SECRETLAB
SECRETLAB000
Back to home

Privacy Policy

Last updated: 7 June 2026

This Privacy Policy explains how personal data of visitors to secretlab-design.studio (the “Site”) is processed and protected. We aim to follow the principles of the EU General Data Protection Regulation (GDPR) and applicable data-protection law.

1. General

By using the Site and its forms you acknowledge this Policy. If you disagree with it, please refrain from using the contact forms.

This Policy applies to all information the controller may obtain about you while you use the Site.

2. Data controller

Data controller: Individual entrepreneur Yıldız E. A. · INN 165608591389 · OGRNIP 323169000068158, Russia.

Contact for data-protection requests: [email protected].

3. What data we process

We process data you provide voluntarily through the Site's forms, and technical data sent by your browser:

  • your name, as entered in a form or brief;
  • email address;
  • the content of your message and your brief answers;
  • cookies and technical data (IP address, browser and device type, referrer, on-site activity) in aggregated form.

4. Purposes of processing

  • handling enquiries and briefs and replying to you;
  • preparing and sending a proposal at your request;
  • operating, securing and improving the Site.

5. Legal bases (GDPR Art. 6)

We rely on your consent (given when you submit a form), on the necessity to take steps at your request prior to entering into a contract, and on our legitimate interests in running and securing the Site where these do not override your rights.

6. Cookies

The Site uses cookies — small text files stored in your browser. Strictly necessary cookies keep the Site working and are always active. Optional cookies (e.g. analytics) are used only with your consent, which you give in the cookie banner.

You can change or withdraw consent at any time by clearing cookies in your browser settings. Disabling some cookies may affect certain features.

7. Sharing and international transfer

We do not sell your data. To run the Site and its forms we use a hosting and infrastructure provider (Netlify), which processes data on our behalf to deliver your messages. As the controller is established in Russia, your data is processed there; we apply appropriate safeguards for any transfer.

8. Retention

We keep personal data no longer than necessary for the stated purposes or until you withdraw consent, after which data is deleted or anonymised.

9. Your rights

Subject to applicable law, you have the right to:

  • access your data and obtain a copy;
  • request rectification or erasure;
  • restrict or object to processing, and to data portability;
  • withdraw consent and lodge a complaint with a supervisory authority.

10. Data security

We apply appropriate organisational and technical measures to protect data against unauthorised access, alteration, disclosure or destruction. Data is transmitted over a secure connection (HTTPS).

11. Changes

We may update this Policy. The current version is always available on this page, with the update date shown above.

12. Contact

For any data-protection question, write to [email protected].