Privacy Policy

Last updated: 12 November 2026

This Privacy Policy explains how personal data is handled when you visit https://www.s-afox.com/ (“Website”) or contact S-AFoX.

S-AFoX is an independent, family-run creative project producing music, instrumentals, films, music videos, and digital art, including works created with artificial intelligence tools.

1. Who Is Responsible for Your Data?

The person responsible for processing personal data through this Website is:

Andriy Lesyuk
Ukraine
Contact email: s-andy@s-afox.com

In this Policy, “we”, “us”, and “our” refer to this operator acting under the S-AFoX creative name.

You can also find our contact information on the Contact page.

2. Data We Process

Website access and security

When you visit the Website, our hosting infrastructure processes technical information needed to deliver pages and maintain security. Depending on the server configuration, logs may contain your IP address, request time, requested URL, response status, browser information, and referring page.

Hosting provider: DigitalOcean, Netherlands
Actual log data and retention: IP address, request time, requested URL, response status, browser information, referring page; retained for 30 days

We use this information to operate the Website, investigate errors, and prevent abuse.

Messages and enquiries

When you contact us, we receive the information you provide, such as your name or pseudonym, email address, message, and attachments.

We use this information to respond to enquiries, discuss collaborations or licensing, and handle rights or privacy requests. Please provide only information relevant to your enquiry.

Email provider: Google Workspace (Gmail), provided by Google Cloud EMEA Limited, Ireland.

We use Google Workspace to receive, store, and respond to email enquiries. Email addresses, message contents, and attachments are processed by Google on our behalf under the applicable Cloud Data Processing Addendum.

Data may be processed outside Ukraine and the European Economic Area, subject to the applicable contractual safeguards and data-location settings.

Privacy preferences

We use CookieConsent to remember your choices about optional services. The consent record may include your selected categories, a consent identifier, timestamps, and the version of the preferences you accepted.

Optional services

Where enabled and subject to your choices, embedded players, analytics, or advertising services may process additional information as described below.

Services currently active on this Website: None

3. Why We Process Data

We process personal data for the following purposes:

• Delivering and protecting the Website: our legitimate interest in maintaining a functioning, secure website, where this legal basis applies.
• Responding to general enquiries: our legitimate interest in communicating with people who contact us.
• Handling requested collaborations or licences: taking steps at your request before entering into a contract, or performing that contract.
• Remembering privacy choices: maintaining and respecting your preferences and meeting applicable consent obligations.
• Optional media, analytics, and advertising: your consent where required.
• Legal obligations and disputes: complying with applicable law and establishing, exercising, or defending legal claims.

Where the GDPR applies, these purposes rely, as appropriate, on Article 6(1)(a), (b), (c), or (f). Processing is also subject to applicable Ukrainian data protection law.

Providing information in an enquiry is voluntary, but we may be unable to respond or fulfil your request without the relevant contact details.

4. Cookies and Your Choices

Cookies and similar browser storage can remember preferences and support website features.

Our privacy settings distinguish between:

• Necessary: storage essential to functions such as remembering your consent choices.
• External media: optional embedded music and video players.
• Analytics: optional measurement of how visitors use the Website.
• Advertising: optional campaign measurement and advertising-related technologies.

Categories may be displayed even when no service in that category is currently active.

Where consent is required, optional technologies are activated only after you agree. You can accept, reject, or select optional categories and change your decision through Privacy settings in the footer.

Withdrawing consent does not affect processing lawfully performed before withdrawal. It does not automatically erase information already received by external providers.

You can also remove cookies through your browser settings. Doing so may reset your saved choices.

5. External Music and Video Platforms

The Website contains links to external music, video, and social platforms. Clicking an external link takes you to a service governed by its own privacy policy.

Where we offer embedded players, enabling them may establish a connection to the provider. The provider may receive your IP address, browser information, the page containing the player, and playback interactions. Depending on the service and your account settings, it may associate activity with an existing account.

Embedded providers currently used: None

Declining external-media consent may prevent embedded players from loading. You can still use ordinary links to visit those platforms directly.

6. Analytics and Advertising

We do not currently use website analytics or advertising tracking. If we introduce these services, we will update this Policy and request consent where required before activating them.

7. Fonts and Content Delivery Services

We load fonts through Google Fonts and JavaScript resources through jsDelivr. When your browser requests these resources, the relevant provider receives your IP address and request information necessary to deliver them.

These connections are separate from embedded-player or advertising consent. Rejecting those categories does not necessarily prevent requests for externally hosted fonts or libraries.

8. Artificial Intelligence and Creative Work

S-AFoX uses AI tools in its creative production. This does not by itself mean that browsing the Website sends your personal information to a generative AI service.

Please do not submit sensitive personal information or private material about other people unless necessary and you are entitled to share it.

If you believe a published work affects your privacy, likeness, or other personal rights, contact us with the relevant URL and a description of your concern.

9. Who May Receive Data?

Personal data may be accessed by authorised people assisting with S-AFoX operations and by providers necessary for hosting, email delivery, security, or other services described in this Policy.

External platforms may act as independent controllers for their own processing.

We may also disclose information where required by law or where necessary and lawful to establish, exercise, or defend legal claims.

10. International Processing

We operate from Ukraine. Depending on the providers used, personal data may also be processed in other countries.

Where applicable law requires safeguards for international transfers, we use an appropriate lawful mechanism. Where the GDPR applies, this may include an applicable adequacy decision or Standard Contractual Clauses with additional safeguards where needed.

You may contact us for information about the safeguards relevant to your data.

11. How Long We Keep Data

We keep personal data only for as long as needed for its stated purpose:

• Server and security logs: 30 days.
• General enquiries: 1 year after the enquiry is resolved.
• Consent records: 1 year after consent is given.
• Analytics and advertising data: not applicable as we do not currently use these services.
• Contracts and related financial records: for the periods required by applicable law.
• Backups: 1 year, until next rotation.

Information relevant to an ongoing dispute or legal obligation may need to be retained longer. We limit such retention to what is necessary.

12. Your Rights

Depending on applicable law and the circumstances, you may have the right to:

• Know how your personal data is processed and who receives it.
• Request access to your data.
• Request correction of inaccurate information.
• Request deletion or restriction of processing.
• Object to processing based on legitimate interests.
• Receive certain data in a portable format.
• Withdraw consent where processing relies on it.
• Complain to a competent data protection authority.

In Ukraine, you may contact the Ukrainian Parliament Commissioner for Human Rights. Where the GDPR applies, you may also complain to the relevant supervisory authority in the EEA.

To exercise your rights, contact s-andy@safox.com. We may request proportionate information to verify your identity. We will respond within the applicable legal deadlines.

13. Security

We use technical and organisational measures appropriate to the personal data we process. These include HTTPS, restricted administrative access, and regular software updates.

No online system can guarantee absolute security.

14. Children’s Privacy

The Website is intended for a general audience. Being a family-run creative project does not mean that we seek to collect children’s personal data.

If you believe a child has provided personal information that should not have been collected, please contact us so we can assess the situation and take appropriate action.

15. Changes to This Policy

We may update this Policy when our services or data-processing practices change. The latest version will appear on this page with an updated date.

For material changes, we will provide additional notice and request new consent where required.

16. Contact

For privacy questions or requests, contact:

s-andy@safox.com

Or visit our Contact page.