Privacy Policy

This policy describes how [full legal name of the company] (the "Operator") processes personal data of visitors to [website address] and of clients who order services.

Operator: [full legal name of the company], INN [INN / tax number], OGRN [OGRN / OGRNIP], address: [registered address].

The policy follows Federal Law No. 152-FZ of 27 July 2006 "On Personal Data" and applies to all data the Operator receives through the site, email and messengers.

By submitting a form on the site or writing to us, you confirm that you have read this policy and agree with the processing described here.

Data you enter yourself in the enquiry form: name, email address, description of the task, indicative budget. A phone number or messenger handle, if you include one in the message.

Correspondence data: the contents of emails and messages, attached files, materials and access credentials you hand over for the project.

Technical data the browser sends automatically: IP address, browser type and version, operating system, interface language, referring source, pages viewed, date and time of the visit, cookie identifiers.

The Operator does not collect special categories of personal data — health, beliefs, criminal record — and does not collect biometric data. Please do not send such data in the form or in correspondence.

The site is not intended for people under 14, and the Operator does not knowingly collect their data.

Answering your enquiry: getting in touch, clarifying the task, preparing an estimate and a proposal.

Performing the contract: running the project, delivering the results, support after launch, issuing invoices and confirming payment.

Internal records of enquiries and client projects.

Improving the site: anonymised visit statistics, assessment of how sections and traffic sources perform.

Informational and marketing messages — only with separate consent, which can be withdrawn at any time.

Meeting obligations set by law: accounting and tax records, responses to requests from authorised bodies.

Consent of the data subject, given when you submit a form or an enquiry (clause 1, part 1, article 6 of Law No. 152-FZ).

Performance of a contract to which you are a party, or steps taken at your request before entering into it (clause 5, part 1, article 6).

Compliance with obligations imposed on the Operator by law, primarily tax and accounting law (clause 2, part 1, article 6).

The Operator's legitimate interest in protecting the site from abuse and in keeping anonymised statistics (clause 7, part 1, article 6), to the extent this does not infringe your rights.

Separate consent to receive advertising messages, in line with article 18 of the Federal Law "On Advertising".

Data is stored in the Operator's mailbox and in the site's enquiry database. Hosting location of the database: [where the enquiry database is hosted].

Initial recording, systematisation, accumulation and storage of personal data of citizens of the Russian Federation are carried out using databases located in the Russian Federation, as required by part 5 of article 18 of Law No. 152-FZ.

Technical measures: HTTPS connection to the site, separation of access rights, named user accounts, regular backups.

Organisational measures: only employees who need the data for their work have access to it; a person responsible for organising the processing of personal data has been appointed — [full name of the person responsible for personal data].

Enquiries that did not lead to a contract — 12 months from the date of the enquiry.

Client data and project correspondence — for the term of the contract and three years after it ends, matching the general limitation period.

Accounting and tax documents — five years, as required by law.

Mailing list data — until consent is withdrawn.

Technical logs and web analytics data — 24 months, after which they are anonymised.

Once the purpose is achieved or the period expires, data is destroyed or anonymised within 30 days.

The Operator does not sell personal data and does not pass it on for advertising purposes.

Data may be passed to contractors and services without which the service cannot be delivered: hosting and the cloud enquiry database, the email service, the web analytics service, payment and accounting services, and project subcontractors. Each of them signs a confidentiality agreement and an agreement on processing data on the Operator's instructions.

Current list of recipients: [list of contractors and services that receive data].

The Operator discloses data to authorised state bodies on a reasoned request, in the manner prescribed by law.

Cross-border transfers are made only after notifying the authorised body where the law requires it, and only to countries that provide adequate protection of data subjects' rights.

Obtain confirmation that processing takes place, together with information on the legal grounds, purposes and methods of processing, the retention periods and the parties to whom data may be transferred.

Access your data and receive a copy of it, where this does not infringe the rights of others.

Require that incomplete or inaccurate data be corrected, blocked or destroyed if it was obtained unlawfully or is no longer needed for the stated purpose.

Object to processing for marketing purposes and unsubscribe from the mailing list.

Appeal against the Operator's actions to Roskomnadzor or in court.

Send your request to hello@stretto.dev. Include your full name, information confirming your contact with the Operator, and your signature. The Operator replies within ten working days; the deadline may be extended by no more than five working days with notice to the applicant.

Consent to the processing of personal data can be withdrawn at any time by writing to hello@stretto.dev with the subject "Withdrawal of consent".

State your name, the email address you wrote from, and which data should be deleted.

The Operator stops processing and destroys the data within 30 days of receiving the withdrawal, except where the law requires longer retention — for example, accounting documents for a completed contract.

Unsubscribing from the mailing list does not end correspondence under an active contract: that rests on a different legal ground.

Cookies are small files the site saves in your browser. Essential cookies are needed for the page to work: they remember the chosen language and colour theme. Without them the site will not function.

Analytics cookies collect anonymised statistics: how many people opened a page, where they came from, how far they scrolled. Services used: [list of web analytics services].

Cookies can be disabled in your browser settings or deleted manually. After that some site features may not work correctly.

The site does not use cookies for profiling and does not pass them to advertising networks for personalised advertising, unless expressly stated in a consent banner.

The Operator takes legal, organisational and technical measures to protect data from unlawful access, destruction, alteration, copying and distribution.

Data between the browser and the site travels over a secure protocol. Access to the enquiry database is limited to named accounts with different rights.

No system offers absolute protection. If an incident affecting data subjects' rights occurs, the Operator will notify the authorised body within the statutory deadline and inform those affected.

The Operator may amend this policy. A new version is published on this page and takes effect from the moment it is posted.

The date of the current revision is shown at the top of the document.

The Operator notifies clients with an active contract of material changes separately. Check this page before sending new data.

Questions about data processing, requests and withdrawal of consent: hello@stretto.dev.

Operator: [full legal name of the company], INN [INN / tax number], OGRN [OGRN / OGRNIP].

Address for written requests: [postal address for written requests].

Person responsible for organising the processing of personal data: [full name of the person responsible for personal data], phone [phone number].