Privacy policy

Who is responsible

DIOXOID is a digital product studio based at Vera Khoruzhey 6A, office 4A, Minsk 220100, Belarus. We decide how personal data submitted through dioxoid.com is handled, and you can reach us about any of it at [email protected].

This policy covers this website only. It does not cover data we process for a client under a separate project agreement.

What we receive

The contact form asks for exactly what we need to reply to a business enquiry:

• your first and last name;
• your email address;
• your company and, optionally, your position;
• your message;
• whether you ticked the newsletter box;
• the language version of the site you wrote from.

Together with the enquiry our server records the IP address it came from and the time it arrived, and keeps ordinary request logs. Our hosting layer also reads a country code to send visitors of the bare domain to the English or Russian version.

We never ask for identity documents, payment details or special categories of data, so please do not include them in your message. If you email us directly instead of using the form, we handle that message on the same terms.

Why we use it, and on what basis

Each purpose has its own basis:

• answering you and discussing a possible project — your consent, given when you send the form, and the steps leading up to a contract;
• the newsletter — a separate consent, the ticked box, which you may withdraw at any time;
• keeping the site and the form working — our legitimate interest in security: the IP address and the timestamp let us block spam and stop the same address from flooding the form;
• bookkeeping and replies to lawful requests — our legal obligations.

We do not use enquiry data for advertising, profiling or automated decisions.

Who else sees it

Enquiries are read by the DIOXOID team members who answer them. Beyond us, a limited amount of data is processed on our behalf by our hosting and database provider and by the service that delivers our email, each under a contract that allows them to use it only for that service. We do not sell personal data or pass it to advertisers.

These providers may run servers outside your country, so an enquiry may be stored or transmitted abroad under the safeguards those contracts set out.

How long we keep it

We keep an enquiry for up to three years after the last message in the thread, which is how long a business conversation may realistically resume, and then delete or anonymise it. Newsletter consent is kept until you withdraw it. Technical logs are kept for a short period — normally no more than 90 days — and then rotated out. If you ask us to erase your data earlier, we do so unless the law requires us to keep a specific record.

Cookies and local storage

The website needs no cookies to show you a page, and it carries no analytics, advertising or social network trackers.

• The notice at the bottom of the screen stores your “OK” in your browser’s local storage so it is not shown again. It stays on your device and is never sent to us.
• Session cookies exist only for our own team when they sign in to the admin panel, and for editors previewing an unpublished draft.

The cookie policy explains this in more detail.

How we protect it

The site is served over HTTPS, enquiries are stored in a database that is not publicly exposed, and access to them requires a personal account with the rights for it. No transmission over the internet can be guaranteed to be completely secure, so please do not send us confidential material in a first message.

Your rights

You may ask us to confirm whether we hold your data and to give you a copy, to correct it, to delete it, to stop or restrict a particular use, and to withdraw a consent you gave. Withdrawing consent does not affect what was done while it was in force.

Write to [email protected] with “Personal data” in the subject line. We reply within the period the applicable law sets — normally within fifteen days — and may ask one question to make sure we are answering the right person. If our answer does not satisfy you, you can complain to the supervisory authority: in Belarus the National Personal Data Protection Centre, or the authority of your country of residence in the European Economic Area.

Children

This website addresses businesses and we do not knowingly collect data about children. If a child has sent us something, write to us and we will delete it.

Changes

When this policy changes we publish the new version on this page and update the effective date at the top. If a change materially affects you, we will say so on the site rather than leave it to be noticed.