Privacy Policy Publication date: 3 August 2026 This Privacy Policy explains how information about visitors to juliakalash.com is collected, used, stored, and protected. By using the website, the visitor confirms that they have read this Privacy Policy. 1. Data Controller The data controller is: Julia Kalashnikova, a self-employed professional registered under the Russian Professional Income Tax regime. For questions concerning personal data and privacy, please contact: ulabread@gmail.com 2. Information That May Be Processed The website does not contain registration, order, subscription, or contact forms and does not directly request visitors' names, phone numbers, addresses, or payment information. When a visitor accesses the website, the following technical information may be processed automatically: — IP address; — device type, browser, and operating system; — browser language and settings; — date and time of the visit; — pages viewed; — referring website or traffic source; — approximate location; — actions performed on the website, including clicks, navigation, and scrolling; — identifiers stored in cookies and localStorage. When a visitor voluntarily sends an email to ulabread@gmail.com, the data processed may include the visitor’s name, email address, message content, attachments, and any other information voluntarily included in the email. The controller does not intend to collect sensitive personal data, including health information, political or religious beliefs, financial information, or identity document details. Visitors should not provide such information unless it is necessary. 3. Purposes of Processing Information may be processed for the following purposes: — operating and securing the website; — collecting aggregated and anonymised website statistics; — analysing website usage and improving its content, structure, and design; — identifying technical errors and preventing misuse; — responding to enquiries sent by email; — discussing and entering into contracts at the visitor’s request; — complying with applicable legal obligations. The information is not used for automated decision-making that produces legal or similarly significant effects concerning visitors. 4. Legal Bases for Processing Depending on the circumstances, information may be processed on the basis of: — the visitor’s consent to the use of analytics cookies; — steps taken by the visitor to initiate contact or enter into a contract; — the performance of a contract involving the visitor; — compliance with applicable legal obligations; — the controller’s legitimate interests in maintaining the security and proper operation of the website, provided that the visitor’s rights are respected. Consent to non-essential analytics cookies may be withdrawn at any time. 5. Yandex Metrica and Cookies The website uses Yandex Metrica, a web analytics service provided by YANDEX LLC. Yandex Metrica provides aggregated information about website traffic, traffic sources, and visitors' interactions with website pages. The service may use cookies, localStorage, and anonymous browser identifiers. It may also process technical information such as the visitor’s IP address, device, browser, operating system, visited pages, and interactions with the website. Yandex processes this information in accordance with the Yandex Metrica Terms of Use and the Yandex Privacy Policy. Visitors may restrict or disable cookies through their browser settings. Disabling cookies may affect the operation of certain website features. Visitors may also prevent the collection of information by Yandex Metrica by using the official Yandex Metrica opt-out tool or by refusing analytics cookies through the website’s cookie interface, where available. 6. Disclosure to Third Parties The controller does not sell visitors' personal data. Information may be disclosed or made available to: — YANDEX LLC in connection with the use of Yandex Metrica; — website hosting and technical infrastructure providers; — the email service provider when a visitor sends an email; — contractors assisting with the operation of the website and subject to confidentiality obligations; — public authorities where disclosure is required by applicable law. Some service providers may process information using infrastructure located outside the visitor’s country. Such processing is carried out subject to applicable legal requirements and the terms of the relevant service providers. 7. Data Retention Technical and analytics information is retained for the periods established by the settings and terms of the relevant services or until the analytics tag and collected statistics are deleted. Information received by email is retained for as long as necessary to respond to the enquiry, maintain correspondence, perform a contract, and comply with applicable legal obligations. Once the relevant purposes have been fulfilled, the information is deleted, anonymised, or retained only where a lawful basis for further retention exists. 8. Visitors' Rights Subject to applicable law, visitors may have the right to: — request information about the processing of their personal data; — request access to or correction of their data; — request the deletion of data where there is no lawful basis for its continued processing; — withdraw previously given consent; — restrict the use of cookies through browser settings; — lodge a complaint with the competent data protection authority. Requests may be sent to ulabread@gmail.com. The request should include the visitor’s name, a description of the request, and sufficient information to identify the relevant data. The controller may request additional information where reasonably necessary to verify the identity of the person making the request. 9. Information Security The controller takes reasonable organisational and technical measures to protect information against unauthorised access, alteration, disclosure, blocking, copying, deletion, or distribution. However, no method of internet transmission or electronic storage can guarantee absolute security. 10. Third-Party Links The website may contain links to third-party websites, services, and social media platforms. The controller does not control how those third parties process information and is not responsible for their content or privacy practices. Visitors should review the privacy policy of each third-party service before using it. 11. Changes to This Policy The controller may update this Privacy Policy to reflect changes to the website, the services used, or applicable legal requirements. The current version will be published on juliakalash.com. Any updated version becomes effective when published unless otherwise stated. 12. Contact Information For questions concerning the processing or protection of personal data, please contact: ulabread@gmail.com The Russian-language version of this Privacy Policy is the primary version. The English-language version is provided for convenience. In the event of any inconsistency, the Russian-language version shall prevail, unless otherwise required by applicable law.