1. Data controller and scope
ARTTINA Digital Studio is a freelance design and web development practice based in Armenia. For this website, we act as the data controller for personal data that visitors send to us directly.
This policy applies to https://arttina.me, contact forms on the website, messages sent to our published contact channels and related communications about design, development, branding, SEO and digital projects.
If a separate client agreement contains specific privacy, confidentiality or data-processing terms, that agreement applies to the project work in addition to this policy.
2. Personal data we collect
When you send a request through the website form, we may collect your name, phone number, message text, project details, the page from which the request was sent and your browser user-agent.
When you contact us through email, Telegram, WhatsApp or social platforms, we process the data included in that conversation, including your account identifier, contact details, files and any project information you choose to share.
The server may also process technical data needed to operate and protect the website, including IP address, request date and time, requested URL, session identifiers, security events and basic browser or device information.
3. Purposes and legal bases
We use personal data to respond to requests, discuss project scope, prepare proposals, communicate with clients, provide services, keep records of agreed work and handle support, security or legal matters.
The legal bases may include your consent, steps taken before entering into a contract, performance of a contract, our legitimate interest in operating and protecting the website, and compliance with legal obligations.
We do not sell personal data, use it for hidden profiling or share it for third-party advertising. If analytics or advertising tools are added later, this policy should be updated before those tools are enabled.
4. Cookies, sessions and analytics
The website uses a necessary session cookie to support form security, including CSRF protection. The website may also use session storage in the browser for interface behavior such as preloader and internal navigation state.
At the time of this policy, the public website does not use third-party advertising cookies, Google Analytics, Meta Pixel, Yandex Metrica, Hotjar, Clarity or similar visitor-tracking tools.
You can restrict cookies through your browser settings, but some security or form functions may not work correctly without necessary cookies.
5. Recipients and service providers
Personal data is accessed only by people who need it to answer your request, prepare a proposal, deliver the project, maintain the website, secure the service or meet legal and accounting obligations.
We may use hosting providers, email providers, file storage, collaboration tools, messengers, payment providers and security tools. These providers process data only as needed to provide their services to us or to you.
Links to Telegram, WhatsApp, social networks, portfolio platforms and other third-party websites are governed by the privacy terms of those services. We do not control their independent data practices.
6. International transfers
Because we are based in Armenia and may work with international clients and service providers, your data may be processed in Armenia and in other countries where our providers operate.
If laws such as the GDPR apply to a specific transfer, we rely on appropriate safeguards, contractual arrangements, your request to communicate with us, performance of a contract or another lawful transfer mechanism available under the applicable law.
7. Retention
Contact-form submissions that do not lead to a project are usually kept only as long as needed to answer the request and maintain reasonable follow-up, normally no longer than 24 months after the last communication.
Project, contract, payment, accounting, support and dispute-related records may be kept for a longer period where this is required by law or reasonably needed to protect rights and document completed work.
Rate-limit and security records are kept for the period needed to prevent abuse and investigate technical incidents. Host-level server logs may be retained according to the hosting provider settings.
8. Security
We use reasonable technical and organizational measures to protect personal data against accidental loss, unauthorized access, alteration, disclosure and misuse.
No website, email system or messenger can be guaranteed as perfectly secure. Please do not send passwords, payment card details, special-category data or confidential business secrets through the contact form unless we have agreed a secure transfer method.
9. Your rights
Depending on the applicable law, you may request access to your personal data, correction of inaccurate data, deletion, restriction of processing, objection to processing, data portability and withdrawal of consent where processing is based on consent.
We may need to verify your identity before responding. We may also refuse or limit a request where the law allows or requires us to keep certain information, for example for contract, accounting, security or dispute purposes.
You may also contact the Armenian Personal Data Protection Agency or another competent data protection authority if you believe your data rights have been violated.
10. Children and sensitive data
The website is intended for business and professional communication and is not directed to children under 16. We do not knowingly collect data from children under 16 without appropriate parental or legal-representative consent.
Please do not send health data, biometric data, political opinions, religious beliefs, precise identity documents or other sensitive information through the website unless it is strictly necessary and we have agreed how it will be protected.
11. Contact and updates
Legal and privacy requests can be sent to arttina.me@gmail.com.
We may update this policy when the website, services, providers or legal requirements change. The current version is published on this page and applies from the effective date shown above.
