Privacy Policy

1. Who processes your data

The data controller is BF Zavod LLC (hereinafter — "the Company", "we"): EDRPOU code — to be confirmed, registered address: 08343, Ukraine, Kyiv region, Martusivka village, Promyslova St., 27.

For questions about the processing of personal data: sales@rezult-steel.com.

2. What data we collect

Form submissions: name, phone, email, company, message, IP address, submission time. Legal basis — Art. 11 of the Law of Ukraine "On Personal Data Protection", your consent; for visitors from the EU — Art. 6(1)(b) GDPR (steps taken prior to entering into a contract).

Technical data: device type, browser, operating system, anonymized IP address — only with your consent to cookies.

Correspondence content: if you send us an email or write via a messenger.

3. Cookies and trackers

We use three categories of cookies:

• Necessary — always active, support the contact form and the language switcher.
• Analytics (Google Analytics 4) — anonymized visit statistics. Activated only after your consent.
• Marketing (Meta Pixel) — advertising-campaign attribution. Activated only after your consent.

Vercel Web Analytics works without cookies (privacy-friendly) and does not track individuals.

You can withdraw consent at any time: clear the site's cookies or use the "Reject" button in the banner.

4. Why we use the data

To reply to your request, prepare a commercial offer, enter into and perform a contract, keep CRM records, run marketing analytics (after cookie consent), and protect the rights and legitimate interests of the Company.

5. Whom we share data with

We do not sell your data. We engage the following processors:

• Resend Inc. (USA) — email delivery.
• Telegram Messenger Inc. — instant messaging to managers.
• Vercel Inc. (USA) — hosting and Web Analytics.
• Google Ireland Ltd. — Google Analytics 4 (after your consent).
• Meta Platforms Ireland Ltd. — Meta Pixel (after your consent).

Data transfers to third countries (USA) take place on the basis of Standard Contractual Clauses (SCCs) and/or the Data Privacy Framework.

6. How long we keep the data

Form submissions — up to 3 years from the last contact. Correspondence within an active contract — up to 7 years (accounting requirements).

GA4 analytics — 14 months (Google's standard retention period).

Meta Pixel — 180 days for events, 2 years for audiences.

7. Your rights

Under the Law of Ukraine "On Personal Data Protection" and the GDPR (for EU residents) you have the right to:

• Access your data and receive a copy.
• Correct inaccurate data.
• Erase data ("right to be forgotten").
• Restrict processing or object to it.
• Port data to another company.
• Withdraw cookie consent at any time.
• Lodge a complaint with the Ukrainian Parliament Commissioner for Human Rights (Ukraine) or with the supervisory authority at your place of residence (EU).

To exercise your rights, write to sales@rezult-steel.com. We reply within 30 days.

8. How we protect the data

HTTPS on all pages, STS header, restricted access to the lead mailbox, two-factor authentication for administrators, periodic password rotation, encryption in transit (TLS 1.2+).

9. Changes to this policy

We may update this policy. The date of the last update is shown in the header. We will announce material changes with a site banner for 30 days before they take effect.