Personal Data Processing Policy
1. Scope
This Policy applies to visitors of indossa.studio, prospective clients, clients, business representatives and recipients of business correspondence. We process only information reasonably necessary for stated purposes.
2. Data we process
- website data: IP address, browser and device information, technical logs, cookies and site activity data;
- inquiry and client data: name, email, phone or WhatsApp, company and role when supplied, message content, product links, uploaded files and images, order and payment information;
- business contacts: name, role, corporate email, telephone and other contact information published by a company or provided in business correspondence.
We do not request passport, medical or biometric data. Do not upload photos of people, identity documents or third-party personal data without a lawful basis and the required permissions.
3. Purposes and legal bases
We process data to answer inquiries, prepare proposals, enter into and perform contracts, create AI garment visuals, process payments and tax records, maintain business correspondence, secure and improve the website, and measure traffic after analytics consent. Legal bases may include consent, pre-contractual steps, contract performance and legal obligations.
4. Service providers and processing locations
- Yandex Cloud — website hosting, form intake, initial recording and storage of inquiries and uploaded files on infrastructure located in the Russian Federation;
- Zoho Mail — email delivery and storage when a user contacts the operator directly by email;
- Yandex LLC — Yandex Metrica after consent; session replay is disabled;
- Prodamus and payment partners — payment processing on an external payment page.
Website form submissions are initially recorded and stored in the Russian Federation. Direct email correspondence may be processed through the operator’s email provider and is handled only to the extent required to respond and provide the service.
5. Retention
Inquiry and business correspondence may be retained until the purpose is completed, consent is withdrawn, or for up to three years after the last interaction. Contract, payment and tax records are retained for periods required by law.
6. Cookies
Necessary technical data supports page delivery and preference storage. Yandex Metrica loads only after you choose “Allow analytics”. You can reopen cookie settings using the footer link or clear site data in your browser.
7. Your rights
You may request access, correction, restriction or deletion, withdraw consent, or object where applicable. Send requests to hello@indossa.studio. We may request information needed to verify the requester.
8. Security and updates
We apply reasonable organizational and technical safeguards and limit access to data. The current version of this Policy is published on this page.