Privacy Policy

1. Who we are

Appfield (“we”, “us”) operates appfield.studio and related contact channels. We are based in Almaty, Kazakhstan, and act as the controller for personal data submitted through this website.

Contact: hello@appfield.studio.

2. Data we collect

When you use the contact form or book a call, we may collect your name, email, phone, company, budget range, requested services, and message content.

We also collect technical data such as IP address, browser type, and cookie preferences when analytics is enabled after your consent.

3. Why we process data (legal bases)

Pre-contractual steps and responding to your inquiry (legitimate interest / contract).

Operating and securing the website (legitimate interest).

Analytics cookies only after consent (consent under GDPR where applicable).

4. Retention

Lead inquiries are kept for up to 24 months unless a longer period is required for an active project, legal claim, or accounting obligation. Analytics retention follows the provider defaults you consented to.

5. Sharing

We use processors such as email delivery (e.g. Resend), hosting (e.g. Vercel), optional CRM webhooks, and analytics providers (GA4 / GTM / Yandex Metrika / Microsoft Clarity) when enabled. We do not sell personal data.

6. International transfers

Because we work with global infrastructure, data may be processed outside your country. Where GDPR applies, we rely on appropriate safeguards such as standard contractual clauses offered by our providers.

7. Your rights

Depending on your jurisdiction, you may request access, correction, deletion, restriction, portability, or object to processing. You may withdraw cookie consent at any time by clearing site data or contacting us.

EU/EEA users may lodge a complaint with their local supervisory authority.

8. Security

We apply reasonable technical and organizational measures (TLS, access controls, rate limiting on forms). No method of transmission is 100% secure.