Privacy Policy
Last updated: August 19, 2026
Standard Compliance Edition (GDPR, CPRA, Law of Ukraine)
General Provisions & Data Controller
This Privacy Policy explains how VP Production (“Company”, “We”, “Us”, “Our”) collects, processes, and protects personal data when you visit our website https://vp-production.com (“Website”) or contact us regarding our audio production services (music composing, sound design, audio branding, and voice casting).
Data Controller: Individual Entrepreneur (PPE) Plotnikov Vladyslav Volodymyrovych
Registration Date: August 1, 2017 | USR Record Number: 25560000000135619
Location: Odesa, Ukraine
Contact Email: connect@vp-production.com
We process personal data in strict compliance with the Law of Ukraine “On Personal Data Protection”, Regulation (EU) 2016/679 of the European Parliament and of the Council (General Data Protection Regulation — GDPR), and applicable United States privacy regulations (including CCPA/CPRA).
What Data We Process, Legal Bases, and Retention
We practice strict data minimization and process only the information necessary for legitimate business communication, client project scoping, and technical website performance.
| Purpose of Processing | Categories of Data | Legal Basis (GDPR Art. 6) | Retention Period |
|---|---|---|---|
| Direct Communication & Inquiries Responding to contact forms, brief submissions, pricing requests. | • Name / Surname • Email address • Project details / brief notes | Pre-contractual steps / Contract (Art. 6(1)(b)) or Legitimate Interest (Art. 6(1)(f)) | Up to 3 years from the date of last communication, unless contractual terms require longer. |
| Website Analytics Measuring aggregate visitor trends and site performance. | • Masked/Anonymized IP • Device & browser data • Approximate city/country • Visited pages & referrers | Consent (Art. 6(1)(a)) via cookie consent mechanisms | Up to 14 months (pursuant to Google Analytics standard retention). |
| Infrastructure Security Preventing abuse, DDoS, and technical error diagnosis. | • Server log entries • Request timestamps • Technical protocol data | Legitimate Interest (Art. 6(1)(f)) in securing IT infrastructure | Up to 90 days in automated server log rotations. |
Note: We do not process sensitive personal data (e.g., health, racial/ethnic origin, religious beliefs, political views).
Analytics & Cookies
Google Analytics 4 (GA4)
We use Google Analytics 4 provided by Google LLC (Mountain View, CA, USA). GA4 generates aggregate statistical insights into site traffic. IP Anonymization: GA4 does not store or log individual IP addresses of users; IP addresses are used purely to derive coarse geographic location metadata and are immediately discarded.
Cookie Management
- Strictly Necessary Cookies: Essential for core website delivery, security, and interface rendering.
- Analytical Cookies: Help us analyze aggregated user traffic via GA4 based on your consent.
You may manage, disable, or delete cookies at any time via your web browser settings. Disabling necessary cookies may impair site layout and features.
Data Processors & Third Parties
We do not sell, rent, or trade your personal data. Data is shared solely with trusted service providers under robust confidentiality and data protection terms:
- Google LLC (Google Workspace, Google Analytics 4): Cloud correspondence and aggregate performance analysis.
- Hosting & Infrastructure Providers: Web hosting and technical server security.
- Public Authorities & Legal Advisors: Solely if mandated by applicable legal procedures, court orders, or to defend legal claims.
International Data Transfers
When data is processed outside Ukraine or the European Economic Area (EEA), transfers to US-based service providers (such as Google LLC) are conducted under the EU-U.S. Data Privacy Framework (DPF) or EU-approved Standard Contractual Clauses (SCCs) pursuant to Art. 46 GDPR.
Data Security
We maintain appropriate physical, organizational, and technical safeguards. All network traffic between your device and the Website is encrypted using Transport Layer Security (TLS/HTTPS).
Your Privacy Rights
Under GDPR, Ukrainian legislation, and applicable US state laws (CCPA/CPRA), you have the right to:
- Access (Art. 15 GDPR): Request confirmation and a copy of your personal data.
- Rectification (Art. 16 GDPR): Request correction of inaccurate or incomplete records.
- Erasure (Art. 17 GDPR): Request deletion of personal data where legal retention grounds no longer exist.
- Restriction of Processing (Art. 18 GDPR): Request limitation of data processing under specific conditions.
- Data Portability (Art. 20 GDPR): Obtain your data in a structured, machine-readable format.
- Object & Withdraw Consent (Art. 21 & Art. 7(3) GDPR): Object to processing or withdraw previously granted consent at any time.
- Lodge a Complaint: File a complaint with your local EU Data Protection Authority (DPA) or the Ukrainian Parliament Commissioner for Human Rights.
To exercise these rights, contact us at connect@vp-production.com. Verified requests are fulfilled within 30 days free of charge.
Age Limitations & Policy Updates
Our Website and services are intended solely for business professionals and adults. We do not knowingly collect personal data from minors under 16 years of age. We reserve the right to revise this Policy to reflect legislative or operational changes. Updated versions will be posted on this page with an updated “Last Updated” timestamp.