Privacy Policy

Russian original: https://www.siteko.net/privacy-policy

Important notice. This document is an English translation provided for informational convenience only. The legally binding original document is the Russian version published at /privacy-policy. Users give consent to and accept only the Russian-language original. In the event of any discrepancy between this translation and the Russian original, the Russian original shall prevail.

1. General provisions

This Privacy Policy defines the procedure for processing and protecting personal data of users of the website www.siteko.net, clients, client representatives, and other persons interacting with SiteEco LLC through the website, personal account, feedback forms, support system, email, and other communication channels.

The Policy has been prepared in accordance with Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”, the Civil Code of the Russian Federation, the Tax Code of the Russian Federation, legislation on communications, consumer protection legislation, and other applicable laws and regulations of the Russian Federation.

Use of the website, registration in the personal account, placing an order, contacting support, or sending a message through website forms means that the user has been informed of this Policy. Where personal data processing requires consent, such consent is requested separately.

2. Personal data operator

The personal data operator is:

SiteEco Limited Liability Company
OGRN: 1117847134558
INN: 7802747463
KPP: 780201001
Address:
2nd Murinsky Avenue, 47
Saint Petersburg, 194100
Russian Federation
Phone: +7 (812) 405-00-15
Email for personal data requests: support@siteko.net
Email for general inquiries: admin@siteko.net
Website: https://www.siteko.net

The Operator is included in the Register of Operators Processing Personal Data.
Grounds for inclusion in the Register: Order No. 135 dated April 30, 2026.
Registration number: 78-26-211367; date of entry: April 29, 2026.

3. Key terms

The following terms are used in this Policy:

Personal data means any information relating directly or indirectly to an identified or identifiable individual.

Personal data processing means any action or set of actions performed with personal data, including collection, recording, systematization, accumulation, storage, clarification, retrieval, use, transfer, depersonalization, blocking, deletion, and destruction.

User means a person who visits the website, registers in the personal account, places an order, submits a request, or otherwise interacts with the Operator.

Client means an individual, individual entrepreneur, representative of a legal entity, or organization using the Operator’s services.

Website means www.siteko.net, its subdomains, personal account, and related services.

4. Categories of personal data subjects

The Operator may process personal data of the following categories of persons:

1. website visitors;

2. registered users of the personal account;

3. clients, customers, and payers for services;

4. domain name administrators;

5. representatives of legal entities and individual entrepreneurs;

6. persons contacting technical support;

7. persons submitting requests related to personal data;

8. persons who have consented to receive informational and marketing messages.

5. Purposes of personal data processing

The Operator processes personal data for the following purposes:

1. user registration on the website and creation of a personal account;

2. user identification in the personal account;

3. conclusion and performance of a service agreement;

4. ordering, support, renewal, and termination of hosting, VDS/VPS, domain registration and renewal, SSL certificates, development, technical support, and other services;

5. issuing invoices, recording payments, and preparing documents for accounting and tax purposes;

6. registration, renewal, transfer, and support of domain names;

7. transfer of information to domain name registrars, domain zone administrators, and other organizations involved in domain name registration and support, where necessary to provide the service;

8. providing technical support and processing requests;

9. informing clients about service status, invoices, payments, domain renewals, maintenance works, changes in services, and other service-related events;

10. ensuring the security of the website, personal account, payments, user accounts, and infrastructure;

11. preventing fraud, unauthorized access, spam, abuse, and violations of service rules;

12. analyzing website traffic and improving service quality using Yandex Metrica only with consent to analytics cookies;

13. sending informational, advertising, and marketing messages only with separate consent;

14. complying with requirements of the legislation of the Russian Federation.

6. Scope of processed personal data

Depending on the processing purpose, the Operator may process the following personal data:

1. surname, first name, patronymic;

2. email address;

3. phone number;

4. registered address or postal address, where necessary for an agreement, domain operation, invoice, or other legally significant action;

5. identity document data, where such data is required for domain name registration or support or by the rules of a registrar or domain zone administrator;

6. INN, OGRN/OGRNIP, organization name, representative’s position, where the client acts as a legal entity or individual entrepreneur;

7. account data: login, user identifier, password hash, registration date, last login date;

8. information about orders, services, domain names, tariffs, service terms, invoices, payments, and balance;

9. technical data: IP address, user-agent, browser information, device information, operating system, date and time of visit, referral source, addresses of visited pages;

10. cookies, localStorage identifiers, and similar technical data;

11. content of support requests, correspondence, attachments, screenshots, technical logs, and other information independently provided by the user to the Operator;

12. information about user consents: date, time, document version, checkbox text, source of consent, IP address, user-agent;

13. other information independently provided by the user when using the website and services.

The Operator does not request special categories of personal data, information about political views, religious beliefs, health, intimate life, or biometric personal data, unless otherwise expressly required by law or a separate agreement.

7. Legal grounds for processing

The Operator processes personal data on the following grounds:

1. consent of the personal data subject;

2. necessity of processing for conclusion and performance of an agreement to which the personal data subject is a party;

3. necessity of fulfilling obligations imposed on the Operator by the legislation of the Russian Federation;

4. exercise of the Operator’s rights and legitimate interests, provided that the rights and freedoms of the personal data subject are not violated;

5. other grounds provided by the legislation of the Russian Federation.

8. Procedure and methods of processing

Personal data processing is carried out using automation tools and without such tools.

