Privacy and Data

Explaining what data we process when using the HandS Lab site, why it is needed, and how to contact us with processing questions.

Last updated: September 27, 2026

Data Controller

Website Operator: NGO "HandS Lab" (NGO "HUMAN AND SYNTHETIC LAB", EDRPOU 46189265). Contact for personal data inquiries: [email protected].

Data We May Process

Depending on how you interact with the website, we may receive:

name, email address, organization name, and inquiry content submitted via the form;

email address and consent details if you subscribe to HandS Lab notes;

technical data necessary for site operation and security: IP address, browser and device details, request timestamp, cookie identifiers, or similar technologies for security and delivery (including Cloudflare);

site interaction data for analytics if optional technologies are permitted: Google Tag Manager / Google Analytics and Microsoft Clarity.

Do not send client histories, medical records, consultation notes, or other sensitive materials via general web forms.

How We Use Data

to respond to inquiries;

to discuss potential participation, access, or collaboration;

to send HandS Lab notes based on separate consent;

to maintain website operation and security;

to analyze website usage (analytics), strictly subject to your consent to optional technologies.

Legal Bases for Processing

Contact form inquiries: steps prior to entering a contract at the request of the individual and/or legitimate interest in answering your message.

HandS Lab newsletter: consent (withdrawable at any time).

Essential technologies for security and delivery: legitimate interest in maintaining site functionality and security.

Google Tag Manager / Google Analytics and Microsoft Clarity: consent via cookie settings.

Data Recipients

For site operation and communication, we use:

Cloudflare — delivery, security, and technical logs;

Hetzner — website hosting;

Resend — email notifications for form inquiries to [email protected];

Brevo — distribution of HandS Lab notes;

Google Tag Manager / Google Analytics and Microsoft Clarity — analytics strictly upon consent to optional technologies.

Some providers may process data outside Ukraine (specifically in the EU and/or USA) under their respective policies and applicable data transfer mechanisms.

Retention Periods

We retain data no longer than necessary for the stated purposes or required by applicable laws.

Contact form inquiries: up to 24 months after the last meaningful communication, after which data is deleted or anonymized unless a longer retention period is required for dispute resolution or legal compliance.

Newsletter subscriptions: until unsubscribed; technical opt-out records may be stored longer to honor opt-out preferences.

Technical logs (hosting / Cloudflare): typically up to 90 days, unless a longer period is needed to investigate a security incident.

Analytics data: per settings in Google Tag Manager / Google Analytics, Microsoft Clarity, and your cookie preferences.

Your Inquiries

To submit questions about personal data or exercise statutory rights, write to [email protected].

Information regarding cookies and similar technologies is available on the Cookies page.