Privacy Policy

Who is responsible for your data

Aurelia Studios LLC, a limited liability company registered in the Republic of Armenia, is the controller of the personal data described in this policy. Our contact details are at the end of this page.

We process personal data in line with the Law of the Republic of Armenia “On Protection of Personal Data” and, where it applies to you, the EU General Data Protection Regulation (GDPR).

What we collect

We collect only what we need to reply to you and to run this website:

• Contact details you send us, such as your name, email address, company name and the content of your message.
• Technical data that our hosting provider records automatically when you open a page, such as your IP address, browser type and the time of the request. These server logs are used for security and to keep the site running.
• Information you share with us during a project, such as contact details of your team members.

How we use it

We use personal data to:

• reply to your enquiry and prepare a proposal;
• deliver and invoice the services we agree on;
• keep the website secure and working;
• meet our legal and accounting obligations.

Legal basis

We process your data because you asked us to (for example, by sending a message), because it is needed to perform a contract with you, because we have a legitimate interest in running and protecting our business, or because the law requires it. Where we rely on consent, you can withdraw it at any time.

Data we handle for our clients

When we provide software development, customer support or other services, we may process personal data on behalf of our client, for example the client's customers who contact a support desk we operate. In that case the client is the controller and we act as a processor, following the client's instructions and the data processing terms in our agreement.

Who we share it with

We do not sell personal data. We share it only with service providers who help us run our business, such as hosting, email and accounting providers, and only as much as they need. We may also disclose data when the law requires it.

Some of these providers may be located outside Armenia. When data is transferred abroad, we use providers that offer appropriate safeguards.

How long we keep it

We keep enquiry emails for as long as needed to handle your request and for up to two years after our last contact, unless they become part of a contract. Contract and invoicing records are kept for the period required by Armenian tax and accounting law. Server logs are kept for a short period, usually no longer than 30 days.

Your rights

Depending on the law that applies to you, you have the right to:

• ask what personal data we hold about you and get a copy;
• ask us to correct or delete it;
• object to or restrict how we use it;
• withdraw consent you have given;
• complain to a data protection authority. In Armenia this is the Personal Data Protection Agency of the Ministry of Justice.

Security

We use encryption in transit, access controls and regular updates to protect personal data. No system is completely secure, so if we become aware of a breach that affects you, we will notify you and the authorities as the law requires.

Changes to this policy

We may update this policy from time to time. The date at the top of the page shows when it was last changed.