Privacy Policy

1.1. This Privacy Policy determines the Administration's responsibilities towards non-disclosure and protection of the confidentiality of personal data provided by the User on the Administration's request when register on the Tilda Platform (hereinafter — the Platform) and during further interaction with the Platform.

1.2. The Privacy Policy refers to all information that the Platform can collect about a User while they are using the services of the Platform. By registering on this Platform, the User consents to all terms of this Privacy Policy.

1.3. The Privacy Policy may be amended by the Administration without prior notification. The current Privacy Policy is at all times available at https://tilda.by/privacy/.

2.1. Administration determines for each purpose of Personal Data processing the categories and list of processed Personal Data, methods, terms of their processing and storage, the order of destruction of Personal Data upon achievement of the purposes of their processing or upon occurrence of other legal grounds.

2.2. The Administration has determined the following purposes of processing the User's Personal Data:

a) Providing access to the Platform (registration);
b) Ensuring the security of the Platform and its correct functioning;
c) Restoration of access to the Account (if it has been stolen/lost login and password/error in login during registration/no possibility to use two-factor authentication);
d) Provision of access within paid tariffs when paying by bank card;
e) Providing access within the paid tariffs when making a bank transfer from a legal entity;
f) Registration of domain names;
g) Ensuring the reliability of the Platform operation and the possibility of data recovery after failures by means of data backup and recovery technologies;
h) Processing on behalf of the User for realization of processes automated by the User using the Platform (regulated by the Order for Personal Data processing).

2.3. Legal basis for processing Personal Data

2.3.1. The purpose of processing — to provide access to the Platform (registration)

Processed Personal Data:

• Name;
• Email;
• Unique identifier of the User used on the Platform (ID).

Processing is carried out automatically/with the User's participation:

• IP;
• City/Country (by IP);
• Browser Version;
• Language;
• UTM parameters;
• Partner Tag;
• The address of a website page's referrer;
• Cookie data used to identify the User without the use of technical measures.

Grounds for processing of Personal Data — processing is carried out within the framework of fulfillment of contractual obligations.

Types of processing of Personal Data:

• Collection, recording, systematization, accumulation, storage of Personal Data;
• Clarification (update, modification) is performed by the subject of Personal Data via the profile management form, as well as automatically during the User's interaction with the Website;
• Personal Data is deleted by the User independently, on the page or automatically at the end of the storage period for the data collected in automatic mode;
• De-identification, blocking, destruction of Personal Data is performed through the Control Panel for User management.

Retention period of Personal Data — Personal Data shall be stored for the entire term of the agreement/for the terms established by the applicable laws of the Republic of Belarus.

Deletion of Personal Data — Personal Data are deleted by the User in the Personal Account. The fact of deletion is recorded in the Platform logs.

2.3.2. The purpose of processing — to ensure the security of the Platform and its correct functioning

Processed Personal Data — phone number.

Grounds for processing of Personal Data — processing is performed within the framework of fulfillment of contractual obligations.

Types of processing of Personal Data:

• Collection, recording, systematization, accumulation, storage;
• In case of suspicion of fraudulent actions, spam, or mass registration, the User provides the Administration with a contact phone number to confirm its independent actions in the Personal Account;
• Viewing, depersonalization, blocking through the Control panel for user management.

Retention period of Personal Data — Personal Data shall be stored during the entire term of the agreement/for the terms established by the applicable laws of the Republic of Belarus.

Deletion of Personal Data — Personal Data are deleted by the User in the Personal Account. The fact of deletion is recorded in the Platform logs and stored for the period of time specified by the current legislation of the Republic of Belarus.

2.3.3. The purpose of processing — to restore access to the Account (if it has been stolen/lost login and password/error in login during registration/no possibility to use two-factor authentication)

Processed Personal Data:

• The last 4 digits of the bank card;
• Phone number.

Grounds for processing of Personal Data — processing is performed within the framework of fulfillment of contractual obligations.

Types of processing of Personal Data:

• Collection, recording, accumulation, storage, depersonalization, blocking, deletion;
• Viewing through the Control Panel for user management.

Retention period of Personal Data — Personal Data shall be stored until the goal is achieved.

Deletion of Personal Data — Personal Data are deleted by the Administration after the goal is achieved.

