Privacy

The controller for the purposes of the GDPR is the ATOM architecture and design bureau in Tashkent, Uzbekistan.

Only what you type into the contact form yourself, and three values the server derives from the request.

• Your name. Required.
• Your phone number. Required, and stored exactly as you write it.
• Your message — what you tell us about your project. Required.
• The area in square metres. Optional.
• The language of the page you wrote from.
• The path of that page with everything after the question mark removed — so “/en/projects/charvak-villa”, not the parameters behind it.
• The time you pressed send.

Not stored: your IP address, your browser or device, the full referring link with its parameters, or your email address. There is no column in our database for any of them.

One exception, named rather than hidden behind the words “not stored”: when you press send, the server counts how many forms have arrived from the same internet address in the last ten minutes, so that bulk automated submissions can be turned away. What it keeps for that is not the address but an irreversible check value computed from it; that lives in memory only, is written to no file and no log, and never reaches your enquiry.

There are no advertising networks, no profiling and no automated decision-making.

Because you asked for a quote. The lawful basis is Art. 6(1)(b) GDPR — steps taken at your request before entering into a contract. Without a name and a number we cannot answer you.

Marketing is a different thing and needs your separate consent. We send no newsletter, the form asks for no such consent, and your enquiry on its own is not one.

• This site runs on Vercel, which processes your request technically so that the page is served.
• Your enquiry is stored in a Postgres database at Neon. That database is in the United States — in the AWS “us-east-1” region, Northern Virginia. That is the copy of record.
• At the same time a notification goes to a private Telegram chat belonging to the studio, so that somebody answers the same day. That message carries your name, your phone number, the area, the language and your text, and it stays there until we delete it. Telegram is a provider outside the European Union.

It goes nowhere beyond that. It is not sold and it is not used for advertising.

So your data leaves the European Union: the database is in the United States, Telegram is a provider outside the EU, and your enquiry is read and answered in our office in Tashkent. We rely on no European Commission adequacy decision for this and we claim no certification.

For a transfer like that the GDPR requires a safeguard of its own: Standard Contractual Clauses under Art. 46(2)(c) GDPR with each of those providers. Without them the transfer is not covered, and we would rather tell you here that we cannot yet evidence one than describe a protection to you that does not exist.

Eighteen months from the day you wrote. That date is stored on your enquiry itself rather than only in a policy: every enquiry carries its own deletion date.

Eighteen months because a renovation is deliberated over months, and an enquiry that went quiet in spring is legitimately worth one call the following season — while a phone number from three years ago is not.

If your enquiry becomes a commission, invoices and signed documents carry their own and much longer statutory retention. Those documents are not in this database, and the enquiry is not kept longer because of them.

Your name, your phone number, your text and any internal notes about it are overwritten in the record and are then gone. What remains is the language, the area, the page the enquiry came from, its status and its date. What is left describes a market, not a person.

The database will not accept a half-finished deletion: your name, your phone number and your message are either all three gone or all three there, and there is no state in between that it can hold. The internal note is erased in the same operation. If you ask us to delete your data explicitly, the page path is removed as well, so that what remains cannot describe anybody either.

We delete the copy in the Telegram chat by hand at the same time; it does not go on its own.

This site sets a single cookie, and only once you answer the offer to read the page in Russian — whether you accept it or decline it. It is called “atom_lang”, holds a two-letter language code, expires after a year and does not identify you.

There are no third-party cookies, no advertising cookies and no tracking pixels. For audience measurement we use Plausible Analytics: it sets no cookie, stores nothing on your device and builds no cross-site profile. The script is served from our own domain, so the measurement itself never puts your browser in touch with a third party.

There is one exception, and it is confined to a single page — Inspiration. The photographs on it are not held by us: your browser fetches them directly from images.unsplash.com and images.pexels.com. The Unsplash and Pexels licences require exactly that — we show the images from source and credit the photographers. As each photograph loads, the service behind it learns your IP address and your browser's user-agent string; a file cannot be retrieved from somebody else's server without both. We never see those details, and no other page on this site opens that connection.

You have the right to ask what we hold about you, to have it corrected, to have it erased, to have its processing restricted, to have it ported, and to object to its processing. Any consent you have given can be withdrawn at any time; that does not affect what was lawfully done before.

You may also complain to a supervisory authority.

Write or call — all three routes reach the same people. Please quote the phone number you gave on the form and roughly when you wrote: that is how we find your enquiry. We answer within one month, as Art. 12(3) GDPR requires, and normally a great deal sooner.

• Message on Telegram

  @Zziyo

• Phone

  +998 97 778 79 25