The Operator may perform the following actions with personal data:

1. collection;

2. recording;

3. systematization;

4. accumulation;

5. storage;

6. clarification, updating, and modification;

7. retrieval;

8. use;

9. transfer, provision, and access;

10. depersonalization;

11. blocking;

12. deletion;

13. destruction.

The Operator processes personal data only to the extent necessary to achieve the stated processing purposes.

9. Transfer of personal data to third parties

The Operator may transfer personal data to third parties only where necessary to achieve processing purposes, perform an agreement, provide a service, comply with legal requirements, or where consent of the personal data subject has been obtained.

Personal data may be transferred to:

1. domain name registrars;

2. domain zone administrators;

3. organizations involved in domain name registration, renewal, transfer, and support;

4. payment systems, banks, and payment infrastructure operators;

5. electronic document management operators, accounting and tax services, where used by the Operator;

6. SSL certificate providers, where the user orders the relevant service;

7. hosting providers, data centers, technical contractors, and other persons ensuring operation of the website and infrastructure;

8. government authorities, courts, law enforcement agencies, and other authorized persons in cases provided by law.

Personal data is transferred only to the extent necessary for the relevant purpose.

10. Domain names

When registering, renewing, transferring, or supporting domain names, the Operator may process and transfer information about the domain name administrator to the registrar, domain zone administrator, and other organizations involved in providing the domain service.

The scope of data depends on the domain zone, registrar rules, domain administrator status, and legal requirements. Certain domain operations may require full name, passport data, address, phone number, email, and data of an organization or individual entrepreneur.

The user must provide accurate information required for domain name registration and support. Inaccurate or incomplete data may result in refusal of registration, suspension of the domain, inability to renew, transfer, or confirm the rights of the domain administrator.

11. Cookies and analytics

The website uses necessary cookies that ensure operation of the website, personal account, cart, forms, authorization, CSRF protection, and storage of user settings.

With the user’s consent, the website may use Yandex Metrica analytics cookies to analyze traffic, referral sources, and user behavior on website pages.

Yandex Metrica must not be used to transmit full names, email addresses, phone numbers, passport data, payment data, order numbers, form contents, or other identifying information.

The user may accept all cookies, keep only necessary cookies, or change the choice on the /cookie-settings page.

More information about the use of cookies is provided in the Cookie Policy: /cookie-policy.

12. Informational and marketing messages

The Operator may send service messages related to registration, account security, invoices, payments, service renewals, maintenance works, domains, support, and performance of the agreement. Such messages are not marketing messages.

Marketing messages, news, offers, and advertising materials are sent only with the user’s separate consent.

The user may unsubscribe from marketing messages using the unsubscribe link in an email, in the personal account, or by contacting support@siteko.net.

13. Personal data processing and storage periods

Personal data is processed and stored no longer than necessary for the processing purposes, unless a longer period is established by the legislation of the Russian Federation, an agreement, or rules for the relevant service.

Approximate storage periods:

1. account data — during the period of use of the personal account and after its termination within the periods necessary to protect the Operator’s rights and comply with law;

2. contractual, payment, and accounting documents — within the periods established by accounting and tax legislation;

3. domain name data — during the period of provision of the domain service and within the periods established by the rules of the registrar, domain zone administrator, and legislation;

4. support requests — for the period necessary to process the request, provide the service, analyze incidents, and protect the Operator’s rights;

5. consent records — during the validity of the consent and after its termination for the period necessary to confirm that consent was obtained;

6. analytics cookies — within the period specified in the Cookie Policy and settings of the relevant service.

14. Personal data protection

The Operator takes necessary legal, organizational, and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying, provision, dissemination, and other unlawful actions.

In particular, the Operator applies:

1. restricted access to personal data;

2. recording of persons who have access to personal data;

3. access rights separation in information systems;

4. use of passwords, authentication tools, and other protection mechanisms;

5. backup;

6. software updates;

7. monitoring of infrastructure availability and security;

8. protection of the website and forms against common attacks;

9. control over actions of administrators and technical specialists within reasonably necessary measures.

15. Rights of the personal data subject

The user has the right to:

1. receive information about the processing of their personal data;

2. request clarification, blocking, or destruction of personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated processing purpose;

3. withdraw consent to personal data processing;

4. request termination of personal data processing in cases provided by law;

5. appeal actions or omissions of the Operator to the authorized body for protection of the rights of personal data subjects or to a court;

6. exercise other rights provided by the legislation of the Russian Federation.

16. Withdrawal of consent

The user may withdraw consent to personal data processing by sending a request to support@siteko.net or through a personal data request form, if such a form is available on the website.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

After consent is withdrawn, the Operator stops processing personal data unless there are other legal grounds for continued processing. Where such grounds exist, the Operator may continue processing personal data to the extent necessary to perform the agreement, store accounting documents, protect the Operator’s rights, comply with legal requirements, or pursue other lawful purposes.

17. Personal data requests

To receive information about personal data processing, clarify data, withdraw consent, delete data, or submit another request, the user may write to:

support@siteko.net

The request should preferably include:

1. full name;

2. email associated with the personal account or request;

3. substance of the request;

4. information allowing the user to be identified as the personal data subject or their representative.

The Operator may request additional information where necessary to confirm the identity of the applicant or the authority of a representative.

18. Changes to the Policy

The Operator may amend this Policy. A new version of the Policy comes into force upon publication on the website unless another effective date is specified in the Policy.