Legal Information
Privacy Policy
Version 1.4, effective 29 September 2026. This English translation is provided for convenience. In case of discrepancies, the Russian-language version shall prevail.
1. Scope
This Policy governs data belonging to website visitors and people who submit the contact form.
2. Controller
Controller: Индивидуальный предприниматель Шипов Егор Иванович, sole proprietor, Moscow Region, Pavlovsky Posad. INN 503507240190; OGRNIP 322508100316286. Requests and withdrawals: hello@eolabs.ru.
3. Legal Basis
Processing rests on the Constitution of the Russian Federation, the Civil Code, Federal Law No. 152-FZ of 27 July 2006 on Personal Data, Federal Law No. 149-FZ of 27 July 2006 on Information, and the consent of the data subject. Form data is processed on the basis of separate, specific and informed consent given by a distinct action before submission.
4. Data Subjects, Data and Purposes
Data subjects are website visitors and people who submit an enquiry. The forms process a name, phone number, email address or Telegram username, optional company or project, optional project type, project description or interactive brief answers about goals, scope, materials, timing and budget, submission time, source page and technical anti-abuse data. Purposes are receiving and answering enquiries and preventing automated spam, not marketing. Special categories of personal data and biometric data are not processed, and data relating to minors is not intentionally collected.
5. Operations and Method
Operations include collection, recording, use, transfer to contracted processors, storage, correction, blocking, deletion and destruction. Processing combines automated and manual operations. Enquiry data does not create public personal-data sources, and no solely automated decisions with legal consequences are made.
6. Location of Processing
Recording, systematisation, accumulation, storage, correction and retrieval of the personal data of Russian citizens are carried out using databases located in the Russian Federation, on Timeweb infrastructure: a MySQL database holding the primary record of each enquiry, and the hello@eolabs.ru mailbox holding a copy delivered by notification.
7. Cross-Border Transfer
No cross-border transfer of personal data takes place. Every engaged processor and the web-analytics service are located in the Russian Federation. Should such a transfer ever become necessary, the controller will notify the Russian data protection authority and obtain consent before it begins.
8. Retention, Deletion and Withdrawal
Enquiries are retained for no more than 12 months from the date they are received; deletion runs automatically as a scheduled job, and the mailbox copy is deleted within the same period. The consent record — its timestamp, version and source page — is stored with the enquiry and deleted together with it. Analytics data is retained by Yandex Metrica according to counter settings, and browser identifiers for no more than 180 days.
Consent remains valid until its purpose is fulfilled or until it is withdrawn. Withdrawal requests may be sent to hello@eolabs.ru and do not affect processing performed before receipt. Once the purpose is fulfilled, the retention period expires or consent is withdrawn, data is deleted from the database and the mailbox, and destruction is confirmed by a record of destruction and an export from the event log, following Roskomnadzor Order No. 179 of 28 October 2022.
9. Your Rights and How to Exercise Them
You may request information about the processing of your personal data, request correction, blocking or destruction, withdraw consent and complain to the Russian data protection authority or a court.
Send requests to hello@eolabs.ru, including enough detail to identify you and your enquiry: your name, the contact detail you supplied and, if helpful, the date of the enquiry. The controller replies within 10 working days of receipt; this may be extended by no more than 5 working days with notice of the reason. If the controller holds no data about you, the reply will say so.
11. Processors and Disclosure
The browser sends enquiries to the same-origin /api/contact.php handler hosted on Timeweb. The handler first records them in MySQL and then sends an SMTP notification from hello@eolabs.ru to the same address. Timeweb provides hosting, the handler, the database and the mailbox on servers in the Russian Federation; Yandex processes analytics data only after consent, on infrastructure in the Russian Federation. Enquiry data is neither disclosed to other third parties nor sold; disclosure to state authorities occurs only on grounds provided by law.
12. Security
Controls include HTTPS, server-side validation, length limits, a honeypot, rate limiting, server-side secret storage and no logging of enquiry contents. The IP address is not stored in its original form — an irreversible HMAC hash is used for abuse protection. Access is granted only to people who need it to handle enquiries. Where an incident results in unlawful transfer of personal data, the controller notifies the Russian data protection authority within 24 hours of detection and reports the findings of its internal investigation within 72 hours.
13. Policy Changes
The current version is published at this address and is accessible without restriction. Material changes to purposes, data categories or processors result in an updated version and date, and renewed consent where required.