Privacy policy
Version dated 9 September 2026
1. General provisions
This policy sets out how the personal data of millrock.ru users is processed and protected. The Operator processes only the data required for signing in, working with requests and projects, and communicating with the user.
2. Operator
The personal data operator is Individual Entrepreneur Evgeny Viktorovich Khozin, Primary State Registration Number 317505300022269. Contact: info@millrock.ru.
3. Data we process
When signing in through Vx, the site processes the phone number and one-time code, Vx account identifier and display name. The number and code are used to confirm sign-in; Millrock does not store the code. Requests, comments, statuses and project information are stored in the account. The server also records technical data: IP address, page address, visit time, browser type and referral source.
4. Purposes of processing
Data is used to confirm identity, provide access to the client account, accept and fulfil requests, manage projects, communicate with the Millrock team, protect the website and meet legal requirements.
5. Legal grounds
Processing is based on the user’s consent, actions taken at their request before entering into an agreement, performance of contractual obligations and applicable legal requirements. By submitting a form after giving consent, the user authorises the processing of the data provided for these purposes.
6. Vx and storage
To confirm sign-in, the site contacts the Vx API: the phone number and one-time code are sent to Vx over a secure connection. Millrock stores its own account session, user identifier, requests, projects and correspondence on the Operator’s server. Data is not disclosed to other parties except where required to operate a service selected by the user or by law.
7. Cookies
The site uses an essential secure cookie containing an opaque session identifier. Vx tokens, phone numbers and one-time codes are not stored in browser storage. The current version of the site does not use third-party web analytics.
8. Protection and retention
The Operator applies technical and organisational security measures. Account sessions have a limited lifetime. Other data is retained while work on a request or project is in progress and for the necessary period after completion, or until a lawful deletion request is received, unless retention is required by law.
9. User rights
Users may request information about their data, its correction, restriction or deletion, or withdraw consent by writing to info@millrock.ru. Withdrawal does not affect the lawfulness of processing carried out before it was received.
10. Changes
The current version of this policy is published at millrock.ru/en/policy/. A new version takes effect when it is published on the site.