1. What we collect
To deliver services and stay in touch with clients we collect the following personal data:
- Identity: first name, last name, patronymic (for estimate and contract)
- Contact: email, phone, WhatsApp
- Project: object type, area (m²), address, estimate details, notes
- Technical: IP address (hashed), browser, device type, visit date, pages viewed
- Payment: orderID, amount, status, timestamp (card data is NOT STORED at AZEA — processed only by ePoint/bank)
- Document: e-signature, contract approval date, IP, browser (within the Electronic Signature law)
2. Why we collect (purposes)
- Prepare and deliver the estimate
- Conclude and execute the design contract
- Send project-stage notifications (email + WhatsApp)
- Process payments (via ePoint/bank)
- Comply with legal obligations (tax, accounting law)
- Site security (anti-fraud, anti-bot)
- Improve quality (anonymous analytics)
3. Legal basis
Personal data is processed on the following legal grounds:
- Contract performance — data required for the service you ordered
- Consent — explicit consent given when registering or submitting the form
- Legal obligation — retention of tax and accounting records (5 years)
- Legitimate interest — site security, fraud prevention
Legal basis: Law of the Republic of Azerbaijan "On Personal Data" (No. 998-IIIQ, 11.05.2010) and international GDPR standards.
4. Data sharing
Your personal data is not sold, leased or transferred to third parties. Shared only in the following cases:
- Payment processor (ePoint, banks) — minimum data required for the transaction
- Email/SMS service — to deliver notifications
- WhatsApp Business API — notifications via Meta Cloud API (under its own Privacy Policy)
- Tax and government bodies — on legal request (court order, tax inspection, etc.)
- Legal counsel — only in case of dispute, under confidentiality
5. Cookies and tracking
The site uses the following cookies:
- Technical (essential): session management, CSRF token, language selection — required for the site to work
- Analytical: Google Analytics 4, Facebook Pixel — anonymised behaviour analysis
- Marketing: Meta (Facebook/Instagram) ad pixel — only with your consent
You can disable cookies in your browser settings, but without technical cookies your project cabinet will not work.
6. Retention period
- Active client: duration of contract + 5 years (tax law)
- Estimate (without registration): 90 days (via magic-link token)
- Marketing lead (no order placed): 2 years
- Invoices and payment records: 10 years (accounting law)
- Server logs (IP, visits): 12 months (security analysis), then deleted
7. Your rights
You have the following rights regarding your personal data:
- Right of access — request a copy of the collected data
- Right of correction — correct inaccurate data
- Right of deletion — "right to be forgotten" (within contractual obligations)
- Object to processing — opt out of marketing and profiling
- Portability — receive your data in a structured format
- Withdraw consent — at any time, with future effect
- Complaint — to the Ministry of Transport, Communications and High Technologies of the Republic of Azerbaijan
To exercise your rights, email design@azea.az. Your request will be answered within 30 calendar days.
8. Security
The following measures protect your data:
- SSL/TLS encryption (HTTPS) — for all transmissions
- Magic-link instead of password (90-day token) — no brute-force vector
- HMAC-signed session cookies — tamper-protected
- IPs stored as SHA-256 hash (raw IP is not stored)
- Regular security audits and daily DB backup
- Server-side rate-limit (anti-bot, anti-spam)
9. Children
The site is not directed at persons under 18. We do not knowingly collect data from anyone under 18. If you, as a parent or guardian, identify such a case, please write to design@azea.az immediately — the data will be deleted at once.
10. International transfers
Some of our providers (Google Workspace email, Meta WhatsApp Business API, Cloudflare CDN) may process data outside Azerbaijan. All such providers are bound by GDPR compliance and international Standard Contractual Clauses (SCC).
11. Changes
We reserve the right to amend this Policy. Material changes will be notified by email in advance. The date of the current version is shown above. By continuing to use the site you accept the updated version.
12. Contact
All privacy enquiries:
- 📧 Email: design@azea.az
- 📞 Phone: +994 55 502 32 46
- 💬 WhatsApp: +994 55 502 32 46
Response time: 24 hours during business days; same day for critical requests.