1. General

This Privacy Policy describes how personal data is collected, used, and protected when you use gilazov.com (the "Site").

Data controller: Ruslan Rashidovich Gilazov (individual (natural person)).

The controller is registered in the personal data operators registry maintained by Roskomnadzor (Russian Federal Service for Supervision of Communications, Information Technology and Mass Media), registration number 78-26-214020, dated 24.06.2026.

This policy is prepared in accordance with applicable Russian personal data legislation, including Federal Law No. 152-FZ of July 27, 2006 "On Personal Data".

2. Purposes of processing

We process personal data for the following purposes:

• preparing, concluding, and performing civil-law contracts — including purchase agreements for artworks, commissioned works (portraits and other pieces), arranging delivery and payment, and reserving works listed in the Site's Sale section.

3. Categories of data subjects

• Site visitors who submit a request to purchase or commission a work;
• users who contact the controller to discuss entering into a contract (including via the Site's Telegram bot, email, or order form).

4. Categories of personal data

For these purposes, we may process:

• name or the name provided in your request;
• phone number;
• email address;
• city (for delivery estimates);
• message content, order comments, and other details you voluntarily provide when discussing a contract;
• Telegram user ID — when you contact us via the Telegram bot about a purchase, commission, or other contract.

We do not request special categories of personal data or biometric data.

5. Legal bases

• your consent to processing;
• processing necessary to conclude or perform a contract to which you are a party.

6. Processing activities

We may collect, record, store, use, delete, or destroy personal data.

Processing may be carried out with or without automated means.

7. Retention period

Personal data is kept for no longer than 3 years after the processing purpose is fulfilled, the contract ends, or consent is withdrawn — whichever occurs first — unless a longer period is required by law or contract.

After that period, data is deleted or anonymized unless further retention is legally required.

8. Sharing with third parties

To fulfill contracts and notify the controller of requests, data may be shared with:

• the hosting provider where the Site and order database are stored — only as needed to store your request;
• delivery services or other contractors — only as needed to perform the contract, at the controller's discretion when arranging a sale.

The controller does not transfer personal data across borders.

9. Security measures

We apply legal, organizational, and technical measures to protect personal data from unauthorized access, destruction, alteration, blocking, copying, or disclosure, including:

• use of secure connections (HTTPS);
• restricted access to the order database and administrative areas;
• storage on servers with controlled access.

10. Your rights

You have the right to:

• obtain information about how your personal data is processed;
• request correction, blocking, or deletion if data is incomplete, outdated, or unlawfully processed;
• withdraw consent to processing;
• lodge a complaint with Roskomnadzor or a court.

11. Contact

For requests, withdrawal of consent, or other privacy-related inquiries, email website@gilazov.ru.

Please include your name and a contact method for our reply. We will respond within the time limits set by applicable law (typically within 30 days).

12. Updates

We may update this Policy. The current version is always available at https://gilazov.com/privacy.

By submitting a purchase request on the Site or contacting us about a contract, you confirm that you have read this Policy.