PRIVACY POLICY

for the Processing of Personal Data

Effective as of September 1, 2026



1. General Provisions

1.1. This Privacy Policy for the Processing of Personal Data (the "Policy") sets forth the procedures for the processing of personal data and the measures implemented to safeguard personal data by Individual Entrepreneur Evgeniy Nikolaevich Orlov, Taxpayer Identification Number (INN) 771 602 412 800, email address: jekk80@yandex.ru (the "Operator").
1.2. This Policy has been prepared in accordance with Federal Law No. 152-FZ of July 27, 2006, "On Personal Data," and other applicable laws and regulations of the Russian Federation.
1.3. The Operator shall make the observance of the rights and freedoms of individuals, including the right to privacy and to personal and family confidentiality, a paramount objective and condition of its activities involving the processing of personal data.
1.4. This Policy shall apply to all information that the Operator may receive concerning visitors to https://evgeni-orlov.ru (the "Website"), persons submitting requests for psychological consultations, purchasers of digital materials, and any other persons interacting with the Operator through the Website, email, messengers, or technical services used by the Operator.
1.5. This Policy is a publicly available document and shall be available at https://evgeni-orlov.ru/en/privacy.
1.6. This Policy does not govern the processing of personal data by third parties that independently provide services to a User, including payment, email, cloud-storage, communication, or other service providers. Where applicable, the User should review the policies and terms of such third parties.

2. Definitions

2.1. Personal Data means any information relating directly or indirectly to an identified or identifiable individual.
2.2. Processing of Personal Data means any operation or set of operations performed on Personal Data, whether or not by automated means, including collection, recording, systematization, accumulation, storage, updating, retrieval, use, transfer, provision of access, blocking, deletion, and destruction.
2.3. User means any individual who visits the Website, submits a request or inquiry to the Operator, purchases Digital Materials, or otherwise interacts with the Operator.
2.4. Website means the website located at https://evgeni-orlov.ru, including its pages, forms, shopping cart, checkout pages, and related technical components.
2.5. Operator means Individual Entrepreneur Evgeniy Nikolaevich Orlov, who independently or jointly with others organizes and/or carries out the Processing of Personal Data and determines the purposes, scope, and operations relating to such Processing.
2.6. Automated Processing of Personal Data means Processing of Personal Data by means of computer technology.
2.7. Provision of Personal Data means actions aimed at disclosing Personal Data to a specific person or a specific group of persons.
2.8. Dissemination of Personal Data means actions aimed at disclosing Personal Data to an indefinite number of persons.
2.9. De-identification means actions that make it impossible to determine, without additional information, whether Personal Data relate to a particular User.
2.10. Destruction of Personal Data means actions resulting in the irreversible destruction of Personal Data, with no possibility of restoring their content.
2.11. Cross-Border Transfer of Personal Data means a transfer of Personal Data to the territory of a foreign state, including to a foreign public authority, individual, or legal entity.

3. Principles of Processing

3.1. The Operator shall process Personal Data lawfully and fairly.
3.2. Processing shall be limited to specific, predetermined, and lawful purposes. Processing incompatible with the purposes for which Personal Data were collected shall not be permitted.
3.3. The Operator shall process only Personal Data that are relevant to and necessary for the stated purposes of Processing.
3.4. The content and scope of Personal Data processed shall correspond to the stated purposes; excessive Processing shall not be permitted.
3.5. The Operator shall take reasonable measures to ensure that Personal Data are accurate, sufficient, and current. The User may notify the Operator of changes to or inaccuracies in Personal Data.
3.6. Personal Data shall be retained in a form that permits identification of the User for no longer than necessary to achieve the purposes of Processing, unless a different retention period is required by Russian law or by an agreement with the User.
3.7. Upon achievement of the purposes of Processing, loss of necessity to achieve those purposes, expiration of the applicable retention period, or in other cases established by law, Personal Data shall be destroyed or de-identified unless Russian law requires further retention.

