Legal

Privacy Policy

Effective October 6, 2026

This Privacy Policy explains how Alexander Cheberko (“I,” “me,” “my”) collects, uses, shares, and protects personal data when you visit cheberko.com(the “Site”) or engage me for services. It complies with the EU General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA / CPRA).

1. Who I am (Data Controller)

Alexander Cheberko
Burgas, Bulgaria (EU)
Email: alex@cheberko.com
Telegram: @Alex_flowgrammer

For all privacy-related questions, requests, or complaints, contact me at the email above. I respond within 30 days as required by GDPR Article 12.

2. What data I collect

2.1 Information you give me

  • Contact form submissions: name, email, project type, message content.
  • Direct communication: information you share via email, Telegram, or video calls.
  • Project files: any code, content, credentials, or documents you share for the work I do for you.

2.2 Information collected automatically

  • Technical data: IP address, browser type, device info, operating system, referring URL, pages visited, time spent.
  • Cookies: see the Cookies Policy for details. You can opt out of non-essential cookies via the consent banner.

3. Legal basis (GDPR Article 6)

  • Contract performance: processing client data to deliver services.
  • Legitimate interest: Site analytics, fraud prevention, securing the Site.
  • Consent: non-essential cookies in the EEA, the UK, Switzerland and Quebec, marketing cookies everywhere, marketing emails (where applicable). Outside those regions Google Analytics cookies rely on legitimate interest (see section 5).
  • Legal obligation: tax records, anti-money laundering compliance.

4. How I use your data

  • Respond to your inquiries and deliver services.
  • Send invoices and process payments.
  • Improve the Site through aggregate analytics.
  • Comply with legal obligations (taxes, accounting).
  • Detect and prevent fraud or abuse.

I do not sell your data, share it with advertising networks, or use it to train AI models.

5. Who I share data with

I share personal data only with the following categories of recipients, and only as needed:

  • Hosting: Vercel Inc. (USA, Standard Contractual Clauses).
  • Email: Google Workspace (USA, SCCs).
  • Analytics: Google Analytics 4 (Google LLC, USA, SCCs): in the EEA, the UK, Switzerland and Quebec with consent only; elsewhere it runs by default with _ga cookies, Google signals and ad personalization off, on the basis of legitimate interest, and stops after "Accept necessary only", if you turn Analytics off in Cookie settings, or if your browser sends Global Privacy Control. Microsoft Clarity (Microsoft Corporation, USA, SCCs): in the EEA, the UK, Switzerland and Quebec with consent only; elsewhere it runs without cookies and with form fields masked, also after "Accept necessary only", and stops if you turn it off in Cookie settings or your browser sends Global Privacy Control.
  • Payment processors: Wise, Stripe, or PayPal, depending on engagement.
  • Accountants and tax authorities: where legally required.

6. International transfers

Some recipients are located outside the EU/EEA. I rely on Standard Contractual Clauses (SCCs) and, where available, adequacy decisions for these transfers.

7. How long I keep your data

  • Contact-form submissions: 12 months after last interaction.
  • Client project data: 6 years (tax obligation).
  • Analytics data: 26 months (aggregated and anonymized).
  • Marketing consent: until withdrawn.

8. Your rights (GDPR)

  • Right to access the personal data I hold about you.
  • Right to rectification of inaccurate or incomplete data.
  • Right to erasure(“right to be forgotten”).
  • Right to restrict processing.
  • Right to data portability (receive your data in a machine-readable format).
  • Right to object to processing based on legitimate interest.
  • Right to withdraw consent at any time.
  • Right to lodge a complaint with your local Data Protection Authority.

To exercise any right, email alex@cheberko.com. I do not charge for these requests.

9. California residents (CCPA / CPRA)

If you are a California resident, you have additional rights:

  • Right to know what personal information is collected.
  • Right to delete personal information.
  • Right to correct inaccurate personal information.
  • Right to opt out of the sale or sharing of personal information. I do not sell or share personal information for cross-context behavioral advertising.
  • Right to non-discrimination for exercising these rights.

10. Children

The Site is not directed to children under 16. I do not knowingly collect data from anyone under 16. If you believe I have, email me and I will delete it immediately.

11. Security

I implement reasonable technical and organizational measures (HTTPS, encrypted backups, access controls, password managers, MFA). However, no system is 100% secure. If a breach affects you, I will notify you without undue delay as required by GDPR Article 34.

12. Changes to this policy

I may update this Privacy Policy. Material changes will be announced on the Site and, where required, by email. The “Effective” date at the top reflects the latest version.

13. Questions

Reach out anytime at alex@cheberko.com or via Telegram @Alex_flowgrammer.