Privacy Policy
Last updated: 17 September 2026
Who is responsible
This website is operated by Individual Entrepreneur Andrei Orlov, identification number 145902798, registered at 101, 9 April Street, Kobuleti, Georgia. I am the data controller for everything described below. Questions about this policy, or requests under it, go to the email address on the contact page.
What this site does not do
This site sets no cookies. It uses no analytics, no tracking pixels, no advertising networks, no embedded third-party fonts, scripts or media, and no social network widgets. Nothing you do here is shared with anyone for profiling or advertising, because none of that is collected in the first place.
What is collected
If you use the contact form: the name, email address, company name (if you give one) and message text you enter. These are sent to my mailbox and are not stored in any database on this site.
Web server logs: the web server records the IP address, the request, the time, the referring page and the browser user-agent string for every request, as web servers do. These logs exist to keep the site running and to detect abuse.
Why, and on what legal basis
Contact form. To read your message and reply to it. Legal basis: Article 6(1)(b) GDPR, steps taken at your request prior to entering into a contract; and where no contract is contemplated, Article 6(1)(f), my legitimate interest in answering correspondence addressed to me.
Server logs. Security, abuse prevention and diagnosing faults. Legal basis: Article 6(1)(f) GDPR, legitimate interest in operating the site securely.
Who else sees it
Hosting. The site runs on a virtual server provided by Amazon Web Services, in the eu-central-1 region (Frankfurt, Germany). Your data does not leave the European Union at this stage.
Email delivery. Messages from the form are sent through my email provider, MXroute (Jetarrow LLC, United States), and are delivered to my mailbox hosted with the same provider. Transfers outside the European Economic Area are covered by the European Commission's Standard Contractual Clauses.
Apart from the two providers above, no one else receives your data, and it is never sold, rented or shared for marketing. The only exception is a disclosure I am legally required to make, such as a binding request from a competent authority.
How long it is kept
Correspondence. Kept for as long as the enquiry is live, and for up to three years afterwards if it led to a business relationship, because accounting and tax rules require it. Enquiries that go nowhere are deleted within twelve months.
Server logs. Rotated and deleted after 30 days.
Your rights
Under the GDPR you have the right to ask for a copy of the personal data I hold about you, to have it corrected, to have it deleted, to restrict or object to its processing, and to receive it in a portable format. Write to the email address on the contact page and I will respond within one month.
If you believe your data has been handled improperly, you have the right to complain to a supervisory authority in the EU or EEA country where you live or work.
Anti-spam measures
The contact form checks for automated submissions: it includes a field that is hidden from human visitors, measures how long the form was open before it was submitted, and the web server limits how often the form can be used from a single address. No data about you is collected by any of this beyond the request itself.
Changes
If this policy changes, the date at the top changes with it. There is no mailing list, so there is no notification; the current version is always the one on this page.