Last updated: September 9, 2026


1. GENERAL PROVISIONS

This Personal Data Processing Policy (hereinafter — the Policy) applies to all data that Individual Entrepreneur Hotaki Nur Rahman (OGRN 1027700067328, INN 773612225602), address: 11 Derbenevskaya Embankment, Pollars Business Center, Moscow, Russian Federation (hereinafter — the Operator), may obtain about a user of the website https://drhotaki.com (hereinafter — the Website) while the user is using the Website.

The Policy has been developed in accordance with Federal Law No. 152-FZ "On Personal Data" dated July 27, 2006 (hereinafter — the Personal Data Law) and defines the procedure for processing personal data and the measures taken by the Operator to ensure its security.

The Operator regards respect for human and civil rights and freedoms in the processing of personal data, including the protection of the right to privacy, personal and family secrets, as the most important goal and condition of its activity.

By using the Website, the user unconditionally agrees to this Policy and the terms of personal data processing set out in it. If the user does not agree with these terms, the user must refrain from using the Website, including from filling out any forms placed on it.


2. KEY TERMS

Personal data — any information relating directly or indirectly to an identified or identifiable individual (data subject).

Operator — Individual Entrepreneur Hotaki Nur Rahman, who organizes and/or carries out the processing of personal data and determines the purposes of processing, the composition of the personal data to be processed, and the actions performed with it.

Processing of personal data — any action (operation) or set of actions (operations) performed with personal data, with or without the use of automation tools, including collection, recording, systematization, accumulation, storage, clarification, extraction, use, transfer, depersonalization, blocking, deletion, and destruction of personal data.

User — any visitor to the Website https://drhotaki.com.

Consent of the data subject — a voluntary, specific, informed, and unambiguous expression of will by which the data subject agrees to the processing of their personal data.

Website — the set of graphic and informational materials, as well as computer programs and databases, made available at https://drhotaki.com on the Internet.


3. LEGAL GROUNDS FOR PROCESSING PERSONAL DATA

The Operator processes the user's personal data only if the user has filled in and/or submitted it independently through the form located on the Website.

The legal grounds for processing personal data are:
— the consent of the data subject, obtained when filling out the form on the Website;
— Federal Law No. 152-FZ "On Personal Data";
— documents confirming the Operator's status as an individual entrepreneur.


4. PURPOSES OF PROCESSING PERSONAL DATA

The user's personal data is processed by the Operator solely for the purposes of:
— contacting the user regarding the inquiry submitted through the form on the Website, including consultation on training-related matters and the area of interest indicated by the user;

— clarifying the details of the inquiry and providing the user with the requested information.
The Operator does not use the user's personal data for purposes unrelated to processing the submitted inquiry and does not carry out any automated processing of personal data that would produce legal consequences for the user.


5. CATEGORIES OF DATA SUBJECTS AND SCOPE OF PROCESSED DATA

The Policy applies to the personal data of individuals who have filled out the inquiry form on the Website.

When filling out the form, the Operator may process the following user data:
— first and last name;
— city of practice;
— phone number / WhatsApp;
— email address;
— specialization and accreditation details;
— the area of training the user is interested in;
— information on whether the user has an existing client base (without disclosing any personal data of those clients);
— any other information the user chooses to provide in free form in the "Comment" field.

The Operator does not process special categories of personal data (health information, biometric data, or other special categories), nor does it process the personal data of minors.

The user submitting the form is responsible for the accuracy and relevance of the data provided, and for ensuring that it does not fall under special categories of personal data or contain the personal data of third parties.


6. PROCEDURE AND CONDITIONS FOR PROCESSING PERSONAL DATA

The user's personal data is processed by any lawful means, including within personal data information systems, with or without the use of automation tools.

The user's personal data is not transferred to third parties, except as expressly provided for in this Policy or as required by the legislation of the Russian Federation.

To ensure the technical receipt and storage of inquiries, the Operator uses the following services (processors):
— Yandex services, used for the operation of the Website and/or analysis of its traffic;
— the Tilda website platform and CRM.

These parties process the user's personal data solely for the purposes defined in this Policy and are obligated to ensure the confidentiality and security of such data.

The Operator does not carry out cross-border transfer of personal data.


7. PERIOD OF PROCESSING AND STORAGE OF PERSONAL DATA

The user's personal data is stored and processed until the purposes of its processing have been achieved, or until the data subject withdraws consent — whichever occurs first.

Upon withdrawal of consent, the personal data is subject to destruction, unless otherwise required by the legislation of the Russian Federation.


8. RIGHTS OF THE DATA SUBJECT

The user has the right to:

— receive information concerning the processing of their personal data;
— request the clarification, blocking, or destruction of their personal data if it is incomplete, outdated, inaccurate, unlawfully obtained, or not necessary for the stated purpose of processing;
— withdraw consent to the processing of personal data;
— protect their rights and legitimate interests, including seeking damages and/or compensation for moral harm through the courts;
— appeal the actions or inaction of the Operator to the authorized body for the protection of the rights of personal data subjects (Roskomnadzor) or through the courts.

To exercise the above rights, or with any questions regarding the processing of personal data, the user may contact the Operator at the following email address: hello@drhotaki.com.

To withdraw consent to the processing of personal data, the user must send a request to the email address above, with the subject line "Withdrawal of Consent to Personal Data Processing."


9. MEASURES TO ENSURE THE SECURITY OF PERSONAL DATA

The Operator takes the necessary legal, organizational, and technical measures to protect personal data from unlawful or accidental access, destruction, alteration, blocking, copying, distribution, and other unlawful actions by third parties.

10. FINAL PROVISIONS

The Operator has the right to make changes to this Policy. Whenever changes are made, the current version indicates the date of the last update. The new version of the Policy takes effect from the moment it is published on the Website, unless the new version provides otherwise.

The current version of the Policy is permanently available on the Website at: https://drhotaki.com/privacy.

For any questions related to this Policy, the user may contact the Operator at: hello@drhotaki.com.

Operator:
Individual Entrepreneur Hotaki Nur Rahman
OGRN 1027700067328
INN 773612225602
Address: 11 Derbenevskaya Embankment, Pollars Business Center, Moscow, Russian Federation
Email: hello@drhotaki.com