2.3.4. The purpose of processing — to ensure the reliability of the Platform operation and the possibility of data recovery after failures using data backup and recovery technologies

Processed Personal Data — all data processed by the Administration.

Grounds for processing of Personal Data — processing is carried out within the framework of fulfillment of contractual obligations.

Types of processing of Personal Data:

• Storage;
• Use for recovery of Personal Sata in case of failures;
• Dissemination (provision) for realization of geo-distributed storage of backup copies;
• Deletion is performed automatically upon expiration of the retention period of the backup copies of the data.

Retention period of Personal Data — Personal Data shall be stored for the entire term of the agreement/for the terms established by the applicable laws of the Republic of Belarus.

Deletion of Personal Data — Personal Data is deleted automatically upon expiration of the retention period of the backup copies of the data, as part of the backup and recovery process in place.

2.3.5. Purpose of processing — granting access within the framework of paid plans when paying by bank card

Processed Personal Data:

• Surname and first name on the card;
• Last 4 digits of the card;
• Card validity period.

Grounds for processing of Personal Data — processing is carried out within the framework of fulfillment of contractual obligations.

Types of processing of Personal Data:

• Receipt of Personal Data from third parties, recording, systematization, accumulation, storage of Personal Data is carried out after payment for the plans on the page;
• Clarification (update, modification) is not performed;
• Deletion, depersonalization, blocking, destruction of Personal Data is performed through the Control Panel for user management.

Retention period of Personal Data — Personal Data shall be stored for the entire term of the agreement/for the terms established by the applicable laws of the Republic of Belarus.

Deletion of Personal Data — Personal Data shall be deleted after the expiration of the retention period specified by the applicable laws of the Republic of Belarus.

2.3.6. Purpose of processing — providing the access within the framework of paid plans when making a bank transfer from a legal entity

Processed Personal Data:

• Full name of the director or a person authorized to sign;
• Name, email, phone number of the contact person.

Grounds for processing of Personal Data — processing is carried out within the framework of fulfillment of obligations under the contract with the User (legal entity), in the framework of which the User (legal entity) undertakes to obtain all necessary consents from the subjects of Personal Data, whose Personal Data are processed by the Administration.

Types of processing of Personal Data:

• Collection, recording, systematization, accumulation, storage, clarification (update, modification), depersonalization and deletion of Personal Data is carried out by the User on the page;
• Clarification (update, modification), destruction of Personal Data is carried out through the Control Panel for company management.

Retention period of Personal Data — Personal Data shall be stored for the entire term of the agreement/for the terms established by the applicable laws of the Republic of Belarus.

Deletion of Personal Data — Personal Data shall be deleted after the expiration of the retention period specified by the applicable laws of the Republic of Belarus.

2.3.7. Purpose of processing — domain name registration

Processed Personal Data:

• Full name;
• Passport data of the domain owner including the registration address;
• INN of the User (individual entrepreneur);
• Full name, email, phone number of the person providing technical support of the domain;
• Full name, email, phone number of the domain administrator;
• Full name, email, phone number of the person responsible for domain payment.

Grounds for processing of Personal Data — processing is carried out within the framework of fulfillment of contractual obligations.

Types of processing of Personal Data:

• Collection, recording, systematization, accumulation, storage of Personal Data is carried out from the page;
• Clarification (update, modification) is not performed;
• Dissemination (provision) is performed to the Domain Registrar company, which performs domain registration;
• Deletion, depersonalization, blocking, destruction of Personal Data is carried out automatically after domain registration.

Retention period of Personal Data — Personal Data shall be stored until the goal is achieved.

Personal Data deletion — Personal Data shall be deleted by the Administration after the goal is achieved.

2.4. Payment Policy

Payment for the Plan, according to which the User uses the Platform services, is made through the use of Bepaid and WebPay payment systems. These payment systems collect and store financial information in accordance with their user agreements and privacy policies.

The Administration does not store full card details and does not process payments, receiving from the payment system only a notification of the fact of successful payment.

In the process of receiving payment for the Plan, the Administration may collect additional information related to the payment made by the User, including, inter alia, the transaction number, transaction time, type and expiration date of the card used for payments, as well as the last four digits of the card number, the name of the cardholder, the country, and city where the card has been charged.