4. Categories of Personal Data

4.1. The Operator may process the following categories of Personal Data of a User:
  • surname, first name, and patronymic, if provided by the User;
  • email address;
  • telephone number, if provided by the User;
  • the User’s preferred method of communication;
  • Telegram username, identifier, or other information provided for communication through Telegram, WhatsApp, or another messenger;
  • the content of any request, message, or inquiry submitted by the User;
  • information regarding orders for Digital Materials, including the product name, price, order date, and delivery status;
  • information necessary to confirm and record payment, including the date, amount, status, and order/payment number or other identifier;
  • technical data that may be collected when the Website is visited, including IP address, cookie files, browser, device, operating-system, referral-source, visit-time, page-view, and Website-interaction information;
  • other information voluntarily provided by the User that is necessary to address the User’s inquiry or perform a contract concluded with the User.
4.2. The Operator does not request that Users submit through Website forms information concerning health conditions, diagnoses, psychological-test results, medical records, medical history, or other special categories of Personal Data.
4.3. The User shall determine the scope of information submitted to the Operator in an inquiry. The Operator nevertheless recommends that Users not include health information, diagnoses, or other sensitive information in messages sent through Website forms or ordinary email unless such disclosure is necessary and has been separately agreed.
4.4. The Operator shall not receive or store complete bank-card details. Entry and Processing of bank-card details shall be performed by Robokassa and/or the acquiring banks in accordance with their own policies and terms.

5. Purposes and Legal Bases for Processing

5.1. The Operator shall process Personal Data for the following purposes:

Purpose

Personal Data Processed

Legal Basis

Reviewing requests for in-person and online consultations and communicating with the User to agree on the terms, date, and format of interaction

Name, email, telephone number, preferred contact method, Telegram/WhatsApp contact, and content of the inquiry

User consent; entering into and performing a contract at the User’s initiative

Reviewing inquiries submitted through the Website, email, and messengers

Name, email, telephone number, messenger contact, and content of inquiry

User consent; the Operator’s legitimate interest in providing responses

Placing, receiving payment for, and fulfilling orders for Digital Materials

Email, name if provided, and information about the product, order, and payment status

Entering into and performing a contract with the User

Delivering e-books, PDF materials, workbooks, checklists, audio materials, webinar recordings, and links to Digital Materials

Email and information about the order and purchased material

Performance of a contract with the User

Accounting for payments, sending electronic receipts, reviewing refund requests, and complying with legal obligations

Email, name if provided, and information about the order and payment

Performance of a contract; compliance with obligations established by Russian law

Providing technical support, re-sending materials or links, and resolving delivery errors

Name, email, order and payment data, and content of inquiry

Performance of a contract; the Operator’s legitimate interest in ensuring proper delivery of Digital Materials

Ensuring Website operation and security, conducting analytics, and improving the Website

IP address, cookies, browser identifiers, browser and device information, and Website-visit and interaction data

User consent for non-essential cookies; the Operator’s legitimate interest in essential cookies and Website security

Conducting online consultations by videoconference where such format is agreed with the User

Name or display name, email or other data required to invite the User to a meeting, and connection-related technical data

Performance of a contract with the User; User consent where required

5.2. The Operator shall not send advertising or marketing communications without the User’s separately expressed consent. Service communications required to fulfill an order or respond to an inquiry, including delivery of a Digital Material or link, an electronic receipt, or a notice concerning a technical issue, shall not constitute advertising communications.
5.3. The User may decline to provide Personal Data not required for a particular purpose. However, failure to provide an email address may make payment, receipt of an electronic receipt, and automatic delivery of Digital Materials impossible.

