Privacy policy
What data we process, why, where it is stored, for how long and how to delete it. Drafted under Russian Federal Law 152-FZ; all processing takes place in Russia. Version of 12.09.2026.
Version of
Version of 12.09.2026. This policy explains in plain language what happens to your data on the OsteoplusX website. It is drafted in line with Article 18.1 of Russian Federal Law No. 152-FZ «On Personal Data»[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →.
Who is the data controller?
The controller (in Russian law, the «operator») is {{ORG_NAME}}, taxpayer number (INN) {{INN}}, address: {{ADDRESS}}. The controller is the party that decides which data to collect and why. Questions about your data: info@osteoplusx.ru.
We are not a medical organisation. We provide information, consulting and organisational services of a treatment navigator. We do not diagnose and do not prescribe treatment — only your treating physician does that[2]2Федеральный закон № 323-ФЗ «Об основах охраны здоровья граждан», ст. 36.2 — КонсультантПлюс, 2011To the list of sources →.
Why do we process data?
We use your data for three purposes only:
- Replying to your enquiry. To contact you through the channel you chose and answer your question.
- Providing information and consulting services. To prepare a consultation, a written summary and follow-up support, if you order them.
- Meeting legal requirements. For example, keeping payment records and a log of consents[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →.
We do not sell data, do not pass it to advertising networks and do not use it for hidden profiling.
What data do we collect?
Through the website forms we receive only what you type in yourself:
- your name (how to address you);
- a contact: Telegram or MAX account, email or phone number;
- the joint in question (knee, hip, both, not sure);
- the text of your message.
We do not collect medical documents through the website. Scans, discharge summaries and diagnoses are a special category of data. The law requires a separate written consent for them[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →. If such documents are needed for a paid service, you send them only after a separate consent and through a secure channel that we agree with you personally.
The website may automatically receive technical data: IP address, browser type, the pages you opened. Analytics is switched on only after your consent — see the cookie section below.
On what legal basis do we do this?
Legal grounds for processing:
- your consent — for replying to an enquiry and for analytics[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →;
- a contract (public offer) — for providing paid services;
- legal requirements — for keeping payment records and a log of consents.
You give consent separately by ticking an empty box in the form. The consent text is open on the page «Consent to personal data processing». It is not hidden inside the offer and is never treated as given «by default»[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →.
Where and for how long is data stored?
All databases containing personal data are physically located on servers in Russia, as Article 18 of the law requires[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →. Processing is governed by Russian law. Please note: there is no European Commission adequacy decision for Russia. This means that if you are in the EU or the UK, your data is transferred to a country whose data protection rules have not been recognised as equivalent to the GDPR. By submitting a form, you accept this.
| What we keep | For how long | Why |
|---|---|---|
| Website enquiries | 3 years or until consent is withdrawn — whichever comes first | Replying to the question, repeat enquiries[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources → |
| Paid-service materials (summary, correspondence) | For the term of the contract and 3 years after | Complaints and contract law requirements |
| Consent log (date, time, hash of the text) | 3 years | Proof that consent was given[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources → |
| Payment records | The period set by tax law | Legal obligation |
Once the period ends, data is deleted or anonymised. To anonymise means to remove everything that could identify a person.
Who do we share data with?
We share data only with parties without whom the service cannot be provided, and only to the extent needed:
| Recipient | What it receives | Condition |
|---|---|---|
| Hosting provider in Russia | Stores the database and website files | A contract with a duty to protect data |
| Telegram (notification to the manager) | Only the topic, the joint and the language of the enquiry — no name or contacts | No personal data goes to the messenger |
| Payment provider | Data needed for the payment and the receipt | Only when you pay for a service; we never see card details |
| Yandex Metrica | Anonymised visit data | Only after your consent in the cookie banner |
We do not carry out cross-border transfers — that is, transfers outside Russia. There is one exception: you yourself may choose a messenger for correspondence whose servers may be located abroad (for example, Telegram). In that case the data travels through it by your own choice.
What are your rights?
Under Article 14 of the law you can[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →:
- find out what data about you we hold;
- correct it if it is inaccurate or outdated;
- delete data if it is no longer needed for the purpose of processing;
- withdraw consent at any time.
To do so, write to info@osteoplusx.ru from the same email address or messenger account you used in the enquiry. We will reply within 10 working days, as set by law[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →. Withdrawing consent does not affect processing that was lawful before the withdrawal. If you believe we have violated your rights, you can complain to Roskomnadzor, the Russian data protection authority.
How does the website use cookies?
Cookies are small records that a website saves in your browser. We divide them into two groups.
Essential. They store your choices: reduced motion, large-font mode and your answer to the cookie banner itself. Without them the website cannot remember your settings. They cannot identify you, so no consent is requested for them.
Analytics. Yandex Metrica counts visits and shows which pages are useful. It loads only after you click «Accept analytics» in the banner. If you click «Essential only», analytics is not switched on.
You can change your choice at any time: click «Cookie settings» in the website footer. Details are on the page «Cookie policy».
How do we protect data?
- The connection to the website is encrypted (HTTPS).
- Only the navigator and the manager have access to enquiries, under a confidentiality agreement.
- Forms are protected from spam bots invisibly — no picture captchas.
- Notifications to the manager contain no personal data.
- We keep a consent log: the date, the time and a checksum of the text you saw[1]1Федеральный закон № 152-ФЗ «О персональных данных» — КонсультантПлюс, 2006To the list of sources →.
We never ask for passwords, card details or identity documents.
How does this policy change?
A new version is published on this page with its date. If a change materially affects your rights, we will announce it on the website in advance.
The information on this website does not replace a doctor’s consultation. Warning required by advertising law[3]3Федеральный закон № 38-ФЗ «О рекламе», ст. 24 — КонсультантПлюс, 2006To the list of sources →: Contraindications may apply. Consult a specialist.