1. General Provisions

SP Zhabbarovа Lola Murod Kizi, registered in accordance with the the laws of the Russian Federation, registration number 326508100222612, сorrespondence address:
140343 Moscow region, Yegoryevsk, Mikhaly village, Komsomolskaya street, building 76 (hereinafter — "Operator", "we", "us") is the data controller of personal data in accordance with the applicable legislation on personal data protection.

This Privacy Policy (hereinafter referred to as the "Policy") describes how we collect, use, store, transfer, and protect the personal data of users of the website visarustour.com (hereinafter referred to as the "Website"), as well as individuals applying for our visa and document processing services.

By using the Website or accessing our services, you confirm that you have read this Policy and agree to its terms. If you do not agree, please discontinue use of the Website.

2. Categories of Data Collected

2.1. Data Provided by You
When using our services, we may collect the following personal data:

• Identification data: first name, last name, middle name, date of birth, citizenship, passport / identity document details.
• Contact data: email address, phone number, postal address.
• Payment data: bank card details, billing address, transaction history. Payment processing is carried out through certified providers; we do not store full card details on our servers.
• Data required for visa processing: information about place of employment, travel itinerary, accompanying persons, and other information required by the embassy / consulate.

2.2. Automatically Collected Data

• Technical data: IP address, browser and operating system type, language settings, referral URL.
• Usage data: pages you visited, time and duration of visits, clicks and search queries on the Website.
• Cookies and similar technologies: see Section 7 of this Policy for more details.

3. Purposes of Personal Data Processing

We process your personal data for the following purposes:

• Provision of visa and related services: preparation and submission of visa applications, communication with embassies and consulates, notification of application status.
• Conclusion and performance of a contract: invoicing, payment processing, document management.
• Communication: responding to inquiries, technical support, service notifications.
• Compliance with legal requirements: fulfilling obligations under AML/CFT legislation, tax, and other applicable laws.
• Marketing (with your consent): informing you about promotions, new services, and useful materials. You may withdraw your consent at any time.
• Website improvement: traffic analysis, testing of new features, bug fixing.

4. Legal Bases for Processing

Depending on the purpose of processing and applicable law, we rely on the following legal bases:

• Performance of a contract — processing is necessary to provide the requested services.
• Legitimate interest — ensuring Website security, fraud prevention, improvement of service quality.
• Compliance with legal obligations — accounting, responding to official requests.
• Consent — marketing communications and the use of non-functional cookies.

For users from the EU / EEA, the above bases correspond to Art. 6 of Regulation (EU) 2016/679 (GDPR). For users from the Russian Federation, the above grounds comply with Federal Law No. 152-FZ. For users from other jurisdictions, applicable data protection laws may apply depending on the user’s country of residence.


5. Transfer of Data to Third Parties

We do not sell your personal data. We may transfer it to the following categories of recipients:

• Government authorities: embassies, consulates, border services, and other authorities involved in the visa process.
• Payment provider: Yookassa, processing payments on your behalf.
• IT service providers: hosting, analytics, CRM, email mailing service — only to the extent necessary to perform their functions.
• Professional advisors: lawyers, auditors, insurance companies — under confidentiality obligations.
• Law enforcement and regulatory authorities: where required by law or court order.

Where cross-border data transfers occur (including outside the EU/EEA), we apply appropriate safeguards: standard contractual clauses, adequacy decisions, or other mechanisms provided for by applicable law.


6. Data Retention Periods
We retain your personal data for the entire period of use of our services, and after its conclusion — for an indefinite period, as long as necessary to achieve the purposes set out in Section 3, or until you request the deletion of your data in the manner provided for in Section 9.

Grounds for indefinite retention include, in particular:

• The need to confirm the fact that visa and other services were rendered for the purpose of resolving possible disputes.
• Compliance with tax, accounting, and anti-money laundering legislation.
• Ensuring security and preventing fraud in the event of repeat applications.
• Other legitimate interests of the Operator that do not conflict with the rights of data subjects.

You have the right to contact us at any time with a request to delete your data (see Section 9). We will review such a request and delete the data if there are no legal grounds for its further retention.


7. Cookies and Analytics

Our Website uses cookies and similar technologies (pixels, LocalStorage). Cookies are divided into the following categories:

• Strictly necessary: ensure the basic functioning of the Website (authentication, shopping cart). Do not require consent.
• Analytical / statistical: Google Analytics. Help understand how the Website is used. Applied only with your consent.
• Functional: remember your preferences (language, region). Applied with your consent.
• Marketing / advertising: Google Ads. Applied only with your consent.

Upon your first visit to the Website, you will see a consent management banner. You may change your settings at any time in the "Cookie Settings" section at the bottom of the page, or delete cookies in your browser settings.

Third parties providing analytics and advertising services may have their own privacy policies. We recommend that you review them.


8. Data Security

We apply technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction:

• Encryption of data in transit (TLS/SSL) and at rest.
• Access restriction: personal data is accessible only to authorized employees within the scope of their job responsibilities.
• Regular security audits and risk assessments.
• Confidentiality agreements with all employees and contractors.

In the event of a security breach that may pose a risk to your rights and freedoms, we will notify you and the relevant regulatory authorities within the timeframes required by applicable law.


9. Your Rights

Depending on applicable law, you may have the following rights regarding your personal data:

• Access: obtain confirmation that we are processing your data and receive a copy of it.
• Rectification: request the correction of inaccurate or incomplete data.
• Erasure ("right to be forgotten"): request the deletion of data where legal grounds exist.
• Restriction of processing: suspend processing in cases provided for by applicable law.
• Data portability: receive your data in a structured, machine-readable format (for EU/EEA users).
• Objection to processing: object to processing carried out on the basis of legitimate interest or for direct marketing purposes.
• Withdrawal of consent: withdraw previously given consent without affecting the lawfulness of processing carried out prior to withdrawal.
• Complaint to a supervisory authority: contact the competent data protection authority in your jurisdiction (e.g., a national EU/EEA supervisory authority).

To exercise your rights, please contact us using the details provided in Section 11. We will respond within 30 days.


10. Children

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data of minors without the consent of their parents or legal representatives. If you believe that a child has provided us with their data, please contact us — we will delete such data as soon as possible.


11. Contact Information

For questions regarding this Policy, the processing of your personal data, or the exercise of your rights, please contact us:
Email: info@visarusstour.com
Phone: +7 (931) 618-99-89


12. Changes to this Policy

We reserve the right to update this Policy periodically. Material changes will be communicated to you via a notice on the Website or by email at least 30 days before taking effect. Continued use of the Website following the publication of the updated Policy constitutes your acceptance of its terms.

Previous versions of the Policy are available upon request.