Version DRAFT-2026-08-10
WelcomeFlat Privacy Notice
This Privacy Notice explains how personal data is processed in connection with the WelcomeFlat website, user accounts and property guides. The data operator is Шепляков Илья Владимирович. Privacy enquiries may be sent to ShepIV@hotmail.com.
1. Scope and roles
This Notice applies to visitors, account holders and people who contact WelcomeFlat. For account and operational data, the Operator determines the purposes and means of processing. Where a customer adds personal data to a property guide, that customer remains responsible for having authority and an appropriate legal basis to provide and publish it; the Operator processes the content to deliver the requested service.
2. Data, purposes and legal grounds
- Accounts: name, email address, password hash, language, sessions and security events, used to register users, authenticate access, recover accounts and provide the service. Processing is based on consent and performance of the service agreement.
- Guide content: property details, instructions, images, video and contacts selected by the customer, used to create, store and publish guides at the customer’s direction.
- Technical information: IP address where required for abuse prevention, request headers, session identifiers, error records and limited first-party product events that exclude form text, used for security, diagnostics and service analysis. Processing is based on the Operator’s legitimate interests, subject to the rights of affected individuals.
- Marketing: contact details and consent records, used only where separate optional marketing consent has been given.
3. Processing and retention
Personal data may be collected, recorded, organized, stored, updated, used, restricted, anonymized and deleted by automated and non-automated means. Account and guide data is retained while the account or agreement remains active and is removed from active systems within 30 days after deletion or termination, unless longer retention is required by law or reasonably necessary to establish, exercise or defend legal claims. Operational logs are retained only for operational and security needs and are periodically removed. Marketing consent lasts until withdrawal, but for no more than two years after the last interaction.
4. Service providers and data location
Processing currently takes place within Russian infrastructure using Yandex Cloud and providers needed for hosting, storage, backup and transactional email. Access is limited to authorized persons and providers to the extent necessary for their tasks. WelcomeFlat does not sell personal data and does not use advertising pixels or session-replay technology. Any new provider must be reviewed against the actual data map and this Notice updated where required.
5. Published guide content
A published guide can be opened by anyone who receives its link and the link may be forwarded. Do not include permanent access codes, passport or payment information, or another person’s contact details without proper authority. Sensitive information should use an appropriate protected mechanism, and guest access credentials should be delivered separately.
6. Security
Measures include access controls, encrypted connections, hashing of passwords and tokens, encryption of selected secrets, backups, request-rate controls and security-event logging. No internet transmission or storage system can be guaranteed to be completely secure.
7. Your rights
Subject to applicable law, you may request information about processing, access, correction, restriction or deletion of your personal data, and may withdraw consent. Send a request with the subject “Personal Data” to ShepIV@hotmail.com. The Operator may request reasonable proof of identity to protect personal data. Withdrawal does not affect processing performed before it was received and does not stop processing supported by another lawful ground.
8. Cookies and similar technologies
WelcomeFlat uses essential first-party technologies for authentication, security and service operation, together with limited first-party events for service analysis. No third-party advertising cookies are described as part of the current service.
9. Changes and contact
A revised Notice takes effect when published unless a later date is stated. The version appears at the beginning of this document. Questions, objections and privacy requests may be sent to ShepIV@hotmail.com.