Consent to Personal Data Processing

Version of 19 September 2026

By ticking “I give my consent to the processing of my personal data” and submitting a form on rhema.agency, I freely, of my own will and in my own interest consent to the controller processing my personal data on the terms below (Article 9 of Russian Federal Law No. 152-FZ “On Personal Data” of 27 July 2006).

1. Controller

Vladislav Grizhak (Владислав Грижак), a self-employed individual registered under Russia’s professional income tax regime, email: privacy@rhema.agency.

2. Data

Name; contact details — phone number, email or messenger username; task description, diagnosis answers and the analysis prepared from them. If I allowed analytics — traffic source, campaign tags and landing page.

3. Purposes

Reviewing my request and contacting me; arranging and holding a free call or diagnosis; preparing an initial analysis from my answers; entering into and performing a service agreement.

4. Processing operations

Collection, recording, organisation, accumulation, storage, clarification (updating, changing), retrieval, use, transfer (provision, access), blocking, deletion and destruction. Processing is automated and involves transfer over the Internet.

5. Transfers, including outside Russia

I agree that, for these purposes, my data is transferred to the services that run the website and process requests, including cross-border transfer:

— Vercel Inc. (USA) — website hosting and form processing;
— Supabase Inc. (servers outside Russia) — storing requests in the CRM;
— Telegram (servers outside Russia) — notifying the controller about new requests;
— Anthropic PBC and NVIDIA Corporation (USA) — preparing the analysis from diagnosis answers. Name and contact details are not sent to these services.

6. Duration and retention

This consent is valid until the purposes are achieved or until I withdraw it. If no agreement is concluded, request data is kept for no more than 1 year after my last contact. If an agreement is concluded, it is kept for the term of the agreement and 3 years after its performance. The data is then deleted.

7. Withdrawal

I may withdraw this consent at any time by emailing privacy@rhema.agency. The controller stops processing and deletes the data within 30 days of receiving the withdrawal, unless the law provides otherwise (Article 21(5) of Federal Law No. 152-FZ).

How the controller handles data is described in the Privacy Policy.