PRIVACY POLICY

Last updated: 1 May 2026. The current version is published at https://vladimirnikandrov.com/en/privacy

---

1. Who we are

This Privacy Policy describes how Studio 1804 FZE LLC (the "Company", "we", "us"), a free zone limited liability company licensed by the Sharjah Publishing City Free Zone Authority under license number 4 423 789.01, TRN 105 221 788 000 001, with registered address at Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates, collects and processes personal data of visitors and clients of https://vladimirnikandrov.com (the "Site") in connection with payments made in Euro through the Stripe payment system.

For payments settled in Russian Rubles, personal data is processed by a separate legal entity (Individual Entrepreneur Andrey Andreev, Russia) under a separate Russian-language privacy policy published at https://vladimirnikandrov.com/privacy. The present Policy does not cover that processing.

This Policy is issued under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the "PDPL"). For Clients resident in the European Economic Area or the United Kingdom, the policy is also intended to comply with the General Data Protection Regulation (EU) 2016/679 ("GDPR") and the UK GDPR; references to legal bases under those regimes are included where relevant.


2. What we collect

We collect personal data that you provide directly and data that is generated automatically when you use the Site.

Provided by you:
— Identification data: full name.
— Contact data: email address, phone number (where you choose to provide it), Telegram handle (where you choose to provide it).
— Account data: username and hashed password used to access the private member area where courses and workshops are hosted.
— Transaction data: amount paid, date of transaction, name of the service purchased. We do not receive or store full payment card numbers; these are handled directly by Stripe.
— Communications data: the content of emails, chat messages and consultation notes you exchange with us.

Collected automatically:
— Usage data: progress through course and workshop materials, login timestamps, access logs to the private member area.
— Technical data: IP address, browser type, operating system, referring URL, pages visited, cookies and similar identifiers.

We do not knowingly collect data from children under 18 and do not process special categories of personal data (such as data revealing racial or ethnic origin, health, religious beliefs or biometric data) in the ordinary course of providing the services.


3. Why we use your data

We use your personal data for the following purposes:

(a) To deliver the services you have purchased — including granting and maintaining access to the private member area, scheduling personal consultations, sending course and workshop communications, and providing customer support. Legal basis: performance of a contract (PDPL Art. 4(2); GDPR Art. 6(1)(b)).

(b) To process payments and issue invoices — through Stripe, and to maintain accounting records as required by UAE law and the laws of any jurisdiction where we have tax obligations. Legal basis: legal obligation (PDPL Art. 4(4); GDPR Art. 6(1)(c)).

(c) To communicate with you about your purchases — confirmations, reminders, refund processing, complaint handling. Legal basis: performance of a contract.

(d) To send marketing communications about new products — only if you opted in. You can withdraw consent at any time by clicking the unsubscribe link in any marketing email or by writing to hello@vladimirnikandrov.com. Legal basis: consent (PDPL Art. 4(1); GDPR Art. 6(1)(a)).

(e) To analyse Site usage — in aggregate and pseudonymous form, to understand how the Site performs and to improve it. Legal basis: legitimate interest in operating and improving the Site (GDPR Art. 6(1)(f)). For Site visitors in the EEA or UK, analytics cookies are loaded only with prior consent.

(f) To protect our legal interests — including responding to disputes, enforcing the Terms of Service, preventing fraud and defending against claims. Legal basis: legitimate interest.


4. Who has access to your data

We share your personal data only with the following categories of recipients, and only to the extent necessary:

— Stripe Inc. and its affiliates — payment processing. Privacy: stripe.com/privacy.
— Tilda Publishing — website hosting and form submissions. Privacy: tilda.cc/privacy/.
— Course platform provider — hosting of the private member area, course materials and workshop recordings.
— Email service provider — sending course communications and, where you have opted in, marketing emails.
— Video conferencing platform — delivering personal consultations.
— Telegram — where access to a private community is part of the purchased product.
— Accountants, tax advisers and external counsel — under appropriate confidentiality undertakings, where necessary for the running of the business.
— Competent public authorities — where disclosure is required by applicable law.

We do not sell your personal data and we do not share it with third parties for their independent marketing purposes.


5. International data transfers

The Company is established in the UAE. Some of our service providers, in particular Stripe and Tilda Publishing, process data in jurisdictions outside the UAE.

For Clients in the EEA or the UK, this means that personal data may be transferred outside the EEA or the UK. We rely on the following safeguards:

— transfers to providers covered by an adequacy decision (where applicable);
— Standard Contractual Clauses approved by the European Commission, where the recipient is in a third country without an adequacy decision;
— Stripe's own GDPR-compliant data transfer framework.

Where a transfer to the UAE is involved, transfers are made on the basis of Standard Contractual Clauses or your explicit consent given at checkout.


6. How long we keep your data

— Transaction and contractual records: 7 years from the end of the financial year in which the transaction occurred, in line with UAE record-keeping requirements.
— Private member area account data: for the duration of your access to the purchased product, plus 1 year thereafter.
— Marketing list data: until you withdraw consent or after 3 years of inactivity, whichever occurs first.
— Site analytics data: aggregated and retained for up to 14 months.
— Communications: for as long as necessary to handle the matter and a further 3 years for evidentiary purposes.

After the relevant retention period expires, data is deleted or anonymised.


7. Your rights

You have the following rights in respect of your personal data:

— Access — to obtain a copy of the data we hold about you.
— Rectification — to have inaccurate or incomplete data corrected.
— Erasure — to request deletion of your data, subject to our legal obligation to retain certain records.
— Restriction — to ask us to limit the processing of your data in certain circumstances.
— Objection — to object to processing carried out on the basis of legitimate interest, including direct marketing.
— Portability — to receive your data in a structured, commonly used, machine-readable format and to have it transmitted to another controller.
— Withdrawal of consent — to withdraw any consent you have given, at any time and without affecting the lawfulness of prior processing.
— Lodge a complaint — with the UAE Data Office under the PDPL, or, for EEA/UK residents, with your local supervisory authority.

To exercise any of these rights, write to hello@vladimirnikandrov.com with the subject "Data request". We respond within 30 days. We may need to verify your identity before processing the request.


8. Cookies

The Site uses cookies and similar technologies for three purposes:

— Strictly necessary cookies — required for the Site to function (session, security, payment routing, member area authentication). These are loaded without consent.
— Analytics cookies — to measure how visitors use the Site. For visitors in the EEA, UK and other jurisdictions requiring prior consent, these are only loaded after you accept them in the cookie banner.
— Marketing cookies — used by Stripe and other third parties to support fraud prevention and to enable us to attribute traffic. Loaded only with your consent in the relevant jurisdictions.

You can change your preferences at any time using the cookie settings link in the Site footer or by clearing cookies in your browser.


9. Security

We apply appropriate technical and organisational measures to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. These include access controls, encryption of data in transit (HTTPS), use of reputable service providers and regular review of our processing practices. No system is fully secure; if we become aware of a personal data breach affecting your data, we will notify you and the relevant authority where required by law.


10. Changes to this Policy

We may update this Privacy Policy from time to time. The current version is always available at https://vladimirnikandrov.com/en/privacy. Where changes materially affect your rights, we will provide reasonable advance notice by email or by a notice on the Site.


11. Contact

Studio 1804 FZE LLC
SPCFZ License No.: 4 423 789.01
TRN: 105 221 788 000 001
Registered address: Business Center, Sharjah Publishing City Free Zone, Sharjah, United Arab Emirates
Email: hello@vladimirnikandrov.com