It is understood, however, that when receiving payment for the Tariff, the Administration may collect additional information including, inter alia, transaction number, transaction time, type and expiration date of the card used for payments as well as the last four digits of the card number, the cardholder's name, country, and city where the card has been charged.

2.5. Processing of Personal Data during domain registration

The User has the option of registering a domain name in their personal account on the Platform. This service is provided by the domain name registrar LLC Domains Registrar REG.RU or LLC Tilda Domains. All personal data required for domain registration shall be processed and stored in accordance with the privacy policy of the domain name registrar. The Platform provides a user interface for transferring personal data to the domain name registrar.

2.6. Personal Data requested by third party services

The User may be required to provide access to accounts of third-party service providers including, inter alia, public file storage, instant messaging service, social networks, and other in order to use different Services. In this case the Administration may receive additional personal data from the third-party provider including, inter alia, gender, location, userpic, etc. All information accessed through the third-party service provider shall be processed and stored in accordance with the Terms of Service Agreement and Privacy Policy.

2.7. Activity Logging

For the purposes of security and fraud prevention, when the User is logged into their Account the following activities are logged: date and time of signing in, date and time when the project and page was created, date and time when the projects and pages were deleted, date and time when the login and password were changed, date and time when the projects or pages were transferred to other Accounts.

3.1. General Provisions

The Administration provides the User with the Platform, which can be used by the User for processing Personal Data.
The processing and storage of Personal Data processed (including those collected, stored and published) by Users on the Users' websites is carried out legally, for a period of time determined by the User themselves.

The operator of this data is the User, and the Administration is the authorized person to whom the User entrusts the processing of personal data of its clients (according to the terminology defined in the Law of the Republic of Belarus of May 7, 2021 No. 99-З "On Personal Data Protection").

The User must obtain all necessary consents from their clients when processing their Personal Data, including consent to the distribution (provision) of Personal Data within the group of companies of the Administration, as well as consent to entrust the processing of Personal Data of their clients to third parties (for example, third-party providers of server hosting services, etc.).

The User independently decides which services of the Platform to use on their website to process Personal Data of their clients (collection of applications, orders, etc.).

The User is fully responsible for compliance with all laws and regulations that apply to the processing of Personal Data of their clients, including through the functionality and services of the Platform.

The User shall publish their own privacy policy on their website and comply with it.

The Administration is not responsible for the User's relationship with their clients or for the way the User processes their Personal Data (even if the User collects it using the functionality and services of the Platform), and the Administration does not and will not provide the User with any legal advice on such matters.

3.2. The Administration processes Personal Data collected by the User on their websites on behalf of the User for the purposes determined by the User themselves.

3.3. If the User uses the website of the payment system, the Administration on behalf of the User may receive partial data on the successful processing of the payment to ensure interaction between the website and the payment system.

The function of logging and storage of partial data on successful payment processing is enabled by default. This function is configured by the User independently in the Personal Account. The User can change the period of data storage or disable this function.

The data collected on the User's website are stored for the duration of the User's Account.

The User is prohibited from processing biometric, genetic, special and other sensitive Personal Data of their clients.

3.4. User's responsibility

In case the User processes Personal Data of third parties, the User is solely responsible for compliance with appropriate measures to protect Personal Data in accordance with the the Law of the Republic of Belarus of May 7, 2021 No. 99-Z "On the Protection of National Data" and other laws and regulations, including in terms of obtaining appropriate permissions, placing on the User's Site the necessary documents and information.

The Administration is not authorized to provide legal advice to Users, however, recommends Users who process Personal Data to place user agreement, privacy policy on the website and add in the form for data collection the links to these documents and a special field to obtain explicit consent that the user has read and agrees with these rules.

The website created by the User uses cookies by default. If the User does not plan to use this function and work with Personal Data, they should independently disable the use of cookies in the Site Settings.

3.5. Data Processing Agreement

The processing of Personal Data processed by the User with the help of the Platform is governed by Data Processing Agreement. By using the Platform to process Personal Data, the User thereby expresses their consent and accepts the Data Processing Agreement.

The main ways in which the Administration obtains the User's Personal Data:

a) The User provides Personal Data directly (for example, when registering or connecting and using third-party services integrated into the Platform);
b) Personal Data is collected automatically when the User browses or uses the Platform, for example by means of cookies (more details in the Cookie Policy);
c) Personal Data may be obtained from third parties and services integrated into the Platform and used by the User.

