Privacy policy

1. Data controller

The controller is Artsiom Marozau, a sole trader operating as AMAR SYSTEMS ARTSIOM MAROZAU and using the AMAR Studio brand. Business and contact details appear above. Contact our business email about personal data and exercising your rights.

2. Data we receive

We receive information you send in a short or detailed brief, email or message. Do not include passwords, access keys, your customers’ personal data or special categories of personal data.

• Name and your chosen reply channel and contact: email, telephone number, username or profile link.
• Business country, project description, service and features, preferred timing, indicative budget, links and additional answers.
• Submission date, form language and technical request ID.
• Technical request data, including IP addresses, is processed to operate and protect the site. The rate-limit table uses a pseudonymous HMAC code instead of the IP address; pseudonymisation is not full anonymisation.

3. Purposes and legal bases

We process only data needed for the relevant purpose.

• Responding to your request and preparing a proposal at your initiative: Article 6(1)(b) GDPR where a possible contract with you is concerned.
• Correspondence with company representatives and other business enquiries: Article 6(1)(f), our legitimate interest in handling correspondence and enquiries.
• Abuse prevention and site security: Article 6(1)(f), our legitimate interest in secure operation.
• Entering into and performing a contract: Article 6(1)(b); statutory records and legal obligations: Article 6(1)(c); establishing, exercising or defending legal claims: Article 6(1)(f).
• Optional browser drafts: your choice and consent under Article 6(1)(a). Disabling draft storage does not prevent submission.

4. Recipients and services

Hostido hosts the website, form handler and contact@amarstudio.eu mailbox. The selected server is in Gdansk, Poland. Processing and logging terms must be confirmed before publication.

Telegram delivers and stores the full brief, contact details and text file in our work chat with the bot. This is a cloud chat, not an end-to-end encrypted secret chat. Visitors do not need a Telegram account. Direct email is an alternative.

Sanity provides project content and images and may receive network metadata when external resources load.

New forms in this version do not send answers to Supabase or Resend. Earlier briefs and correspondence in those services and Gmail have not been automatically deleted and remain subject to retention review.

• Telegram privacy policy
• Hostido documents

5. Processing outside the EEA

Hosting in Poland does not mean all processing stays in the EU. Telegram and other external providers may process data outside the EEA. The assessment of actual terms, roles and international transfer grounds must be completed before public launch. This policy remains a draft and does not certify completed GDPR compliance.

• Telegram privacy policy

6. Retention

Enquiries without a contract are retained for up to 12 months after the last substantive contact. We then review and delete our copies from work chats, email and documents unless another basis applies. This is a manual procedure; automatic Telegram deletion is not configured.

Contracts, accounting records and claims are subject to applicable legal periods. Agreed scope and contracts are kept separately from original briefs.

The handler does not store answers in a separate database or local server archive. Anti-spam and retry records contain keyed digests of IP and submission, counters, delivery status and dates. Records older than 24 hours are cleaned on the next request, not by a continuous timer. Hostido logs and backups have their own periods that must be confirmed before launch.

Messages and the file remain in Telegram cloud chat until deletion under our procedure; device and provider copies depend on settings and provider terms. Earlier Supabase, Resend and Gmail records are not deleted by switching delivery.

7. Cookies, drafts and external links

The current public site has no web analytics, advertising pixels or session recording. Draft storage is off by default and is not required to submit a form.

• If enabled, answers and contact details are stored in this browser’s localStorage on your device, separately by language and brief type. Until you press Send, this draft is not sent to us.
• A draft can be restored within seven days of its last save. An expired entry is removed when the relevant form is next opened; a closed browser cannot guarantee background deletion.
• Disabling storage, using Delete draft or successfully submitting removes the current form’s draft. Clearing site data in your browser removes all local copies. Avoid saving on shared devices.
• Telegram and WhatsApp links open those services only when clicked; there are no embedded chats. Separately, submitting a completed form sends the brief through our server to Telegram as described above.
• External dashboards and services may use their own cookies when visited. These are separate from the public AMAR Studio website. Analytics and advertising trackers are not currently installed.
• When you explicitly choose a language, the amar_language cookie remembers it for up to 12 months. It does not store your country, currency or form answers. You can reset this preference by clearing site data in your browser.

8. Your rights

Subject to the legal basis and GDPR conditions, you can request access and a copy, rectification, erasure, restriction and portability. You can object to processing based on legitimate interests for reasons relating to your particular situation.

You can withdraw consent prospectively without affecting earlier lawful processing. For browser drafts, switch storage off and delete the entry. Email us to exercise your rights; proportionate identity verification may be necessary.

We respond without undue delay, normally within one month. If GDPR permits an extension, we will explain it within the first month. You may complain to a supervisory authority, including the President of UODO in Poland, or the authority in your habitual residence, workplace or place of the alleged infringement.

• UODO — data protection authority

9. Optional provision and automated decisions

Providing data is voluntary. The form requires a task description, business country and chosen reply contact; without them we cannot process a form enquiry. You can contact us directly instead. Other answers are optional.

We do not use briefs for solely automated decisions with legal or similarly significant effects or set prices automatically from visitor profiles. Abuse controls may temporarily block submission; direct contact remains available.

We do not use enquiries for advertising mailings without a separate legal basis and any required permissions.

10. Policy updates

We update this page and its revision date when services, purposes or processing methods change. This version describes Hostido hosting and Telegram brief delivery. Outstanding checks are identified at the beginning of the document.