Privacy Policy

Last updated: 30 October 2026

Last updated: 30 October 2026

1. Introduction

This Privacy Policy explains how SoftArch Consulting (hereinafter “we”, “Magmi” or “the Company”) collects, uses, stores, shares and protects your personal information when you use the website magmi.org, our products, services and support.

We operate in compliance with GDPR (EU Regulation 2016/679), CCPA (California), and Ukraine’s Law “On Personal Data Protection” No. 2297-VI.

2. What data we collect

2.1 Data you provide voluntarily

• Name, email, phone number
• Company name and position
• Messages you send through forms
• Information shared under contract (staging credentials, etc.)

2.2 Data collected automatically

• IP address (anonymised to /24)
• User-Agent, browser type, device, resolution
• Pages visited and time on page
• Server logs (30 days)

3. How we use the data

1. To provide services and perform contracts
2. To respond to enquiries and provide support
3. To send transactional emails
4. For marketing — only with explicit opt-in
5. For site quality analytics and UX improvement
6. To comply with legal requirements

4. Legal bases (GDPR Art. 6)

• Performance of a contract — support, service delivery
• Consent — marketing emails, non-essential cookies
• Legitimate interest — security, analytics, fraud prevention
• Legal obligation — accounting and tax records

5. Sharing with third parties

We do not sell personal data. Sharing is possible only with data processors (Hetzner, Postmark, Plausible), when required by law, or in an M&A event with prior notice.

6. Cookies

See our separate Cookies Policy. In short: essential cookies are always set; analytics (Plausible) only with your consent; we do not use marketing cookies.

7. Retention periods

• Contact form submissions: 24 months after last contact
• Accounting records: 7 years
• Server logs: 30 days
• Newsletter: until unsubscribe

8. Your rights (GDPR, CCPA)

Right of access, rectification, erasure, restriction, portability, objection, and the right to lodge a complaint. Email [email protected] — we respond within 30 days.

9. Security

• HTTPS with TLS 1.3
• Passwords stored with bcrypt cost 12
• Personal data encrypted at rest (AES-256)
• Quarterly penetration tests
• Mandatory 2FA for all staff
• Breach notifications within 72 hours

10. Children

Services are intended for 18+. We do not knowingly collect data from under-16s.

11. International transfers

Primary processing in the EU (Hetzner, Nuremberg). US transfers use EU-US Data Privacy Framework. SCCs are in place with all non-EU partners.

12. Policy changes

We may update this policy. Significant changes are announced at least 30 days in advance by email or site banner.

13. Contact

SoftArch Consulting, 7 Tekhnichna St., Kyiv 03056, Ukraine. Email: [email protected]. Phone: +380 44 555 01 23.