Privacy Notice

Last updated: 8 October 2026

This notice describes the personal data processing currently implemented for the Impress Agency website. It applies to information submitted through the website and to the technical information needed to serve it.

1. Controller and contact

The controller is Individual Entrepreneur Artem Olegovich Nikitin (INN 645390311881, OGRNIP 321645700018251). Contact the controller at info@impress.agency.

No data protection officer contact has been published for this website. Do not send special-category personal data or children’s data through its forms.

2. Data categories and sources

We receive information directly from you when you complete a website lead form or contact us.

  • contact data: name, email address, phone number or messenger contact;
  • professional and project data you choose to provide, such as company or brand name, website or public links, geography, request, budget, preferred meeting time and comments;
  • technical request data needed to deliver and protect the website, such as IP address, browser and device information, requested URL, referrer and security-related request metadata.

3. Purposes and stated legal bases

The applicable legal basis depends on your location and the context. This notice records the operational basis used for each current purpose; it does not expand a legal basis beyond applicable law.

  • answering a request and preparing a proposal, consultation or brief: your affirmative form consent and, where applicable, steps you ask us to take before entering into a contract;
  • communicating about a potential or current project and delivering agreed services: performance of a contract or steps requested before a contract;
  • operating, securing and troubleshooting the website and preventing abuse: our legitimate interests in a secure, reliable website, subject to the safeguards required by applicable law;
  • keeping information where a law requires it or defending legal claims: compliance with a legal obligation or the establishment, exercise or defence of claims, where applicable.

4. Recipients and processors currently in scope

The current website runtime processes technical requests on the website’s hosting and network infrastructure. Website lead submissions are sent server-to-server through the same-origin /api/leads endpoint to the current Twenty intake.

We disclose data to a recipient only when needed for the stated purpose, when required by law, or when necessary to protect rights and security. Personnel and providers should receive only the data needed for their role.

5. Cookies, analytics and advertising tags

Yandex Metrica is available only on the English and Russian AI content service and brief pages, and its script loads only after you accept the analytics choice. We send the page path, service view, brief open and successful brief submission. We do not send form answers, contact details, URL queries or fragments to Metrica through our tracking calls. Session replay, click maps and automatic link tracking are disabled in the site code.

You can reject analytics or reopen the analytics settings on those pages to withdraw consent. The choice is stored in this browser for up to 180 days; expired choices require a new decision. Withdrawing stops further tracking on these pages. Browser controls can also manage stored site data. Other site pages do not load this tag through this integration.

6. International transfers

The current implementation does not publish a completed country-by-country transfer record for the hosting runtime or current Twenty intake. If your data is transferred outside the country or region that applies to you, we will use the transfer mechanism and safeguards required by applicable law and provide the relevant information on request.

7. Retention

The current implementation has no published fixed retention schedule. We keep enquiry and project information only for the period needed to answer the request, manage a potential or current engagement, meet legal obligations or resolve a claim. Technical request data is retained only for the period necessary for security and operation. When data is no longer needed, it should be deleted or anonymised unless a lawful retention requirement applies.

8. Your choices, rights and complaints

Email info@impress.agency to request access, correction, deletion, restriction, a copy or portability where applicable, or to object to processing based on legitimate interests or direct marketing. We do not use the website forms for decisions based solely on automated processing that produce legal or similarly significant effects.

You may withdraw form consent at any time by emailing us; withdrawal does not affect processing already carried out on another valid basis. You may also complain to the data-protection authority that is competent for you, where applicable.

9. Changes to this notice

We will update this notice before a material change to the website’s data processing is released. The current English version is available at https://impress.agency/privacy and the Russian version at https://impress.agency/ru/privacy.