PRIVACY AND PERSONAL DATA PROCESSING POLICY

for the website zentsova.com

Revision dated September 18, 2026.

This Policy defines the procedure for processing and protecting the personal data of users of the website zentsova.com (hereinafter referred to as the “Website”) by the individual entrepreneur Natalya Igorevna Zentsova (hereinafter referred to as the “Operator”).
1. General Provisions
1.1. The Policy was developed in accordance with the Constitution of the Russian Federation, the Federal Law No. 152‑FZ dated 27.07.2006 “On Personal Data”, and other applicable regulatory legal acts of the Russian Federation.
1.2. The Policy applies to personal data obtained by the Operator through the website zentsova.com, including through feedback forms and entries that use Tilda services, when submitting inquiries, organizing and paying for services, as well as during the technical use of the Site.
1.3. The collection of information about health status, diagnoses, treatment, use of psychoactive substances, and other special categories of personal data is not intended through the regular forms of the Site. The user is advised not to provide such information in the free fields of the form. If the processing of special categories of data is required to provide the relevant service, it is carried out separately, provided there is a legal basis and the necessary consents.
2. Operator
Individual entrepreneur Zentsova Natalya Igorevna
INN: 773131563704
OGRNIP: 322774600009854

Bank account: 40802810500002987297
Bank: JSC “TBank”
BIC: 044525974
Correspondent account: 30101810145250000974
Bank’s TIN: 7710140679
Bank’s address: 127287, Moscow, 2nd Khutorskaya Street, building 38A, building 26
E-mail for inquiries: 7226325@gmail.com
Website: zentsova.com
3. Data categories
· first name, last name, and patronymic — if the user provides them;
· phone number and email address;
· information contained in the text of the inquiry, the selected service, date and time of the appointment;
· payment and contractual information in the amount necessary to process and record the payment (the Operator does not request or store bank card data if the payment is made through a payment provider).
· technical data: IP address, cookies, information about the browser, device, source of the referral, and actions on the Website — in the volume generated by the analytics and infrastructure services used.
4. Purposes and legal grounds for processing
The Operator processes the data to respond to inquiries, record and organize the provision of services, conclude and execute contracts, carry out settlements, maintain accounting and tax records, ensure the operation and security of the Website, analyze traffic and improve the Website, and comply with legal requirements. Advertising and informational mailings that are not directly related to the execution of a contract or a user inquiry are carried out if there is a separate legal basis.
5. Actions with personal data
Personal data may be collected, recorded, systematized, accumulated, stored, clarified, extracted, used, provided in cases provided for by law, blocked, deleted, and destroyed using automation tools or without them.
6. Processing periods
Data is processed for no longer than required by the stated processing purposes, contractual relationships, and mandatory storage periods under the legislation of the Russian Federation. After the purposes are achieved, the data is deleted or destroyed unless the law requires further storage.
7. Transfer and processors
The Operator has the right to engage third parties and information services necessary for the operation of the Website and the fulfillment of obligations, including the Tilda platform/infrastructure for the operation of the Website and forms, web analytics, hosting, and communication services, as well as banks, payment organizations, payment service operators, and acquiring services. The specific bank or payment service may change. The Operator transfers to such parties only the data necessary for the relevant purpose, provided there is a lawful basis.
7.1. At the User’s initiative, further interaction may be carried out using the electronic communication means and messaging services selected by the User. When switching to a third‑party service, data processing may also be carried out by the owner of that service in accordance with its rules. The user is advised not to transmit information about their health status and other special categories of personal data through ordinary communication channels unless the channel is specifically designed for their secure exchange.

8. Localization and cross‑border transfer
When collecting personal data of Russian citizens via the Internet, the Operator ensures compliance with the requirements of Russian legislation on localization. Cross‑border transfer of personal data is carried out only if there are grounds provided for by law and after the mandatory procedures have been completed.

9. Cookies and analytics
The website uses or may use cookies and similar technologies. Yandex Metrica is enabled for traffic analysis; during its operation, technical information about the device, browser, IP address, referral source, and actions on the Website may be processed to the extent determined by the service settings. Optional technologies are applied in accordance with legal requirements and the user’s consent settings. Cookies can be restricted using browser tools, but some Website functions may not work properly.
10. Rights of the data subject
The subject has the right to receive information about the processing of their data as provided for by law, to request clarification, blocking, or deletion of the data if there are grounds, to withdraw consent, and to protect their rights in other ways provided for by law.
11. Withdrawal of consent and requests
An appeal or withdrawal of consent can be sent to the Operator at 7226325@gmail.com. To correctly identify the request, the Operator has the right to request information that will confirm the applicant’s identity and their relationship to the relevant data.
12. Data protection
The Operator takes the necessary legal, organizational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, distribution and other unlawful actions.
13. Changes to the Policy
The Operator has the right to update the Policy when the legislation, the composition of services, or the processing processes change. The current version is posted on the Website.