Personal Data Processing Policy
Effective 29 September 2026. What denismironov.pro collects, why, where it is stored and how to have it deleted.
Who processes the data
Personal data operator: Denis Yurievich Mironov, registered professional income tax payer (self-employed), Russian Tax ID 290135278765. Address: 25 Onezhskaya St., apt. 3, Arkhangelsk, Arkhangelsk Region, 163050, Russia. Email: mr.mironovd@yandex.ru.
Card payments via Stripe are received by KAIF SAMUI CO., Ltd (Thailand), owned by Denis Mironov; for such orders the company receives the order data. This policy covers all data you leave on the site: cart, forms, diagnostic, calculator and chats with the AI assistant.
What data and why
| Purpose | Data |
|---|---|
| Answering a request, consultation, callback | name, phone / WhatsApp / Telegram, email, company, message text |
| Processing and fulfilling an order, delivering files, support | name, email, phone, company, order contents, amount, payment method and status |
| Free materials, business diagnostic, calculator | name and contact, the answers and results you entered |
| Order emails and, if you separately agreed, useful emails | email, order history, newsletter consent flag |
| Accounting, tax records and receipts | name, email, payment amount and date |
| Analytics and site improvement — only with cookie consent | pseudonymous visit data, cookies, device type, traffic source |
No special categories of data (health, beliefs etc.) or biometrics are collected. Full card numbers, CVC codes and banking passwords are handled only by payment providers; the site never receives them.
Legal grounds
Your consent — a separate document, the Consent to Personal Data Processing, accepted by a tick in the form; performance of a contract you are party to; tax and accounting obligations. Consent to marketing emails is given separately and is never a condition of purchase.
What is done with the data
Collection, recording, organisation, accumulation, storage, updating, use, transfer (provision, access) to the services in section 05, pseudonymisation, blocking, deletion and destruction, both automated and manual. No decisions with legal effect for you are made solely by automated means; AI assistant answers are for information.
Where data is stored and cross-border transfer
Personal data of Russian citizens is recorded, systematised, accumulated, stored, updated and retrieved using a database located in Russia (Yandex Cloud), as required by Article 18(5) of Federal Law 152-FZ. The site also relies on the services below. Some are outside Russia, so data is transferred cross-border — only to the extent needed for the purpose.
| Service | Purpose | Where data is stored |
|---|---|---|
| Yandex Cloud (ООО «Яндекс.Облако») | first recording and storage of requests and orders (database in Russia) | Russia |
| Vercel | website hosting | USA; server functions in Singapore |
| Supabase | orders, promo codes, emails, product files | Singapore |
| Airtable | lead and order records (CRM) | USA |
| Resend | sending emails | USA |
| Telegram | notifications to the owner about requests and payments | UAE |
| OpenAI | AI assistant replies (question text without contact details) | USA |
| Stripe | card payments (recipient: KAIF SAMUI CO., Ltd, Thailand) | USA / Ireland |
| ЮKassa | payments in roubles | Russia |
| RollyPay | payments via SBP and crypto (crypto payments are received by KAIF SAMUI CO., Ltd) | as stated by the provider |
| Яндекс Метрика | visit analytics — runs unless you choose “Necessary only” | Russia |
| TikTok Pixel | TikTok ad measurement — only with consent | Singapore |
| Google Analytics, PostHog | visit analytics — cookies only with consent | USA |
Retention
Requests — until the purpose is met and 3 years after the last contact; orders and payments — 5 years for tax and accounting; analytics cookies — up to 2 years. After that, or after consent is withdrawn, data is deleted within 30 days except where the law requires keeping it.
Your rights
You can learn what data is processed and how; ask to correct, block or delete it; withdraw consent; unsubscribe via the link in any email; and complain to the supervisory authority or a court. Send requests to mr.mironovd@yandex.ru; the reply comes within 10 working days.
Withdrawing consent does not stop fulfilment of a paid order, which relies on the contract.
Cookies and analytics
Essential cookies (language, cart, purchase session, cookie choice) always work. Analytics and advertising cookies are set only after you press “Accept” in the banner; change the choice via “Cookie settings” at the bottom of any page. See Cookies and analytics.
Security
Only Denis Mironov has access to the data; the connection is encrypted (HTTPS); databases are closed to the public and reachable only by the server; the admin panel is password-protected with attempt limits; backups are kept. In case of a breach, the supervisory authority is notified within the statutory deadlines.