5.1. The User may be required to provide Personal Data and other information when using third-party services, for example, when making a transaction or integrating third-party services that give additional features to the User's website. The User provides this information voluntarily and on their own accord. All personal data required by third-party services shall be processed and stored in accordance with their Terms of Service Agreement and Privacy Policy.

5.2. The Administration may transfer Personal Data to suppliers who provide services on behalf of the Administration. For example, the Administration may engage third parties to provide support to Users, manage ads on third-party resources, send marketing and other messages on behalf of the Administration or assist in data storage. These third parties are prohibited from using Personal Data of Users for advertising purposes.

5.3. The Administration may disclose Personal Data of the User within the law or for the protection of rights and interests, if such disclosure is required to comply with the law or prevent fraud. In particular, the Administration may disclose the User's Personal Data in response to official requests from public authorities or in case of receiving a complaint against the User in connection with the violation of the rights of third parties and/or the Terms of Service Agreement on the grounds provided by law.

5.4. Administration may exchange Personal Data with third parties in order to provide the User with targeted advertising, analyze and monitor its effectiveness. For example, the Administration may use an encrypted email address to customize advertising in the social network, in order not to show advertising to persons who are already Users of the Platform.

5.5. The Administration may transfer Personal Data to third-party providers who provide services on behalf of the Administration on behalf of the Administration. For example, the Administration engages providers of hosting and server hosting services, content delivery networks (CDN), providers of data transmission and cybersecurity services, payment systems, providers of web analytics services, providers of services for distribution and monitoring of electronic messages, content providers, legal and financial advisors.

5.6. To host and ensure the functioning of the Platform, the Administration entrusts the processing (storage) of all personal data listed in this document and uses the services of data processing center providers, which are located in the territory of the Republic of Belarus, and with whom all necessary agreements have been concluded to guarantee the security of personal data processed by them: the main provider of data storage services for Users from the Republic of Belarus – "Support Chain" LLC (HostFly).

5.7. In order to provide Users with technical support services and processing of their requests, the Administration entrusts the processing (including collection, recording, accumulation, storage, depersonalization, blocking, deletion, viewing through the Administrative panel for user management) of all personal data listed in this document to "Tilda Publishing" LLC (Russia), with which the Administration has all necessary agreements that guarantee the security of processed personal data and respect for the rights of Users.

6.1. The processing and storage of the User's Personal Data is carried out legally during the existence of the User's Account, as well as within the terms established by the current legislation of the Republic of Belarus. In case of deletion of the Account, it is possible to retain part of the information to the extent necessary to fulfill legal obligations, settle disputes, prevent fraud, and protect the legitimate interests of the Administration.

The Administration takes all necessary technical and organizational precautions to protect User's personal data against unauthorized or accidental access, deletion or alteration, blocking, copying, disclosure, or other unauthorized actions of third parties.

In case of loss or disclosure of the User's Personal Data, the Administration shall notify the User of the fact of their personal data loss or disclosure.

6.2. Information on the measures taken by the Administration to ensure Personal Data protection:

a) appointment of the person responsible for internal control over personal data processing;
b) issuance of documents defining the policy on personal data processing;
c) familiarization of the operator's (authorized person's) employees and other persons directly involved in the processing of personal data with the provisions of the legislation on personal data, including the requirements on personal data protection, documents defining the operator's (authorized person's) policy regarding the processing of personal data, as well as training of the said employees and other persons in accordance with the procedure established by the legislation;
d) establishment of the procedure of access to personal data, including those processed in the information resource (system);
e) implementation of technical and cryptographic protection of personal data in accordance with the procedure established by the Operational and Analytical Center under the President of the Republic of Belarus, in accordance with the classification of information resources (systems) containing personal data;
f) ensuring unrestricted access, including through the global computer network Internet, to the documents defining the operator's (authorized person's) policy on personal data processing, prior to the commencement of such processing;
g) other measures defined in local normative legal acts.

The Administration shall organize, inter alia:

a) A system of continuous monitoring of detection of non-standard behavior of information systems with subsequent analysis for authentication or common errors;
b) Provision of a secure channel for accessing/processing Personal Data;
c) Introduction of two-factor authentication for both Administration employees and its partners and Users;
d) Annual audit of the information system, which is a control over the measures taken to ensure the security of Personal Data and the level of protection of the information system of Personal Data;
e) Loosely coupled microservice architecture, where each microservice processes only those Personal Data and the minimum necessary for its operation.

