Privacy Policy
This Policy describes how personal data is processed on Yulia Sadovaya's website.
1. Controller
Personal-data controller: Individual Entrepreneur Yulia Dmitrievna Sadovaya.
INN: 226702595982
OGRNIP: 326010000005919
State registration date: 26 February 2026
E-mail listed in EGRIP: JULECHKA0715@MAIL.RU
2. Data processed
When a visitor books through the website, the following data may be processed:
- name;
- e-mail address and/or phone number;
- preferred contact method;
- messenger username (for example, a Telegram @username) where the Client chooses that contact method;
- selected service;
- booking date and time;
- interface language;
- evidence of the version and time of personal-data consent;
- evidence of the accepted Public Offer and related payment/rescheduling/refund rules;
- technical data required for website operation and security, including standard request logs.
The standard booking form is not intended for diagnoses, health information, intimate-life information, trauma details or other special-category personal data.
3. Purposes
Data is processed to:
- create and manage bookings;
- communicate with the client about the selected service;
- conclude and perform the service agreement;
- keep legally relevant records of consent and acceptance;
- protect and operate the website;
- comply with applicable legal obligations.
4. Legal grounds
Processing is based on:
- the data subject's consent;
- steps requested by the data subject and performance of the agreement;
- compliance with legal obligations.
5. Processing operations and security
The controller may collect, record, organise, store, update, retrieve, use, block, delete and destroy personal data as required for the stated purposes.
Reasonable organisational and technical measures are used to protect personal data from unlawful or accidental access, alteration, disclosure, blocking, copying, provision, distribution or other unlawful processing.
6. Service providers
Data may be provided to service providers supporting hosting, website operation, communications, payments and other required service functions, only to the extent necessary and where a lawful basis exists.
Personal data is not sold or provided to third parties for their own marketing purposes without a separate lawful basis.
7. Retention and deletion
Personal data is kept no longer than necessary for the relevant purposes and any mandatory statutory retention periods.
When the purpose is achieved or consent is withdrawn, processing is terminated and the data is deleted or destroyed within the periods required by law unless another lawful retention basis applies.
Records required for accounting, tax, contractual or other statutory purposes may be retained for the legally required periods.
8. Data-subject rights
A data subject may:
- obtain information about processing;
- request correction, blocking or deletion where legally justified;
- withdraw consent;
- challenge the controller's actions or inaction before the competent authority or a court.
Privacy requests may be sent to JULECHKA0715@MAIL.RU. The request should contain enough information to identify the requester and the relevant booking or interaction.
9. Updates
The current version is published on this page. Material amendments are published as a new version with a separate effective date.
10. Additional processing for direct purchases and gifts
For one-off purchases, programmes and certificates, additional data may include the purchaser's name and contact details; selected item; amount and order/payment identifiers and status; preferred contact channel; evidence of legal acceptance and versions; certificate identifier, associated service and issue/activation/redemption state; the name and contact details provided by the recipient themselves; delivery/refund information; and mandatory fiscal receipt reference or link where issued. Full bank card details are not collected through the ordinary site form; the payment provider processes payments.
Additional purposes include order fulfilment, providing purchased content or services, arranging a gift for the recipient, preventing duplicate redemption, handling refunds, delivering required records and fulfilling tax/accounting duties. Purchaser and recipient are treated as distinct data subjects; the purchaser's consent is not substituted for the recipient's. Recipient details should normally be collected directly from the recipient on activation unless another lawful basis exists.
Technical infrastructure providers, payment services and relevant public authorities receive only the data needed for their legitimate roles and legal obligations. The legal grounds, retention rules, contact and protections above also apply. Legally mandated accounting/tax records are not erased merely because consent is withdrawn. This extension does not grant marketing-mailing consent.