6. Collection and Processing Procedures

6.1. The Operator may obtain Personal Data:
  • directly from the User through Website forms, email, telephone communications, Telegram, WhatsApp, and other messengers;
  • when the User places an order through the Website shopping cart;
  • from the Robokassa payment service, to the extent necessary to confirm, record, and fulfill a paid order;
  • from Unisender, to the extent necessary to automatically send Digital Materials or links and obtain technical delivery information;
  • automatically when the User visits the Website through cookies and Yandex.Metrica.
6.2. When placing an order, the User shall enter an email address in a form on the Website. That address shall be used to transmit information necessary to place and fulfill the order, including transfer of relevant data to Robokassa for payment and to Unisender for automatic delivery of the purchased Digital Material after payment has been confirmed.
6.3. The Operator uses Unisender to fulfill orders. Unisender shall receive the purchaser’s email address and information necessary to send the applicable Digital Material or a link to it following payment. Unisender shall be used for transactional delivery of paid materials and not for advertising mailings without the User’s separate consent.
6.4. When an order is paid for, payment information shall be processed by Robokassa and other payment participants in accordance with their respective policies and terms. The Operator may receive from Robokassa information concerning payment status, amount, date, and a payment or order identifier solely to the extent necessary to fulfill the order, account for payments, deliver Materials, and address User inquiries.
6.5. Certain free supplemental materials may be made available for download through links to Yandex Disk or other services identified on the Website without requiring the User to place an order or provide the Operator with an email address or other contact information. Upon following an external link, the User should review the applicable service provider’s documents.
6.6. The Operator may process Personal Data by automated and non-automated means.
6.7. The Operator shall not make decisions producing legal effects for the User or otherwise materially affecting the User’s rights and legitimate interests solely on the basis of automated Processing of Personal Data.

7. Cookies and Yandex. Metrica

7.1. The Website uses strictly necessary cookies required for proper Website operation, security, preservation of settings, and functioning of certain Website components.
7.2. Subject to the User’s consent, the Website uses analytics cookies and the Yandex. Metrica web-analytics service, operated by Yandex, to obtain website-traffic statistics, analyze use of the Website, and improve it.
7.3. Yandex. Metrica may collect de-identified or pseudonymized technical information, including information about visits, referral sources, activity on Website pages, browser type, device, operating system, approximate location, IP address, and cookie identifiers.
7.4. The User may consent to or decline analytics cookies through the Website’s cookie banner where such choice is offered. The User may also change browser settings, block cookie storage, or delete previously stored cookies. Disabling strictly necessary cookies may affect proper operation of certain Website functions.
7.5. The processing of data by Yandex shall be governed by Yandex's own policies and terms, available through Yandex’s official resources.

8. Disclosure of Personal Data

8.1. The Operator shall not disseminate Personal Data to an indefinite number of persons without the User’s separate consent, except as expressly required or permitted by Russian law.
8.2. The Operator may disclose Personal Data to third parties only to the extent necessary to achieve the purposes of Processing and perform obligations to the User, including:
  • Tilda Publishing, for operation of the Website, forms, shopping cart, and checkout process;
  • Robokassa, acquiring banks, and other payment participants, for accepting, confirming, and accounting for payments, sending electronic receipts, and, where applicable, processing refunds;
  • Unisender, for automatic transactional delivery of paid Digital Materials or links to the purchaser’s email address;
  • Yandex Mail, for processing requests, inquiries, and business correspondence with Users;
  • Yandex Disk and other technical services linked from the Website, for delivering files where materials are provided through such storage services;
  • Yandex, where Yandex. Metrica or other Yandex services are connected to the Website;
  • Zoom Video Communications, Inc. or another agreed videoconferencing service, for conducting an online consultation where the User selects that format;
  • government authorities, courts, and other persons where and as required by Russian law.
8.3. The Operator shall disclose only the minimum amount of Personal Data required for the relevant service, technical function, or performance of a contract with the User.
8.4. When following external links to third-party websites or services, including Yandex Disk, Robokassa, Zoom, and other services, the User shall make an independent decision to use those resources. The Operator recommends that the User review the relevant terms and privacy policies of such third parties.
8.5. The Operator shall not be responsible for independent actions of third parties that are not performed on the Operator’s behalf and are beyond the Operator’s reasonable control. This provision shall not relieve the Operator of obligations imposed upon it by Russian law in connection with the Processing of Personal Data.

