Effective date: 23 April 2026

This Privacy Policy explains how Mgroup ("we", "our", "us") collects, uses, discloses, and protects personal data when you visit mgroupweb.com (the "Website") or otherwise interact with us in connection with our Shopify agency services. We comply with the EU General Data Protection Regulation (GDPR) for visitors from the European Economic Area and with the Law of Ukraine "On Protection of Personal Data" for all other processing.

Who We Are

Mgroup is a Shopify agency providing development, consulting, support, CRO, and related services. We act as the data controller for the personal data processed via this Website. Contact details are in the "Contact" section below.

What Personal Data We Collect

Information You Provide

  • Contact forms and "Get in touch" submissions: name, email, company, message, and any other details you choose to include.
  • Job applications on /vacancies/: name, contact details, CV, portfolio links, and any information you provide in your application.
  • Email correspondence: content and metadata of messages you send us directly.

Information Collected Automatically

  • Technical data: IP address, browser type and version, device type, operating system, referring URL, timestamps, pages viewed.
  • Usage data: interactions with the Website, such as clicks, scroll depth, and time on page, collected through analytics tools.
  • Cookies and similar technologies: small files stored on your device to enable core functionality, measure traffic, and improve the Website. See "Cookies" below.

How We Use Your Data

  • to respond to inquiries and discuss potential engagements;
  • to evaluate job applications and communicate with candidates;
  • to operate, secure, and improve the Website;
  • to measure marketing performance in an aggregated way;
  • to comply with legal obligations and enforce our terms.

Legal Basis for Processing (GDPR)

  • Consent — for non-essential cookies and marketing analytics, where required.
  • Legitimate interests — operating the Website, security, responding to business inquiries, recruiting.
  • Contractual necessity — pre-contract communications with prospective clients.
  • Legal obligation — retention or disclosure required by applicable law.

Cookies

We use cookies and similar technologies to enable core functionality (session, security, caching) and to measure traffic in aggregate. You can control cookies through your browser settings; disabling some cookies may affect Website functionality. For details on what each cookie does, please see the tables in your browser's developer tools or contact us.

Who We Share Data With

We do not sell personal data. We share it only with service providers that help us operate the Website and communicate with you, under appropriate data-processing terms:

  • Cloudflare — CDN, DDoS protection, security, basic edge analytics.
  • DigitalOcean — cloud hosting provider for the Website and its database.
  • Google (Google Tag Manager, Analytics) — aggregated website analytics and tag management.
  • Transactional email provider — delivers notifications of form submissions and our replies.
  • Professional advisors — auditors, legal counsel, and accountants, where necessary and under confidentiality.

We may also disclose personal data where required by law, to enforce our terms, or to protect our rights, property, or safety.

International Transfers

Some of our service providers are located outside Ukraine and outside the European Economic Area (for example, in the United States). Where personal data is transferred internationally, we rely on Standard Contractual Clauses or other lawful transfer mechanisms offered by the provider.

Data Retention

  • Contact form submissions: up to 24 months after the last contact, unless a longer period is required by law or by an ongoing engagement.
  • Job applications: up to 12 months after the recruitment decision, unless you ask us to keep your profile for future openings.
  • Server and analytics logs: up to 14 months in aggregated form.
  • Accounting and legal records: as required by applicable law (typically up to 7 years).

Your Rights

Depending on your location, you may have the following rights:

  • access to your personal data and a copy of it;
  • rectification of inaccurate or incomplete data;
  • erasure ("right to be forgotten") where applicable;
  • restriction or objection to processing in certain cases;
  • data portability for data you provided to us;
  • withdrawal of consent at any time, without affecting prior lawful processing;
  • lodging a complaint with the competent data protection authority in Ukraine or in your country of residence.

To exercise any of these rights, email us at support@mgroupweb.com. We respond within a reasonable time and within any statutory deadline that applies.

Security

We apply technical and organizational measures appropriate to the risk — including HTTPS, hosting-level security, access controls, regular backups, and restricted admin access — to protect personal data. No online service is perfectly secure, so please avoid sending highly sensitive information through public forms.

Children

The Website is not directed to children under 16 and we do not knowingly collect personal data from them. If you believe a child has provided us with personal data, please contact us and we will delete it.

Third-Party Links

The Website may link to external sites (for example, LinkedIn, client websites, Shopify). This Privacy Policy applies only to mgroupweb.com. Please review the privacy policies of any third-party services you use.

Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will update the "Effective date" at the top and, if the changes are material, post a notice on the Website. Your continued use of the Website after an update constitutes acceptance of the revised Policy.

Governing Law

This Privacy Policy is governed by the laws of Ukraine, without prejudice to any mandatory data-protection rights you may have under the laws of your country of residence.

Contact

For any privacy question, request, or complaint, contact us at support@mgroupweb.com. Please also see our Terms and Conditions, separate privacy policy for Mgroup Shopify applications.