Personal data processing policy

Effective from 11.10.2026

Controller

Sole proprietor Roman Varisovich Nurislamov · Tax ID 027621069441 · Primary registration number 326028000146909
26A Veernaya Street, Apt. 314, Moscow 119501, Russia
info@touchled.ru · +7 905 533-50-45

Who and what this policy covers

This policy applies to website visitors and people who request equipment selection, a quotation, a service, rental or feedback. We process a name, phone number, stated city, selected items and project or enquiry details, together with the date, time and version of consent. The forms do not request sensitive-category or biometric personal data.

Purposes and legal basis

The data is used to validate an enquiry, contact the sender, select equipment or services and prepare a quotation. Processing is based on the consent given by a separate action before submitting the form and on steps requested before entering into a contract. Form consent does not cover marketing messages.

Where and how data is processed

The website runs on Timeweb Cloud. The server validates the form and sends it directly to the operator’s corporate mailbox on Mail.ru. The application does not write enquiry content, names, phone numbers or comments to its database, files, application logs, browser storage or analytics. Enquiries are processed on infrastructure in the Russian Federation and are not transferred abroad.

To protect the form, the server temporarily keeps a random enquiry reference, content hash and delivery outcome (up to one hour), plus a hashed network address and request counter (up to 15 minutes) in process memory. They contain no enquiry text and disappear when the application restarts or after a short technical period. Standard hosting logs may contain a network address, request time, page address and browser information; form fields are not included in page URLs.

Recipients and retention

Only TOUCHLED staff who need the enquiry to respond can access it. Timeweb Cloud operates the website and Mail.ru delivers and stores the email in the corporate mailbox. The email is deleted after the response and completion of the enquiry, and where no contract is entered into, no later than 30 days after the processing purpose is achieved or consent is withdrawn, unless applicable law requires related records to be retained.

Telegram staff notifications contain only the service reference and enquiry type, plus the corporate mailbox address. Names, phone numbers, comments, cities, project parameters and other visitor-entered information are not sent to Telegram. Staff access the full enquiry in corporate email. Service notifications follow the same deletion period as emails. Personal data is not sold or disclosed for third-party advertising.

Local data and analytics

The cart, comparison, favourites, contact-free configurator draft and selected city are stored only in the user’s browser and can be removed in the interface or browser settings. Location used to select a city is processed in the browser and is not included in an enquiry. Yandex Metrica loads only after separate analytics permission; names, phone numbers, comments, search text and project parameters are not sent in events. Session Replay, click maps and automatic form collection are disabled.

Rights and withdrawal

You may request information about processing, correction, restriction or deletion of data, or withdraw consent. Send a request identifying the name and phone number used in the form to info@touchled.ru. The controller will stop processing and delete the data within the period required by law unless another lawful basis applies.