1. Who we are
Steppe Engineering is a software development company based in Odesa, Ukraine. We are the data controller for personal data collected through this website. Contact details are at the end of this document.
2. What data we collect
Contact form: name, email address, phone number, company name (optional) and the message you write. Technical data: our hosting provider processes IP addresses, browser type and request logs to deliver the site securely and detect abuse. We do not collect payment data and we do not sell personal data.
3. Why we process it and on what basis
We use contact form data to respond to your enquiry and, if you ask us to, to prepare a proposal (legitimate interest and pre-contractual steps). Technical logs are processed to keep the site available and secure (legitimate interest). We do not use your data for automated decision-making or profiling.
4. Cookies and analytics
The website does not set marketing cookies. Only technically necessary storage is used, for example to remember your language preference. If we introduce privacy-friendly analytics or other tools in the future, this policy will be updated before they are enabled.
5. Who we share data with
Data is processed by service providers acting on our instructions: our hosting and content delivery provider (Vercel Inc.), our email provider and the service that routes contact form submissions to our team. Providers may be located outside Ukraine or the EU; where required we rely on standard contractual clauses or equivalent safeguards.
6. How long we keep data
Contact enquiries are kept for up to 24 months after our last exchange, or longer if they become part of a contract. Technical logs are retained by the hosting provider for a short period defined by their policies.
7. Your rights
Depending on your location you may have the right to access, correct, delete or restrict the processing of your personal data, to object to processing, to data portability and to lodge a complaint with a supervisory authority. To exercise these rights, email us; we respond within 30 days.
8. Security
All traffic to the website is encrypted with TLS. Access to enquiry data is limited to team members who need it to respond. We apply the same engineering practices we recommend to clients: least privilege, secret management and regular dependency updates.
9. Changes to this policy
We may update this policy when our practices or legal requirements change. The date at the top of the page shows the latest revision.
Questions about this document? Write to hello@steppe.engineering.