Privacy Policy
Last updated: 7 June 2026
This Privacy Policy explains how personal data of visitors to secretlab-design.studio (the “Site”) is processed and protected. We aim to follow the principles of the EU General Data Protection Regulation (GDPR) and applicable data-protection law.
1. General
By using the Site and its forms you acknowledge this Policy. If you disagree with it, please refrain from using the contact forms.
This Policy applies to all information the controller may obtain about you while you use the Site.
2. Data controller
Data controller: Individual entrepreneur Yıldız E. A. · INN 165608591389 · OGRNIP 323169000068158, Russia.
Contact for data-protection requests: [email protected].
3. What data we process
We process data you provide voluntarily through the Site's forms, and technical data sent by your browser:
- your name, as entered in a form or brief;
- email address;
- the content of your message and your brief answers;
- cookies and technical data (IP address, browser and device type, referrer, on-site activity) in aggregated form.
4. Purposes of processing
- handling enquiries and briefs and replying to you;
- preparing and sending a proposal at your request;
- operating, securing and improving the Site.
5. Legal bases (GDPR Art. 6)
We rely on your consent (given when you submit a form), on the necessity to take steps at your request prior to entering into a contract, and on our legitimate interests in running and securing the Site where these do not override your rights.
7. Sharing and international transfer
We do not sell your data. To run the Site and its forms we use a hosting and infrastructure provider (Netlify), which processes data on our behalf to deliver your messages. As the controller is established in Russia, your data is processed there; we apply appropriate safeguards for any transfer.
8. Retention
We keep personal data no longer than necessary for the stated purposes or until you withdraw consent, after which data is deleted or anonymised.
9. Your rights
Subject to applicable law, you have the right to:
- access your data and obtain a copy;
- request rectification or erasure;
- restrict or object to processing, and to data portability;
- withdraw consent and lodge a complaint with a supervisory authority.
10. Data security
We apply appropriate organisational and technical measures to protect data against unauthorised access, alteration, disclosure or destruction. Data is transmitted over a secure connection (HTTPS).
11. Changes
We may update this Policy. The current version is always available on this page, with the update date shown above.
12. Contact
For any data-protection question, write to [email protected].