Legal information

Privacy Policy

Last updated: 1 March 2026

This Privacy Policy explains how Grigory Mikhailovich Karpovskii, registered as an individual entrepreneur, collects, uses, stores, and protects personal data when you use the website https://gkarpovskii.com/, including its English-language pages.

For the purposes of this Policy, “we”, “us”, “our”, and “Controller” refer to Grigory Mikhailovich Karpovskii, unless another legal entity is expressly indicated as the contracting party or data controller.

This Policy applies to website visitors, prospective clients, clients, representatives of companies, business partners, and other persons who contact us through the website, by email, by phone, through online forms, or through other communication channels.

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with GDPR-style data protection rules, please also read our GDPR Notice.

Controller

Who is responsible for your data

Controller: Grigory Mikhailovich Karpovskii, registered as an individual entrepreneur

Registration number: 326774600077881

Tax identification number: 771876786170

Website: https://gkarpovskii.com/

Email: [CONTACT EMAIL]

Postal address: [POSTAL ADDRESS]

Data categories

What personal data we may process

Contact and enquiry data

Name, email address, phone number, company name, job title, message content, preferred communication method, and any other information you voluntarily provide when contacting us.

Business and contractual data

Information required to discuss, prepare, conclude, and perform consulting engagements, including identification, contact, billing, contractual, project-related, and business communication data.

Website and technical data

IP address, browser and device information, cookie identifiers, pages viewed, time spent on the website, referral source, website interaction data, and similar technical or analytics data.

Information from third-party communication channels

If you contact us through messengers, social networks, email services, or other platforms, we may process the information you provide there, subject to the terms and privacy policies of those third-party platforms.

Purposes

Why we process personal data

  • to respond to your enquiries and communicate with you;
  • to discuss business tasks, consulting requests, and potential cooperation;
  • to prepare proposals, terms of cooperation, and consulting engagements;
  • to conclude, perform, administer, and manage contracts;
  • to provide strategic consulting and related business services;
  • to maintain business correspondence and client relationships;
  • to comply with legal, tax, accounting, regulatory, and record-keeping obligations;
  • to ensure the proper operation, security, and improvement of the website;
  • to analyse website performance and user interaction in aggregated or statistical form;
  • to protect our rights, legitimate interests, and business reputation.

Legal grounds

Legal bases for processing

Depending on the context and applicable law, we may process personal data on one or more of the following legal bases:

  • your consent, where required by applicable law;
  • steps taken at your request before entering into a contract;
  • performance of a contract with you or with the organisation you represent;
  • compliance with legal obligations;
  • our legitimate interests, including business communication, website security, service improvement, contract administration, and protection of legal rights.

Cookies

Cookies and analytics

The website may use cookies and similar technologies to ensure proper operation, improve user experience, remember settings, and collect analytics data.

We may use first-party cookies and third-party analytics, hosting, technical, or website performance tools. You can restrict or disable cookies in your browser settings. Some website functions may not work properly if cookies are disabled.

Where a cookie banner or consent mechanism is used, the choices you make through that mechanism also apply.

Sharing

Who may receive personal data

We do not sell personal data. We may share personal data only where necessary, appropriate, and lawful, including with:

  • website hosting, technical support, analytics, email, form, CRM, and communication service providers;
  • professional advisors, including legal, accounting, tax, and business advisors;
  • banks, payment, invoicing, or document management providers where required for contractual relations;
  • public authorities, courts, regulators, law enforcement bodies, or other parties where required by law or necessary to protect legal rights;
  • another contracting entity, if a specific consulting engagement is concluded with a different legal entity and this is made clear to you.

International transfers

International data transfers

Because the Controller may be located outside your country of residence, your personal data may be processed in jurisdictions that may not provide the same level of data protection as your jurisdiction.

Where applicable law requires safeguards for international transfers, we will use appropriate legal mechanisms, such as consent, contractual safeguards, standard contractual clauses where applicable, or another recognised transfer mechanism.

Retention

How long we keep data

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by applicable law.

Enquiry and website communication data may generally be retained for up to 24 months from the last interaction, unless further retention is necessary for contractual, legal, accounting, dispute resolution, or legitimate business purposes.

Contractual, accounting, and business records may be retained for the periods required by applicable law, tax rules, accounting rules, limitation periods, or record-keeping obligations.

Security

How we protect personal data

We take reasonable organisational, legal, and technical measures to protect personal data from unauthorised access, loss, misuse, alteration, disclosure, or destruction.

  • limited access to personal data;
  • password protection and basic information security controls;
  • use of secure communication, hosting, and website tools where appropriate;
  • internal control over data accuracy, relevance, and retention;
  • deletion or anonymisation of data when it is no longer required.

Your rights

Your choices and rights

Depending on your location and applicable law, you may have the right to request access, correction, deletion, restriction, portability, objection to processing, or withdrawal of consent where processing is based on consent.

To exercise your rights, contact us at: [CONTACT EMAIL].

We may need to verify your identity before responding to your request.

Updates

Changes to this Policy

We may update this Privacy Policy from time to time. The current version is published on this page. If changes are material, we may provide additional notice where appropriate.