1. General provisions
This policy describes how Viresto Agency ("we", "the controller") processes the personal data of visitors to viresto.agency and all its language versions. It has been prepared with regard to Russian Federal Law No. 152-FZ "On Personal Data", the Law of the Republic of Kazakhstan "On Personal Data and Its Protection" and comparable legislation in the other countries our visitors come from.
By submitting the form on the site and ticking the consent box, you agree to the processing of your data under this policy. If you do not agree, do not submit the form — you can use the site without providing any personal data.
2. Controller and contact
The personal data controller is Viresto Agency. For any question about data processing, write to contact@viresto.agency. We respond within 10 business days.
3. What data we collect
Through the enquiry form — only what you enter yourself:
- your name;
- a way to contact you: email address, phone number or messenger username;
- your website address (optional);
- a comment about your request (optional).
Automatically when the form is submitted:
- IP address, browser type (User-Agent), date and time of submission — to protect against spam and abuse.
Like any web server, the hosting server keeps technical access logs (IP address, requested page, date and time, User-Agent). We do not combine these logs with enquiries and do not use them to identify visitors.
4. Cookies, analytics and local storage
The site uses no advertising or analytics cookies and no third-party trackers. The browser's local storage (localStorage) holds only your chosen colour theme — light or dark. This is not sent to the server and is not personal data.
5. Purposes of processing
- replying to your enquiry and discussing possible cooperation;
- preparing a proposal and concluding a contract if you decide to work with us;
- protecting the form from spam, automated submissions and abuse.
We do not use your data for mailings, do not sell it and do not share it with third parties for marketing.
6. Legal basis
We process data on the basis of the consent you give by ticking the box in the form, and to prepare and conclude a contract at your request. Security logs are processed in our legitimate interest in keeping the site secure.
7. Retention periods
- Enquiries that do not lead to a contract are kept for no more than 12 months after the last correspondence and then deleted.
- Client data is kept for the term of the contract and thereafter for the periods required by tax and accounting law.
- Anti-spam service data (anonymised IP hashes and timestamps) is kept for no more than 24 hours and then deleted automatically.
- Technical server logs are kept within the hosting provider's automatic log rotation period and then deleted.
8. Data transfers
The enquiry is sent from the site over an encrypted HTTPS connection and delivered to contact@viresto.agency. Only the people who reply to enquiries have access to the data. Technically, the data passes through the infrastructure of the hosting provider and email service, which act as processors and do not use the data for their own purposes. We disclose data to public authorities only where the law expressly requires it.
9. Data security
We use HTTPS on every page, server-side validation of form data, submission rate limiting, hardened server settings and restricted access to email and hosting. No system can offer an absolute guarantee of security; if an incident affects your data, we will notify you and the competent authorities as required by law.
10. Your rights
You have the right to:
- find out which of your data we process and obtain a copy;
- have inaccurate data corrected;
- have your data deleted or its processing restricted;
- withdraw your consent at any time — this does not affect the lawfulness of processing before withdrawal;
- lodge a complaint with the personal data protection authority in your country.
To exercise these rights, write to contact@viresto.agency from the same address, or mention the contact details you left in your enquiry, so we can confirm the request comes from you.
11. Children
The site and services are intended for businesses and adults. We do not knowingly collect data from anyone under 18. If you believe a child has sent us their data, let us know and we will delete it.
12. Changes to this policy
We may update this policy when the data we collect, our services or legal requirements change. The current version is always published on this page, with its date shown at the top. Material changes do not apply to enquiries already submitted without your consent.