Personal data processing policy

Purposes and data

Enquiry information is used to review your request, discuss your project and contact you. It includes phone and/or email, optional name, company, country and city, project type or product, dimensions, budget, timing, description and attachments, together with the enquiry date, reference and consent record.

Project details may become personal data when linked to an individual. Do not send unnecessary identity documents or third-party data without an appropriate basis.

Legal basis and processing

The form requests separate consent to process data for reviewing the enquiry. Where processing is necessary for a contract or required by law, the relevant basis is assessed separately.

Processing includes collection, recording, storage, use to reply, correction, lawful disclosure, restriction and deletion. Submitting an enquiry does not constitute consent to advertising, publication of photos or sending your enquiry to AI.

Retention

The operator has set one year from receipt for enquiries that do not result in an order and their attachments. At expiry the operator must arrange deletion unless another lawful basis applies. Automatic deletion is not yet configured on this site.

Contractual, accounting and archival documents are subject to the applicable statutory retention periods; this policy does not assign an arbitrary common period to all of them.

Access, services and transfers

Enquiries and attachments are not intended for public display. The site uses Lovable Cloud to store them; access should be limited to authorised persons for the stated purpose.

External services include Google Fonts and Google sign-in for staff. The private section processes email, account information and access roles.

The legal recipients, processing countries, log and backup retention require separate confirmation under provider agreements. No claim is made that cross-border transfers are absent. This policy does not replace a review of transfer grounds and information required before consent.

Rights and contact

Where provided by law, you may withdraw consent, obtain processing and disclosure information, request correction, restriction or deletion where no lawful basis remains, and complain to the National Personal Data Protection Centre of Belarus.

For explanations, email steelart.by@gmail.com. Formal rights requests should be submitted to the operator at the address below under Article 14 of Law No. 99-Z, in writing or as a duly signed electronic document containing the legally required information. An ordinary email is not automatically a signed electronic document.

Withdrawal does not end processing where another lawful basis remains. Only necessary information should be requested to identify the applicant and find the enquiry.

External links and updates

Instagram, Telegram, WhatsApp, Viber and other external services have their own terms. Visiting them does not imply consent to any processing by Steel Art.

The operator should update this policy and consent information when purposes, data or providers change. Cookies and video surveillance are covered separately.