Who is responsible for your data
The controller of the personal data described in this policy is Martin Mednikarov.
You can reach the controller through the contact form.
What is collected, and how
If you send a message through the contact form. Your name, your email address, the inquiry type you select and the content of your message. A bot-protection check (Cloudflare Turnstile) also runs on the form; it assesses the request, not you.
If you book a consultation. The booking is handled by Calendly, which collects your name, email address, time zone, chosen slot and your answers to the short questionnaire in the booking form. Those answers are free text and may contain material about your project — see “Confidentiality of what you share” below.
If you pay for a consultation. Payment is taken as part of the booking, on Calendly’s booking page, and processed by Stripe. Stripe collects the payment details you enter there. Card details are never entered on, seen by, or stored by this website.
When you browse the site. Aggregate, cookieless analytics (Umami) records page views, referrer and approximate country. It does not set cookies, does not fingerprint you, does not track you across sites and does not build a profile of you. Standard server logs are kept by the hosting provider for security and reliability purposes.
Why it is processed
- To answer your inquiry.
- To deliver and administer a consultation you have booked, including sending confirmations.
- To take payment for a consultation.
- To understand, in aggregate, how the site is used.
- To keep records required by law, including tax and accounting records.
Legal basis
- Answering your inquiry — your request, and the legitimate interest in replying to it.
- Delivering a booked consultation and taking payment — performance of a contract with you.
- Aggregate analytics and bot protection — legitimate interest in a site that works and is not abused, balanced against a deliberately non-identifying, cookieless implementation.
- Record keeping — legal obligation.
Who processes your data
| Processor | What it handles |
|---|---|
| Calendly | Scheduling, booking details, questionnaire answers |
| Stripe | Payment processing, as part of the Calendly booking |
| Google (Google Meet) | The video session itself |
| Resend | Delivery of contact-form messages |
| Umami | Cookieless, aggregate analytics |
| Vercel | Hosting the website and the contact form; server logs |
| Cloudflare (Turnstile) | Bot protection on the contact form |
| Email provider | The inbox that receives and stores messages and bookings |
Each of these processes data under its own privacy notice. No personal data is sold, and none is shared for advertising.
International transfers
Several of the processors above operate outside the European Economic Area, so your data may be transferred and stored outside it under the safeguards those providers offer, such as the European Commission’s standard contractual clauses or, for providers in the United States, the EU–US Data Privacy Framework.
How long it is kept
- Messages you send through the contact form are kept for up to 12 months after our last exchange, then deleted.
- Booking records in Calendly, including your answers to the booking questions, are kept for up to 12 months after your session, then deleted.
- Payment records are kept for as long as tax and accounting law requires. Stripe also keeps its own records, under its own policy.
Your rights
You can ask for access to the personal data held about you, correction of it, erasure of it, restriction of its processing, a copy of it in a portable form, and you can object to processing based on legitimate interests. To exercise any of these, use the contact form. There is no charge, and a response will be sent within the period required by law.
Cookies
This site sets no cookies of its own, and no non-essential cookies. Analytics are cookieless and aggregate, which is why you are not asked to dismiss a consent banner. Calendly and Stripe set their own cookies inside the booking and payment steps, under their own notices.
Confidentiality of what you share
Material you share for the purpose of a consultation — a premise, a script, a treatment, a budget, a financing plan — is treated as confidential and is not disclosed to third parties. This is set out in the consultation terms.
Please share a link rather than an attachment, and share only what the session needs.
Security
The site is served over HTTPS. No card details are handled by the site. Only the data needed to answer you or to run your session is collected.
Children
This service is intended for professional adults and is not directed at children.
Complaints
If you believe your data has been handled improperly, you can complain to the data protection authority in the EU country where you live or work, or where you believe the problem happened.
Changes
This policy may be updated. The date at the top of this page is the date of the current version.