PERSONAL DATA PROCESSING POLICY
Last updated: May 2026
1. Introduction
Unfort (“we”, “us”) respects your privacy and takes data protection seriously. This policy explains what data we collect, why we need it, how we protect it, and what rights you have.
This policy applies to everyone who visits unfortstudio.com or places an order with us.
2. Definitions
Personal data — any information that identifies or can identify you as a person.
Processing — anything we do with that data: collecting, storing, using, transferring.
Controller — Unfort. We decide what data is collected and what it’s used for.
Processor — a third party (like Cloudpayments or BXB) that handles data on our behalf.
3. What we collect
When you register or place an order:
• Full name
• Email address
• Phone number (needed for delivery)
• Shipping address and billing address
• Payment details — processed directly by Cloudpayments, we never see or store your full card number
Order information:
• What you bought, when, and for how much
• Delivery address and tracking details
When you use our site:
• IP address
• Browser and device type
• Pages you visited and how long you stayed
• Where you came from (referrer)
• Products you viewed or added to cart
This is collected via Google Analytics and cookies.
When you contact us:
• The content of your message
• Your conversation history with our support
• Any files you send us
4. Why we process your data
We process your data based on the following legal grounds:
To fulfil your order — processing payments, shipping your package, sending order confirmations, resolving issues.
Legal obligations — tax records, fraud prevention, compliance with applicable laws.
Legitimate interest — improving the site, understanding what works and what doesn’t, keeping things secure.
Your consent — if you signed up for marketing emails. You can withdraw this at any time.
5. How we use your data
We use it to process and ship your order, keep you updated on delivery, respond to your questions, and handle returns.
For analytics — to understand how the site is used and improve it.
For communication — order confirmations are always sent. Marketing emails about new collections are only sent if you agreed to receive them.
What we don’t do:
• We don’t sell your data
• We don’t share it with advertising companies
• We don’t use it for targeted ads on other platforms
• We don’t share it without your consent, except where the law requires it
6. How we protect your data
• 256-bit SSL encryption across all pages
• Payments handled by Cloudpayments, PCI-DSS Level 1 compliant
• Data stored on secure servers in protected data centers
• Only staff who need access to data have it
• All staff sign a confidentiality agreement
• Regular security audits
7. Third-party services
We work with the following partners:
Cloudpayments — payment processing. PCI-DSS compliant. We never receive your full card details. Privacy policy: static.cloudpayments.ru/docs/policy-cloudpayments.pdf
BXB — delivery. They receive your name, address, and phone number — only what’s needed to deliver your order. Privacy policies: bxb.delivery/en/b2b/privacypolicy
Google Analytics — site performance analytics, anonymized. No access to payment data. Privacy policy: google.com/policies/privacy
These companies cannot use your data for their own marketing.
8. How long we keep your data
Order and payment records — 7 years (tax law requirement).
Support and returns history — 3 years (for dispute resolution).
Marketing preferences — until you unsubscribe.
Account data — until you ask us to delete it.
After these periods, data is deleted securely. We may keep anonymized aggregate statistics.
9. Your rights
For EU customers (GDPR):
Right to access — you can request a copy of all data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your data, unless we’re legally required to keep it.
Right to restrict processing — you can ask us to limit how we use your data in certain situations.
Right to data portability — you can receive your data in a structured format and transfer it to another service.
Right to object — you can object to certain types of processing.
Right to complain — if you believe we’ve violated your rights, you can file a complaint with your national data protection authority.
For California customers (CCPA):
Right to know — what data we collect, use, and share.
Right to delete — you can ask us to delete your personal data (with legal exceptions).
Right to opt out — you can opt out of the sale of your data. We don’t sell it, but the right stands.
Right to non-discrimination — we will not treat you differently for exercising any CCPA rights.
To exercise any of these rights: Email support@unfort.ru, tell us what you need, and confirm your identity. We’ll respond within 30 days.
10. International data transfers
We may process your data across different countries. If data is transferred from Europe to countries without equivalent data protection standards, we use Standard Contractual Clauses approved by the European Commission.
Questions about this — write to us.
11. Cookies
We use cookies to keep you logged in, track site performance, personalize your experience, and prevent fraud.
You can disable cookies in your browser settings. Some features of the site may not work properly without them.
12. Minimum age
Our site is not intended for anyone under 18. We don’t intentionally collect data from minors. If we discover that we have, we delete it immediately.
If you’re concerned a minor has provided us with information, contact us.
13. Changes to this policy
We may update this policy at any time. If the changes are significant, we’ll notify you by email.
Continuing to use the site after changes are posted means you accept the updated policy.
14. Contact
Questions or concerns about your data:
Email: support@unfort.ru Response time: usually within 24–48 hours
EU customers: you can also file a complaint with your national data protection authority.
California customers: California Attorney General — oag.ca.gov
Unfort — All things are considered.
