APELSIN logo: an orange with a leaf APELSIN INTERIOR Discuss a project
Documents

Privacy policy

How APELSIN INTERIOR collects, stores and protects the personal data of visitors to apelsin.group.

Last updated: 16 October 2026

1. Data controller

Owner and operator of personal data: APELSIN INTERIOR interior design studio, Almaty, 150 Abay Ave.

This policy follows the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 “On Personal Data and Their Protection”.

2. What we receive

From the forms on the site: name, the contact method you choose (WhatsApp, Telegram, phone or email) and the contact for it: number, Telegram username or email address and details about the space (area, type of room, services, comment).

From a job application: first and last name, phone or email, portfolio link, message and, if attached, your CV file.

If you write to us on WhatsApp, Telegram or by email, we receive what you share in that conversation.

Visit statistics, only if you allowed them in the cookie notice: page address, language, referrer and device type. Without consent no statistics are kept. Visitors are counted by an anonymous hash that changes every day; IP addresses and browser details are not stored in the statistics.

The hosting server keeps technical logs (including IP addresses) to protect against attacks and outages. We do not use them to identify visitors.

3. Consent

By sending a form you consent to the collection and processing of the data it contains for the purposes in section 4. Consent lasts until those purposes are met.

Consent also covers the cross-border transfer of your data: the site’s server is located in the European Union (section 6).

You can withdraw consent at any time by writing to studioapelsin.group. We stop processing no later than 15 working days after receiving the withdrawal.

4. Purposes

To reply to your request, estimate the cost, consult you, and prepare and perform a contract.

To review job applications and contact candidates.

To keep the site running and secure, and to keep anonymous visit statistics.

5. Storage and retention

Requests and applications are stored in the site’s database on a server in France (Paris), CV files on the website server in Lithuania; both servers are in the European Union. Only studio staff have password access to them.

If no contract follows, request data is deleted no later than one year after the last contact. Contract data is kept as long as the law of the Republic of Kazakhstan requires.

Emails sent to the studio’s address are kept in its mailbox at the email provider Hostinger, with a copy of the conversation in the site database. The copy is deleted 12 months after the last email; only staff with access to the mailbox can see it.

Job applications and CVs are kept for up to six months after review and then deleted. CV files are never published and only staff who handle applications can open them.

6. Sharing

We do not sell personal data or share it for advertising. The site has no third-party trackers or ad networks.

The site is hosted by Hostinger on a server in Lithuania, its database on a Hostinger server in France (European Union). This is a cross-border transfer of personal data under Article 16 of Law No. 94-V. The EU General Data Protection Regulation (GDPR) applies there; Hostinger processes the data only to run the server.

WhatsApp, Telegram or email are used only if you choose that channel yourself; conversations there follow those services’ rules.

Data is disclosed to public authorities only where the law requires it.

7. Cookies

The site uses no advertising cookies and no third-party counters.

On the first visit the site asks whether it may keep anonymous statistics (section 2). Before you answer, and after you decline, no statistics are kept. Your choice is stored in the browser (localStorage) for 12 months; you can change it with the “Cookie settings” link at the bottom of the page.

Studio staff need one cookie to sign in to the admin panel.

8. Security

The site runs over HTTPS only, the admin panel is password-protected and only a few staff can see requests. We report any data breach to the competent authority within the time the law sets.

9. Your rights

You may ask whether we process your data, receive a copy, have it corrected, blocked or deleted, and withdraw your consent.

Send your request to studioapelsin.group or call +7 777 023 97 48. If you believe your rights have been violated, you can contact the authority for personal data protection or a court.

10. Changes

The current version is always published on this page; the date at the top shows the last update.

11. Contact

studioapelsin.group · +7 777 023 97 48 · Almaty, 150 Abay Ave