Privacy Policy

Controller: Anna Drapak, interior designer.

Privacy contact: Telegram @adraapak; or the inquiry form on annadrapak.com.

Website: https://annadrapak.com (including the /en locale).

When you submit an inquiry you may provide: name; phone number and/or Telegram username; project details (property type, area, indicative budget); a free-text message; optional photos of a floor plan or space.

Technical data: IP address, browser type, date and time of the request — may be processed by hosting infrastructure as needed to run the site and prevent abuse. We do not use advertising trackers or third-party ad-network analytics cookies.

The “Telegram” tab opens your Telegram client with a message draft; that message is handled by Telegram, not by the website form.

Purposes: reviewing and responding to your inquiry; discussing a possible design project; corresponding before a separate design services agreement is signed (if any).

Legal basis under 152-FZ: consent of the data subject.

Legal basis under GDPR: consent (Art. 6(1)(a)); where talks continue, steps prior to entering a contract at your request (Art. 6(1)(b)).

Submitting the form with the consent box checked constitutes consent to process the data described in this Policy. You may withdraw consent at any time by contacting the Operator.

Website inquiries are delivered to the Operator’s work chat via the Telegram Bot API. Photos attached to the inquiry may be sent the same way.

Optionally, the inquiry may also be emailed via Web3Forms (or a similar mail gateway) if the Operator has enabled it.

Recipients / processors: Telegram (messaging delivery); if enabled — Web3Forms and the email provider; the website host (e.g. Vercel or another host).

We do not sell personal data or share it with third parties for marketing.

Telegram, Web3Forms and hosting providers may process data on servers outside the Russian Federation and/or the European Economic Area.

Transfers rely on your consent and/or are limited to what is needed to handle your contact request. Those providers publish their own privacy policies; we encourage you to review them.

Inquiry data is kept in the Operator’s correspondence for as long as needed to reply and discuss the project, and typically no longer than 12 months after the last contact on that inquiry — or until consent is withdrawn / deletion is requested, unless a longer period is required by law.

Hosting technical logs follow the host’s policy and are usually short-lived.

Under 152-FZ and GDPR you may: request information about processing; ask for rectification, blocking or erasure where legally grounded; withdraw consent; restrict processing; receive a copy of your data (including in a structured format where GDPR applies); object to processing; lodge a complaint with a supervisory authority.

In Russia the authority is Roskomnadzor. In the EEA, contact your local data protection authority.

To exercise your rights, message the Operator on Telegram @adraapak or via the site form with the subject “Personal data”. We aim to respond within a reasonable time, usually within 30 days.

Access to inquiries is limited to people who need them to reply (the Operator and trusted assistants in the work chat). We use HTTPS and deliver leads to a private Telegram chat, not a public channel.

No internet transmission is perfectly secure; by submitting an inquiry you acknowledge that residual risk.

The site and inquiry form are not directed at anyone under 18. If you believe a child sent us data without a parent or guardian’s consent, contact the Operator and we will delete it.

We may update this Policy. The current version is always on this page; the update date is shown above. Material changes may also be noted on the site.