This Privacy Policy explains how Olha Bahaieva ("I," "me," "my") collects, uses, and protects personal information in connection with https://www.olhabahaieva.com (the "Site").
This Policy covers information collected through the Site itself — inquiries, bookings, and analytics. It does not cover the handling of any personal data exchanged during an active client engagement, which is instead addressed in the signed agreement (and, where applicable, a separate Data Processing Addendum) for that engagement.
1. Information I Collect
Information you provide directly
• Contact/inquiry forms: name, email address, and message content.
• Booking a call: name, email, and meeting details submitted via Calendly, handled per Calendly's Privacy Notice.
• Usage data (pages viewed, time on site, general location, device/browser type) via analytics tools such as Google Analytics, if enabled.
• Behavioral analytics via Microsoft Clarity, which may record session activity such as mouse movement, clicks, scrolling, and page interactions to help me understand and improve the Site's usability. Clarity is configured to mask sensitive input fields by default; see Microsoft's Privacy Statement for details on how this data is handled.
• Cookies — see the separate Cookie Policy.
2. How I Use This Information
• To respond to inquiries and schedule calls.
• To understand and improve how the Site is used.
• To comply with legal obligations.
I do not sell personal information for money. However, as described in Section 3 and my Cookie Policy, I use advertising cookies (Pinterest Tag, Meta Pixel) that may constitute "sharing" personal information for cross-context behavioral advertising under some privacy laws, including the CCPA/CPRA.
3. Sharing Your Information
I may share information with service providers who help operate my business (e.g., Calendly, HubSpot, ConvertKit, analytics providers), each of whom only receives what's necessary to perform their function, or where required by law.
I also use advertising technologies from Pinterest and Meta (Facebook/Instagram) on the Site. These providers may receive information about your visit via cookies/pixels for the purpose of advertising measurement and retargeting. See Section 6 for how to opt out.
4. International Visitors
Since the Site has visitors and prospective clients worldwide, information may be processed in a country other than your own, including the United States. Where required for transfers originating in the EEA/UK, I rely on appropriate safeguards such as Standard Contractual Clauses.
5. Data Retention
I retain inquiry and analytics data only as long as reasonably necessary for the purposes above, or as required by law, and delete or anonymize it thereafter.
6. Your Rights
If you are in the EEA, UK, or Switzerland (GDPR): you have the right to access, correct, delete, restrict, or port your data, and to lodge a complaint with your local supervisory authority.
If you are a California resident (CCPA/CPRA): you have the right to know what personal information is collected and to request deletion or correction. I use Pinterest and Meta advertising cookies that constitute "sharing" of personal information for cross-context behavioral advertising under CPRA. I do not sell personal information for money.
Opting out of sharing for advertising: you can opt out at any time by (a) rejecting marketing/advertising cookies via the cookie consent banner on the Site, or (b) enabling a recognized Global Privacy Control (GPC) signal in your browser, which I honor as a valid opt-out request under CCPA/CPRA.
Other jurisdictions: residents of regions with similar comprehensive privacy laws may have comparable rights, which I will honor for validly submitted requests.
To exercise any right, contact me via the contact page on this Site. I will respond within the timeframe required by applicable law and may need to verify your identity first.
7. Client Engagement Data
Where a client engagement involves access to personal data about the client's own end users, employees, or customers (e.g., for user research or analytics review), that data is handled under the terms of our signed engagement agreement, not this Policy. I'm happy to execute a Data Processing Addendum for clients whose compliance requirements call for one — just ask.
8. Data Security
I use reasonable administrative and technical safeguards to protect information collected through the Site. No method of transmission or storage is completely secure, and I cannot guarantee absolute security.
9. Children's Privacy
The Site is directed to businesses and professionals and is not intended for individuals under 18. I do not knowingly collect personal information from children.
10. Changes to This Policy
I may revise this Policy periodically. The "Last Updated" date above reflects the most recent revision.
11. Contact
Questions about these Privacy Policy can be directed to me via the contact page on this Site.