligations. General enquiry records may be retained for up to five years from the last relevant contact unless a shorter period is appropriate or the law requires a longer period. Payment and engagement records may be retained for the period required by Ukrainian law.

Security

We use reasonable technical and organisational measures to protect personal data against loss, unauthorised access, misuse or alteration. Payment pages use encrypted connections and are operated by the payment provider. No internet transmission or storage system can be guaranteed to be completely secure.

Your rights

Depending on the law that applies to you, you may ask for access to your personal data, correction, deletion, restriction, portability or information about its use. You may object to certain processing, withdraw consent and lodge a complaint with the competent supervisory authority.

To exercise a right or ask a privacy question, email hello@westestate.com.ua. We may need to verify your identity before acting on a request and will respond within the period required by applicable law.

Changes to this policy

We may update this policy when our services, providers or legal obligations change. The current version and its update date will remain available on this page.