Legal
Privacy Policy
Last updated: September 27, 2026
1. Who we are
This Privacy Policy explains how personal information is collected and used on hvalic.com (the “Website”). The Website is operated by Maxim Samokhvalov, an independent product designer based in Russia (“I”, “me”, “my”).
Because I’m based in Russia, my processing of personal data is also governed by Russian Federal Law No. 152-FZ “On Personal Data”. The Russian-language version of my policy under that law is available here.
Questions about this Policy or your data: sparx.freelance@gmail.com.
2. What I collect and why
| Purpose | Information | Legal basis (GDPR) |
|---|---|---|
| Replying to your request: a website audit, a quote or a project discussion | The website link and the contact (email, WhatsApp number or Telegram username) you enter in the form | Steps taken at your request before entering into a contract (Art. 6(1)(b)) |
| Keeping the Website running and secure | IP address, browser and device details, date and time of the request (hosting server logs) | Legitimate interests (Art. 6(1)(f)) |
| Understanding how visitors use the Website | Cookies, IP address, browser and device details, referral source, on-page actions (views, clicks, scrolling) — via Yandex Metrica | Your consent in the cookie banner (Art. 6(1)(a)); analytics does not load without it |
I don’t ask for and don’t intend to collect sensitive information (health, religion, political views, biometrics and the like). Please don’t include it in the form.
3. Who processes the information
I use a few service providers to run the Website:
- Vercel Inc. (USA) — hosting. Form submissions pass through its servers in transit and are not stored there.
- Yandex LLC (Russia) — Yandex Mail, where form submissions are delivered and stored, and Yandex Metrica analytics (only after you accept cookies).
- Telegram — a copy of each submission is sent to me as a notification.
I do not sell or share your personal information for cross-context behavioral advertising, and I don’t disclose it to anyone else unless required by law.
4. International transfers
I’m based in Russia, and the providers above are located in Russia and the USA. If you are in the European Economic Area, the UK or Switzerland, your information will be transferred to countries that may not offer the same level of protection as your home country. I transfer form data because it is necessary to respond to your request (Art. 49(1)(b) GDPR), and I only send what is needed for that.
5. How long I keep it
Form submissions are kept for up to 12 months after the last contact, unless we sign a contract — then for as long as the contract and the applicable law require. Analytics data is kept by Yandex Metrica according to its own retention settings.
6. Your rights
Depending on where you live, you may have the right to:
- know what personal information I hold about you and get a copy;
- have it corrected or deleted;
- object to or restrict its processing;
- withdraw your consent to analytics cookies at any time;
- lodge a complaint with your local data protection authority (for EEA/UK residents).
California residents have the rights to know, delete and correct their personal information and not to be discriminated against for exercising these rights. Since I don’t sell or share personal information, there is nothing to opt out of.
To make a request, email sparx.freelance@gmail.com. I’ll reply within 30 days.
7. Cookies and analytics
The Website uses Yandex Metrica, including its Session Replay (Webvisor) feature, to understand how pages are used. Metrica sets cookies and loads only after you click “Accept” in the cookie banner. Anything you type into the form is not recorded by Session Replay. Yandex processes this data under its Privacy Policy.
You can change your choice at any time via “Cookie settings” at the bottom of the Website, or block and delete cookies in your browser.
8. Security
The Website is served over HTTPS, access to submissions is limited to me, service credentials are stored securely, and the form is protected against automated spam. No method of transmission over the internet is completely secure, but I take reasonable measures to protect your information.
9. Children
The Website is intended for businesses and is not directed to children under 16. I don’t knowingly collect information from them.
10. Changes
I may update this Policy from time to time. The date at the top shows when it was last changed.