Privacy policy

1. General

1.1. This Policy describes how the Cloutlab studio, whose details are given in the “Data controller” section above (the Controller), processes and protects personal data received through this website (the Site).

1.2. The Policy follows Russian Federal Law No. 152-FZ “On Personal Data”. Where the GDPR applies to you, the Controller also honours the rights it grants.

2. What we process

2.1. Data you enter in the enquiry form: name, contact (e-mail, phone or messenger handle), company, project description, estimated budget and timeline.

2.2. Technical data: IP address, browser and device details, time of visit and pages viewed. Web analytics collect it only after you consent (see the Cookie policy).

2.3. We do not process special categories of personal data or biometric data.

3. Purposes

• handling your enquiry and preparing a proposal;
• contacting you about the enquiry;
• concluding and performing a contract;
• measuring traffic and improving the Site (only with your consent).

4. Legal grounds

4.1. Your consent, given as a separate document when you submit the form.

4.2. Concluding and performing a contract with you.

5. How data is handled

5.1. Data is collected, recorded, organised, stored, updated, retrieved, used, restricted, erased and destroyed.

5.2. Personal data of Russian citizens is recorded, organised, accumulated, stored, updated and retrieved using databases located in the Russian Federation.

5.3. New-enquiry notifications sent to the Controller’s staff contain no personal data.

5.4. We do not share personal data with third parties except where required by law, or with service providers (hosting, e-mail) that process it on our behalf under confidentiality obligations.

5.5. Data is kept until the purposes are achieved, but no longer than 3 years after your last contact, or until you withdraw consent, unless the law requires longer.

6. Your rights

You may request information about the processing of your data; ask us to correct, restrict or erase it; withdraw your consent; and lodge a complaint with the supervisory authority or a court. Send requests to the e-mail in the “Data controller” section. We reply within 10 business days.

7. Security

We use legal, organisational and technical measures to protect personal data: HTTPS encryption, access control, backups and monitoring of data operations.

8. Changes

We may update this Policy. The new version applies from its publication on the Site; the current version date is shown at the top of the page.