Privacy policy

This document describes how ICD LLC processes personal data when you use our website and contact form. We comply with Russian Federal Law No. 152-FZ «On Personal Data» and Roskomnadzor requirements.

1. Operator information

ICD LLC
Address: 350062, Krasnodar, Kaya lyaeva St. 263/4 k2
Email: icd24@mail.ru
Phone: +79601302424

2. Purposes of processing and legal basis

We process personal data to respond to inquiries submitted through the contact form on our website. The legal basis is your consent, which you provide by checking the consent checkbox before submitting the form.

3. Categories of data subjects

  • Visitors and prospective clients who submit inquiries via the contact form

4. Categories of personal data collected

When you submit the contact form, we collect:

  • Name — to address you in our response
  • Email — to send our reply
  • Phone (optional) — for additional contact if needed
  • Company (optional) — for context about your organization
  • Message — the content of your inquiry
  • Direction — the service area you are interested in (consulting, security, development, AI, BI)

We also automatically receive technical data when you submit the form: your IP address and User-Agent (browser) — for fraud prevention and security.

5. Methods of processing

We process data by: collection, transmission via encrypted email (SMTP over TLS), storage in the operator's email mailbox, and use for replying to your inquiry.

6. Storage: where and how

Where: Your data is not stored in a database on our website server. It is transmitted by email to our corporate mailbox. Emails are stored on the mail provider's servers (e.g. Yandex Mail, typically located in the Russian Federation). Access to the mailbox is restricted to authorized employees.

How: Data is transmitted over an encrypted connection (HTTPS when the site uses SSL/TLS; email via SMTP with STARTTLS). We do not sell or transfer your data to third parties for marketing purposes.

7. Retention period

We store your inquiry data for no longer than is necessary to achieve the processing purpose: typically until the matter is closed, or until you withdraw consent or request deletion. In any case, we delete data no later than 2 years after the last interaction, unless a longer retention period is required by law.

8. Conditions for termination of processing

Processing is terminated when: (a) the purpose of processing is achieved; (b) you withdraw your consent; (c) you request deletion of your data; (d) the retention period has expired; (e) the operator is liquidated.

9. Procedure for destruction of personal data

When retention periods expire or you request deletion, we delete your data from the email mailbox and any backups within 30 days. Emails containing your data are permanently deleted without the possibility of recovery. We do not use automated systems for data storage; data exists only in the form of emails.

10. Security measures

We apply organizational and technical measures to protect your data:

  • HTTPS (TLS) for website traffic where configured
  • Encrypted email transmission (SMTP with STARTTLS)
  • CSRF protection for the contact form
  • Access control to the corporate email mailbox
  • No storage of form data in databases — reducing the attack surface

11. Your rights

As a data subject, you have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent at any time (withdrawal does not affect the lawfulness of processing before withdrawal)

To exercise these rights, send a request to icd24@mail.ru. We will respond within 30 days.

12. Cookies

Our website uses technically necessary cookies to ensure the contact form works correctly and to protect against cross-site request forgery (CSRF). These cookies are essential and cannot be disabled if you wish to use the form. We do not use advertising or analytical cookies.

The contact form page may load third-party scripts (e.g. Yandex Maps) to display a map. Such services may set their own cookies; their processing is governed by their respective privacy policies.

13. Changes to this policy

We may update this policy. The current version is always available on this page. The date of the last update is indicated below.

Last updated: March 2026