Last updated: May 2026
1. Introduction
Unfort (“we”, “us”) respects your privacy and takes data protection seriously. This policy explains what data we collect, why we need it, how we protect it, and what rights you have.
This policy applies to everyone who visits unfortstudio.com or places an order with us.
2. Definitions
Personal data — any information that identifies or can identify you as a person.
Processing — anything we do with that data: collecting, storing, using, transferring.
Controller — Unfort. We decide what data is collected and what it’s used for.
Processor — a third party (like Cloudpayments or BXB) that handles data on our behalf.
3. What we collect
When you register or place an order:
• Full name
• Email address
• Phone number (needed for delivery)
• Shipping address and billing address
• Payment details — processed directly by Cloudpayments, we never see or store your full card number
Order information:
• What you bought, when, and for how much
• Delivery address and tracking details
When you use our site:
• IP address
• Browser and device type
• Pages you visited and how long you stayed
• Where you came from (referrer)
• Products you viewed or added to cart
This is collected via Google Analytics and cookies.
When you contact us:
• The content of your message
• Your conversation history with our support
• Any files you send us
4. Why we process your data
We process your data based on the following legal grounds:
To fulfil your order — processing payments, shipping your package, sending order confirmations, resolving issues.
Legal obligations — tax records, fraud prevention, compliance with applicable laws.
Legitimate interest — improving the site, understanding what works and what doesn’t, keeping things secure.
Your consent — if you signed up for marketing emails. You can withdraw this at any time.
5. How we use your data
We use it to process and ship your order, keep you updated on delivery, respond to your questions, and handle returns.
For analytics — to understand how the site is used and improve it.
For communication — order confirmations are always sent. Marketing emails about new collections are only sent if you agreed to receive them.
What we don’t do:
• We don’t sell your data
• We don’t share it with advertising companies
• We don’t use it for targeted ads on other platforms
• We don’t share it without your consent, except where the law requires it
6. How we protect your data
• 256-bit SSL encryption across all pages
• Payments handled by Cloudpayments, PCI-DSS Level 1 compliant
• Data stored on secure servers in protected data centers
• Only staff who need access to data have it
• All staff sign a confidentiality agreement
• Regular security audits
7. Third-party services
We work with the following partners:
Cloudpayments — payment processing. PCI-DSS compliant. We never receive your full card details. Privacy policy: static.cloudpayments.ru/docs/policy-cloudpayments.pdf
BXB — delivery. They receive your name, address, and phone number — only what’s needed to deliver your order. Privacy policies: bxb.delivery/en/b2b/privacypolicy
Google Analytics — site performance analytics, anonymized. No access to payment data. Privacy policy: google.com/policies/privacy
These companies cannot use your data for their own marketing.
8. How long we keep your data
Order and payment records — 7 years (tax law requirement).
Support and returns history — 3 years (for dispute resolution).
Marketing preferences — until you unsubscribe.
Account data — until you ask us to delete it.
After these periods, data is deleted securely. We may keep anonymized aggregate statistics.
9. Your rights
For EU customers (GDPR):
Right to access — you can request a copy of all data we hold about you.
Right to rectification — you can ask us to correct inaccurate or incomplete data.
Right to erasure — you can ask us to delete your data, unless we’re legally required to keep it.
Right to restrict processing — you can ask us to limit how we use your data in certain situations.
Right to data portability — you can receive your data in a structured format and transfer it to another service.
Right to object — you can object to certain types of processing.
Right to complain — if you believe we’ve violated your rights, you can file a complaint with your national data protection authority.
For California customers (CCPA):
Right to know — what data we collect, use, and share.
Right to delete — you can ask us to delete your personal data (with legal exceptions).
Right to opt out — you can opt out of the sale of your data. We don’t sell it, but the right stands.
Right to non-discrimination — we will not treat you differently for exercising any CCPA rights.
To exercise any of these rights: Email support@unfort.ru, tell us what you need, and confirm your identity. We’ll respond within 30 days.
10. International data transfers
We may process your data across different countries. If data is transferred from Europe to countries without equivalent data protection standards, we use Standard Contractual Clauses approved by the European Commission.
Questions about this — write to us.
11. Cookies
We use cookies to keep you logged in, track site performance, personalize your experience, and prevent fraud.
You can disable cookies in your browser settings. Some features of the site may not work properly without them.
12. Minimum age
Our site is not intended for anyone under 18. We don’t intentionally collect data from minors. If we discover that we have, we delete it immediately.
If you’re concerned a minor has provided us with information, contact us.
13. Changes to this policy
We may update this policy at any time. If the changes are significant, we’ll notify you by email.
Continuing to use the site after changes are posted means you accept the updated policy.
14. Contact
Questions or concerns about your data:
Email: support@unfort.ru Response time: usually within 24–48 hours
EU customers: you can also file a complaint with your national data protection authority.
California customers: California Attorney General — oag.ca.gov
Unfort — All things are considered.