Privacy Policy

1. Data controller

The controller responsible for processing on this website is:

• METRIC
• Tashkent, Uzbekistan
• Uzbekistan
• Email: hello@metric.agency

2. EU representative (Art. 27 GDPR)

If METRIC has no establishment in the EU but processes personal data of individuals located in the EU, we appoint an EU representative under Art. 27 GDPR. Contact details are available on request at the email address above.

3. What data we process

Contact form: when you submit our contact form, we process your name, phone number, message, an optional file attachment, the consent checkbox state, and the submission timestamp.

Technical data: on every page load, our hosting provider and security safeguards (e.g. bot/spam protection) automatically process technical data such as IP address, timestamps, and basic request metadata to prevent abuse and keep the site running.

Analytics data: we process usage data (pages visited, clicks, approximate location) through Yandex Metrika and/or Google Analytics or Google Tag Manager.

4. Legal basis for processing

• Responding to contact form inquiries: Art. 6(1)(b) GDPR (pre-contractual steps) or Art. 6(1)(f) (legitimate interest in answering inquiries).
• Security, fraud and spam prevention (IP processing, rate-limiting, captcha): Art. 6(1)(f) GDPR (legitimate interest in running a secure website).
• Analytics cookies (Yandex Metrika, Google Analytics/Tag Manager): Art. 6(1)(f) GDPR (legitimate interest in measuring traffic).

5. Recipients and processors

We share data only with service providers that help us run this website:

• Supabase, Inc. — database, storage and authentication infrastructure for inquiries and file uploads.
• Telegram (Telegram FZ-LLC) — internal notification to our team about new inquiries (name, phone number, message, attachment indicator).
• Cloudflare Turnstile or hCaptcha — bot/spam protection for the contact form, when enabled.
• Yandex LLC (Yandex Metrika) and Google LLC / Google Ireland Limited (Google Analytics, Google Tag Manager) — website analytics.
• [Hosting provider] — website infrastructure hosting.

6. International data transfers

Some of the providers above process data outside the European Economic Area (e.g. in the US or Russia). Where EU users' data is transferred to a country without an adequacy decision, we rely on appropriate safeguards such as the EU Standard Contractual Clauses or comparable mechanisms with the relevant provider. Details are available on request.

7. Retention periods

• Contact inquiries (metric_leads): kept for as long as needed to handle your request, generally [12 months] after the last interaction, after which the record and any attached file are deleted.
• Analytics data: retained per Yandex Metrika / Google Analytics retention settings.
• Admin accounts and audit logs: kept for the duration of the working relationship and as required by applicable legal retention obligations.

8. Your rights

Under the GDPR, you have the right to:

• Access the data we hold about you (Art. 15),
• Rectify inaccurate data (Art. 16),
• Request erasure of your data (Art. 17),
• Restrict processing (Art. 18),
• Receive your data in a portable format (Art. 20),
• Object to processing (Art. 21),
• Withdraw any consent you've given, with future effect (Art. 7(3)),
• Lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence or workplace ([insert competent supervisory authority]).

9. Security measures

We encrypt data in transit (TLS/HTTPS), restrict admin dashboard access to authorized staff, store file uploads in a private, non-public storage bucket, and log administrative changes for audit purposes.

10. Children

Our website is directed at business customers and is not intended for children under 16. We do not knowingly collect data from children.

11. Changes to this policy

We may update this Privacy Policy to reflect changes in our practices or legal requirements. The "Last updated" date above indicates the current version.

12. Cookies we use

The banner stores your choice in localStorage. Analytics cookies may be set by Yandex Metrika and Google Analytics / Tag Manager.

13. Contact for privacy requests

For access, correction, deletion, or other requests about your data, please contact us at hello@metric.agency or [Data Protection Officer name, if appointed].