9. Retention Periods

9.1. Personal Data shall be processed and retained for no longer than necessary to achieve the purposes of Processing, unless a different period is established by Russian law.
9.2. Data relating to consultation requests, inquiries, and business correspondence may be retained for the period necessary to address the request, organize interaction with the User, and protect the rights and legitimate interests of the parties.
9.3. Data relating to orders and payments for Digital Materials shall be retained during the term of performance of the contract and thereafter for the periods required by applicable tax, accounting, civil, and other laws of the Russian Federation.
9.4. Technical data, cookies, and analytics information shall be processed for periods established by the relevant browser settings, Yandex. Metrica, and other services actually used, or until the User withdraws consent where Processing is based on consent and may technically be stopped.
9.5. Upon achievement of the Processing purposes or withdrawal of consent, the Operator shall cease Processing and destroy or de-identify Personal Data within the time limits and in the manner established by law, unless another lawful basis for continued Processing and retention exists.

10. Cross-Border Transfers

10.1. The Operator uses Zoom for online consultations by videoconference where the User selects that form of interaction. Use of Zoom may involve Processing of certain User data outside the Russian Federation, including the User’s display name, email address if used to send a meeting invitation, and technical information related to joining a videoconference.
10.2. Before making a Cross-Border Transfer of Personal Data, the Operator shall take measures required by Russian law and shall observe requirements applicable to transfers of Personal Data to foreign states.
10.3. By selecting an online consultation through Zoom, the User acknowledges that use of the videoconferencing service is necessary to conduct the meeting. If the User does not agree to use Zoom, the User may choose an in-person consultation or arrange another available format with the Operator.
10.4. For the sale and automatic delivery of Digital Materials, the Operator uses Tilda, Robokassa, Unisender, Yandex Mail, and Yandex Disk.

11. Data-Security Measures

11.1. The Operator shall implement necessary legal, organizational, and technical measures to protect Personal Data against unlawful or accidental access, destruction, alteration, blocking, copying, disclosure, dissemination, or other unlawful actions.
11.2. Access to Personal Data shall be granted only to the extent necessary to achieve the purposes of Processing and perform obligations to the User.
11.3. The Operator shall use available organizational and technical safeguards, including restricted access to business email and service accounts, password protection, access controls for devices, and other reasonable measures appropriate to the nature of the Personal Data processed.

12. User Rights

12.1. The User shall have the right to obtain information about the Processing of Personal Data and to request correction, blocking, or deletion of Personal Data in cases provided by Russian law.
12.2. The User may withdraw consent to the Processing of Personal Data where Processing is based on consent by sending a request to jekk80@yandex.ru with the subject line "Withdrawal of Consent to the Processing of Personal Data."
12.3. The User may request correction or updating of Personal Data by sending a request to jekk80@yandex.ru with the subject line "Update of Personal Data."
12.4. Withdrawal of consent shall not affect the lawfulness of Processing carried out before such withdrawal. The Operator may continue Processing after consent is withdrawn where grounds for doing so are provided by Russian law, including the need to perform a contract, comply with legal obligations, or protect the Operator’s rights and legitimate interests.
12.5. The User may challenge actions or omissions of the Operator relating to the Processing of Personal Data before the competent authority for the protection of personal-data-subject rights or in court.

13. Final Provisions

13.1. For any questions concerning the Processing of Personal Data, the User may contact the Operator at: jekk80@yandex.ru.
13.2. The Operator may amend this Policy. Any revised version shall take effect when posted on the Website unless it specifies a different effective date.
13.3. The current version of this Policy shall remain available at: https://evgeni-orlov.ru/en/privacy.