The Administration detects facts of unauthorized access to Personal Data and takes measures, including detection, prevention and elimination of consequences of computer attacks on information systems of Personal Data and response to computer incidents in them.
The Administration has adopted local acts on Personal Data security issues.

Employees of the Administration having access to Personal Data are familiarized with this Policy and local acts on Personal Data security issues.

Cookies are small text files sent by a server and stored on the User's device. Cookies perform many functions, for example, they can save the settings made by the User, allow you to move between pages after signing in, and, on the whole, make working on a website easier.

Here is how we use cookie files:
а) Identification — cookie files allow website providers to recognize your advice and your Account so they do not have to request your login details and password every time you go to another page;
b) Analytics — cookie files allow us to obtain information about how many times this or that page was viewed.

You can read our cookie policy in more detai by clicking here.

8.1. The User can independently, by authorizing in the Personal Account, update, restrict the use or change Personal Data they have provided.

8.2. In order to withdraw Personal Data and delete the Account, the User should send a relevant request to the legal@tilda.by email address, in response to which the User will receive a letter with a link to the page in the Personal Account, where they will have to confirm their intention to delete Personal Data and the Account.
The deadline for deleting Personal Data is 15 days from the moment the User confirms their intention to do so.

8.3. For technical reasons, the information may be deleted not immediately, but with a delay. In this case, the Administration blocks such Personal Data until their complete deletion from its databases, in connection with which, such Personal Data become inaccessible and their use - impossible.
It should also be taken into account that it is possible to retain some of the information to the extent necessary for the fulfillment of legal obligations, dispute resolution, fraud prevention and protection of legitimate interests of the Administration.

8.4. After the final deletion of data and Account, all Personal Data and information will be deleted from the databases of the Administration (after the expiration of storage periods established by applicable law). Upon completion of this process, the User will no longer be able to use the Platform services, and the Account and all data will be deleted without the possibility of recovery.

8.5. Information about the User's rights provided by the Law of the Republic of Belarus No. 99-З of May 7, 2021 "On personal data protection" and their realization by the Administration is given in the table below.

9.1. In relation to the Administration, the User provides their Personal Data and keeps it up to date.

9.2. The User independently regulates relations with third parties, with whom they interact through their website, regarding the data collected on the User's website and bears responsibility both to third parties and to regulatory authorities.

10.1. The Administration undertakes to:

a) Use Personal Data provided by the User exclusively for the purposes specified in this Privacy Policy;
b) Keep the confidentiality of Personal Data; not to disclose Personal Data of the User without prior permission of the User, except as expressly provided by law; not to sell, exchange, publish or disclose it Personal Data by any other means, except for the means specified in Сlause 6 of this Privacy Policy;
c) Take measures to protect the confidentiality of the User's Personal Data in accordance with standard procedures;
d) Immediately block the User's Personal Data after receiving a request from the User or their legal representative or the appropriate authority for the protection of the User's Personal Data during the verification of this information in case of detection of invalid data or unauthorized actions.

10.2. The Administration may provide Personal Data of the User at the request of public authorities and other officials in the relevant jurisdiction solely on the grounds of and in accordance with the legislation of the Republic of Belarus and international legal acts.

In case of failure to perform its obligations, the Administration accepts liability for any losses, which amount is limited to the cost of the Plan, incurred by the User as a result of the unauthorized use of their Personal Data, in accordance with the legislation of the Republic of Belarus, except for the cases when Personal Data:

a) was disclosed to the competent authorities of the Republic of Belarus;
b) was disclosed by the third party after it was shared by the Administration with the User's consent;
c) became public before it was lost or disclosed;
d) was received from a third party before it was provided to the Administration;
e) was disclosed with the User's consent;
f) was disclosed as a result of a force majeure event;
g) was disclosed as a result of a justified claim addressed to the User regarding the violation of the third parties' rights and/or the Terms of Service Agreement.

If you have any questions, comments or complaints about this Privacy Policy, please send us a request to the ticket system if you are an authorized User of the Platform.

If you are not an authorized User of the Platform, please contact us by sending an email to legal@tilda.by. A response will be sent within the time period established for consideration of appeals.