Personal Data Processing Policy

Last updated September 28, 2026

This is an English translation provided for convenience. The Russian version is the legally binding one.

1. General provisions

This policy describes how the operator processes and protects the personal data of visitors to amgate.space (the “website”). It has been prepared in accordance with Russian Federal Law No. 152-FZ of July 27, 2006 “On Personal Data”.

When submitting a request on the website, the visitor separately gives their consent to the processing of personal data under the terms of this policy.

2. Operator

3. What data we process

• the name the visitor entered in the form;
• a phone number, messenger username or email address;
• the services selected in the form;
• technical details of the request: page address, referral source, advertising tags (UTM), date and time of submission;
• the IP address and browser information automatically recorded in server logs when the website is visited;
• visit data collected by the Yandex Metrica service using cookies, if the visitor has accepted them: pages viewed, referral source, on-site actions, device and browser type, approximate location based on IP address.

The website does not collect special categories of personal data or biometric data.

3.1. Cookies and Yandex Metrica

With the visitor’s consent, the website uses the Yandex Metrica web analytics service (Yandex LLC, Russia), which stores cookies in the browser and records anonymized information about on-site actions, including session recordings (Webvisor). The contents of the request form fields are not recorded. On the English version of the site, analytics loads only after the visitor clicks “I agree” in the cookie notice; the site works fully without it.

4. Purposes of processing

• responding to the request and contacting the visitor;
• conducting the free audit, preparing a commercial proposal, concluding and performing a contract;
• measuring advertising effectiveness and improving the website using visit and request statistics;
• ensuring the operation and security of the website.

5. Legal grounds

• the consent of the data subject (Art. 6(1)(1) of Law 152-FZ);
• concluding a contract at the data subject’s request and performing a contract to which they are a party (Art. 6(1)(5) of Law 152-FZ).

6. How we process data

Data is processed both with and without automation. The operator collects, records, organizes, accumulates, stores, updates, retrieves, uses, blocks, deletes and destroys data.

The recording, organization, accumulation, storage, updating and retrieval of personal data of Russian citizens are carried out using databases located in the Russian Federation.

The operator does not sell data or share it with third parties except as required by law. To run the website and handle requests, the operator may engage providers of hosting, CRM, request intake and delivery, and web analytics services under a contract that obliges them to keep the data confidential and comply with Law 152-FZ (Art. 6(3)).

If a visitor contacts us via WhatsApp or email on their own initiative, those services process the data under their own rules. The operator is not responsible for such processing.

7. Retention periods

Data is processed until the purposes of processing are achieved or consent is withdrawn. If no contract is concluded, request data is kept for no longer than three years after the last contact. Contract-related data is kept for the periods required by law.

Once the purposes are achieved or consent is withdrawn, the data is destroyed within 30 days unless the law requires it to be kept longer.

8. Rights of the data subject

The visitor has the right to:

• find out what data about them is processed, how and why;
• request that data be corrected, blocked or destroyed if it is incomplete, outdated, inaccurate or processed unlawfully;
• withdraw consent to processing;
• appeal the operator’s actions to the Russian data protection authority (Roskomnadzor) or in court.

To exercise these rights, email hello@amgate.ru. The operator responds within 10 business days of receiving the request. This period may be extended by 5 business days, in which case the operator will explain why.

9. Data protection

The operator takes legal, organizational and technical measures to protect data from unauthorized access, alteration, disclosure and destruction: it limits who can access the data and uses a secure connection (HTTPS), passwords and role-based access in the CRM.

10. Final provisions

The operator may amend this policy. A new version takes effect when it is published on this page unless stated otherwise. The current version is always available at amgate.space/en/privacy.