Privacy Policy

This policy explains how Sturox Company processes personal data when you visit the website, send a project brief, use the site chat, or contact us by email or Telegram.

1. Controller

  • The data controller is Sturox Company, founded by Oleksandr Sturov and operating from Marbella, Malaga, Spain.
  • Privacy contact: sturox.company@proton.me. Project contact: https://t.me/sturox_company.

2. Data we process

  • Inquiry and chat data you provide: name, email, company, project details, messages, language and preferred contact method.
  • Attribution and security data: UTM parameters, referring page, timestamps, IP address and basic device or browser information used for delivery, abuse prevention and diagnostics.
  • Consent-based analytics data: pages viewed, sessions, approximate country, device category and website events. Google Analytics is denied by default and activated only after acceptance.

3. Purposes and legal bases

  • We process inquiries and requested communications to take steps at your request before a contract and, where applicable, to perform a contract.
  • We use strictly necessary security logs and service diagnostics for our legitimate interests in maintaining a reliable and abuse-resistant website.
  • We use Google Analytics only with your consent. You can decline it or withdraw consent by clearing the stored consent choice and revisiting the site. Legal records may be retained to comply with applicable obligations.

4. Recipients and processors

  • We do not sell personal data. Access is limited to Sturox Company and providers needed to operate hosting, email, Telegram communications, website analytics and the AI chat workflow.
  • Google Analytics processes analytics data only after consent. Telegram and your email provider process messages you choose to send through their services under their own terms.
  • Providers are given only the data needed for their task and are selected with appropriate contractual and security safeguards.

5. International transfers

  • Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, EU Standard Contractual Clauses or another lawful safeguard.
  • You may contact us for information about the safeguard relevant to your data.

6. Retention and security

  • Inquiry and chat records are normally kept for up to 24 months after the last meaningful interaction, then deleted or anonymised unless a contract, dispute or law requires longer retention.
  • Security and operational logs are normally retained for up to 90 days. Analytics data follows the configured Google Analytics retention period and is used only while consent remains valid.
  • We use access controls, restricted CRM sessions, encrypted transport, backups and monitoring; no online system can guarantee absolute security.

7. Your GDPR rights

  • You may request access, correction, erasure, restriction, portability or objection, and may withdraw consent without affecting earlier lawful processing.
  • Send a request to sturox.company@proton.me. We may ask for proportionate identity verification before acting on a request.
  • You may lodge a complaint with the Spanish Data Protection Agency (AEPD): https://www.aepd.es/ or another competent supervisory authority.

8. Cookies and changes

  • The site stores a necessary consent choice and may use session storage for UTM attribution. Analytics storage is optional and disabled until accepted.
  • Essential storage supports navigation, security and form continuity and is not used for advertising. We do not enable advertising cookies through this site.
  • Material changes will be published here with a new effective date.