Privacy policy
Updated: October 2026
Who we are
The controller is Umzila, the operator of umzila.ru. For privacy requests write to [email protected]. Postal address: Moscow, Marshala Rybalko st., 2, bldg 9, office 437.
What we collect
From the connection form: your name, email and message. We also store the form language, UTM tags, the page you came from, your IP address, the browser time zone, the browser identifier (User-Agent) and the language header the browser sends. The time zone lets the confirmation email show the request time in your zone. These technical fields are kept with the request and deleted with it. Giving this data is voluntary, but we cannot accept a connection request without a name and email.
Why and the legal basis
We use the request to contact you about connecting Umzila. The basis is GDPR Article 6(1)(b) (steps you asked for before a contract) and Article 6(1)(a) (the consent you tick in the form). You can withdraw consent at any time; that does not affect processing that was lawful before the withdrawal. The IP address and the Cloudflare Turnstile check protect the form from abuse, and UTM tags show where the visit came from. The basis for those is Article 6(1)(f) (our legitimate interest). We do not make decisions about you by automated means alone, and we do not profile you.
Cookies
We set one first-party cookie, hub_attr, for 30 days. It stores the landing page, the referrer and UTM tags so a request can be tied to a visit. It is not used for advertising. You can delete or block it in your browser.
Who receives the data
The Umzila team that handles requests receives the data, as do providers that host the site, deliver email and run the spam check (Cloudflare). We do not sell personal information and we do not share it for cross-context behavioural advertising.
Transfers outside the EEA
A provider may process data outside the European Economic Area. Such a transfer relies on a GDPR Chapter V mechanism: a European Commission adequacy decision or standard contractual clauses.
How long we keep it
We keep the request while it is open and for one year after it is closed, unless you ask us to delete it sooner or the law requires a longer period. The cookie expires after 30 days.
Your rights in the EEA
You can ask for access, correction, deletion, restriction, portability, or object to processing based on legitimate interest, and you can withdraw consent. Write to [email protected]. Using these rights will not worsen the service. You may also lodge a complaint with the supervisory authority in your country.
Your rights in the United States
If you live in California, the California Consumer Privacy Act (as amended by the CPRA) gives you the right to know what we process, to ask us to delete or correct it, and to know that we do not sell or share personal information as those terms are used in that law. Send the request to [email protected]. We do not discriminate against you for using these rights.