Privacy Policy

1. Who is responsible

The data controller for volkov.am is Maksim Volkov IE (Individual Entrepreneur), TIN 2103840819, N. Shengavit 11 Str., Bldg. 37, Apt. 7, Yerevan 0074, Armenia.

This policy explains what personal data we handle, why, and what you can ask us to do about it. It covers this website and our direct communication with prospective and current clients.

2. What we collect

We have deliberately kept this website simple. There is no contact form, no account system and no newsletter signup on volkov.am. As a result, we collect very little:

2.1. Data you send us yourself

If you write to us by email or Telegram, we receive whatever you choose to include — typically your name, email address or Telegram handle, your company, and the content of your message. If we go on to work together, we also process the business and billing details needed for a contract and invoices.

2.2. Technical data from your visit

Our hosting provider records standard server logs when a page is requested: IP address, date and time, requested URL, HTTP status, referring page, and browser user-agent string. These logs exist to keep the site running and to investigate abuse or faults.

2.3. Your language preference

When you switch the site between Russian and English, that choice is stored in your browser's local storage under the key vlk-lang. It stays on your device, is not sent to us, and is not used to identify or track you. Clearing your browser data removes it.

3. Why we use it

We do not sell personal data, and we do not share it for anyone else's marketing.

4. Cookies and local storage

volkov.am sets no cookies of its own. The only thing we store on your device is the language preference described in section 2.3, which is technically necessary for the site to remember the language you picked.

5. Who else is involved

Very few third parties see anything at all. This site loads no external scripts, no CDN and no third-party fonts — the typefaces are served from our own domain, so rendering a page on volkov.am does not hand your IP address to anyone else. What remains:

• Hosting provider (Beget). Serves the website and keeps the server logs described above.
• Telegram. If you contact us through Telegram, your message and profile data are processed by Telegram under its own terms.
• Email provider. Messages sent to our address are stored on our mail provider's servers.

6. Client project data

When we build or maintain a system for a client, we may be given access to data belonging to that client and its users. In that situation we act as a processor on the client's instructions, not as the controller. We use such access only for the agreed work, keep it confidential, and return or delete it at the end of the engagement on request. Where the GDPR requires a data processing agreement, we sign one.

7. International transfers

We are based in Armenia and work with clients worldwide, so personal data may be processed outside your country, including outside the EEA. Where we transfer data from the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, or on the transfer being necessary to perform a contract with you.

8. How long we keep it

• Enquiries that do not lead to work — up to 12 months, then deleted.
• Client correspondence and project records — for the duration of the engagement and up to 3 years afterwards.
• Accounting and tax records — for the period required by Armenian law.
• Server logs — short-term, per our hosting provider's retention settings.

9. Your rights

Depending on where you live, you have some or all of the following rights over your personal data: to access it, to have it corrected, to have it deleted, to restrict or object to its processing, to receive it in a portable format, and to withdraw consent where processing is based on consent.

Residents of the EEA and the UK have these rights under the GDPR. California residents have comparable rights under the CCPA/CPRA, including the right to know and the right to delete; we do not sell or share personal information as those terms are defined there.

To exercise any of them, write to us at the address in section 13. We answer within 30 days. We may need to confirm your identity first. If you believe we have handled your data badly, you can complain to your local data protection authority — but we would appreciate the chance to fix it first.

10. Security

The site is served over HTTPS. Access to correspondence and project systems is limited to people who need it, protected by strong authentication, and reviewed when an engagement ends. No system is perfectly secure; if a breach affects your data and the law requires notification, we will notify you and the relevant authority without undue delay.

11. Children

This is a business-to-business website. It is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe we have, contact us and we will delete it.

12. Changes to this policy

We update this policy when our practices change. The date at the top of the page shows the current version. For material changes we will make the update visible on the site rather than changing it quietly.

13. Contact