Privacy Policy

1. General provisions

This policy describes how Individual Entrepreneur Aleksandra Maksimovna Sher, OGRNIP 326784700040600, INN 780540650035, operating under the SHAR Production brand (the Controller), processes and protects personal data.

It applies to data received through sharprod.com, sharportfolio.pro, their subdomains, website forms, email, messengers and other SHAR Production communication channels. This policy provides information and does not replace the standalone consent at /en/consent-personal-data.html.

2. Controller details

Controller: Individual Entrepreneur Aleksandra Maksimovna Sher. OGRNIP: 326784700040600. INN: 780540650035.

Privacy contact: start@sharprod.com, +7 931 981 54 84. Legal correspondence address: Apartment 80, Building 1, Litera A, 10 Katernikov Street, Saint Petersburg, 198322, Russia.

3. Processing principles

Personal data is processed lawfully and fairly, for specified legitimate purposes and only to the extent necessary for those purposes. The Controller takes reasonable steps to keep the data accurate, sufficient and current.

4. People covered by this policy

The policy covers website visitors, prospective clients, individual clients and representatives of corporate clients.

5. Data we may process

The Controller may process a person’s name, email address, phone number, messenger account, company and project brief fields, the content of a request, landing page, form type, referrer, UTM fields, IP address, cookies, browser and device information, operating system, visit time and connection parameters.

The Controller does not request or intend to process special-category personal data. Do not send health information, political or religious beliefs, information about intimate life or other sensitive data through a free-text field. Accidentally received excessive data is restricted and deleted under the internal procedure.

6. Purposes

Data is used to receive and answer website enquiries, communicate with clients and prospective clients, maintain messenger correspondence, operate and improve the website, and publish a case or testimonial only where separate consent covers the personal data of an identifiable person.

7. Legal bases

The primary legal basis is the person’s consent. Where applicable, processing may also be necessary to answer the person’s request and take steps requested by that person before a possible contract.

8. Processing methods

The Controller may process data with or without automated tools and may collect, record, organise, store, update, retrieve, use, provide access to, block, delete or destroy data where this policy and Russian Federation law permit it.

Processing may take place through website forms, email, minimal Telegram notifications, Yandex Metrica, Cloudflare Turnstile when anti-spam verification is enabled and other technical systems used to operate the website and communicate. The Controller does not make decisions that create legal consequences for a person solely through automated processing.

9. Retention

Enquiry data is processed until the purpose is achieved, consent is withdrawn or one year has passed since the last interaction, whichever occurs first. Longer processing requires a separate legal or contractual basis.

Consent evidence is kept in a protected environment for no more than 365 days unless another period is required to protect rights or comply with law. The browser brief draft expires after 72 hours. When processing ends, the deletion procedure covers the mailbox, logs, Telegram notifications, analytics settings and backups.

10. Service providers and third parties

The Controller does not disclose personal data for another party’s independent use without consent, except where Russian Federation law requires or permits it.

Access may be provided only to the extent needed for website operation, message delivery, security or analytics. This may include hosting and email providers, Yandex Metrica and Cloudflare Turnstile when enabled. Telegram receives only an internal notification with the request identifier, time, form type, service category and public page path — not the user’s name, contact details or enquiry content.

11. Data localisation

When personal data of Russian Federation citizens is collected online, the Controller records, organises, accumulates, stores, updates and retrieves it using databases located in the Russian Federation to the extent required by Russian Federation law.

12. Cookies and analytics

Necessary browser storage supports website operation and remembers choices. Yandex Metrica loads only after an affirmative analytics choice. Visitors can decline analytics or restrict browser storage, although blocking necessary storage may affect some functions.

13. Your rights

A person may request information about processing, correction, blocking or deletion of personal data, withdraw consent, challenge the Controller’s actions or inaction and exercise other rights available under Russian Federation law. Requests can be sent to start@sharprod.com.

14. Security

The Controller applies legal, organisational and technical measures intended to protect personal data against unlawful or accidental access, destruction, alteration, blocking, copying, disclosure, distribution and other unlawful actions.

15. Withdrawing consent

Consent may be withdrawn at any time by emailing start@sharprod.com. To locate the data, provide the contact used for the enquiry and, if available, the request identifier. No specific subject line is required.

16. Final provisions

This policy remains in force until replaced by a new version. The Controller may update it and publishes the current version on the website. Matters not covered here are governed by Russian Federation law.