Consent to Personal Data Collection and Processing

This consent is granted to:

Individual Entrepreneur Ruslan Radikovich Sadykov (IE “Otherwise”)
Individual Identification Number: 980730351412
Brand: OWI Studio
Website: owi.studio
Email: hello@owi.studio

Hereinafter referred to as the Operator or OWI Studio, the owner and operator of the database and digital object containing personal data.

Consent is granted by the individual whose surname, first name and patronymic, if applicable, are entered in the “Full name” field of the relevant form.

The Full name field, the other form details and the fact that this Consent was granted are stored by the Operator as relating to one submitted general enquiry or one specialised brief.

When I submit a general enquiry, I consent to the collection and processing, to the extent provided by me, of:

• my surname, first name and patronymic, if applicable;
• company or project name;
• telephone number;
• email address;
• Telegram username or profile link;
• a description of the project, task and potential cooperation;
• other information I voluntarily enter in the form;
• documents, presentations, images and other files I attach and the information they contain.

When I submit a specialised Design Support, Product Discovery or UX/UI brief, I consent to the collection and processing, to the extent provided by me, of:

• my surname, first name and patronymic, if applicable;
• job title;
• a username, number or other contact in Telegram, Max or WhatsApp;
• email address;
• information about the company, product or brand;
• answers about the current situation, tasks, scope, platforms, materials, team and expected outcome;
• information about the budget, timing, decision-making process and how I learned about OWI Studio;
• other information I voluntarily enter in the brief’s free-text fields.

For either form, this Consent also covers:

• submission date and time, page address and the minimal technical information needed to operate and protect the form;
• information about granting or withdrawing this Consent;
• form type and version;
• Policy identifier 2026-08-26-v5 and this Consent identifier 2026-08-26-v4;
• a random temporary analytics-session identifier, page path without a query string, first-page path, source and medium, UTM parameters and the hostname of an external referrer without its full URL, path or query string;
• whether the form was opened and successfully submitted;
• minimal operational metadata and one-way HMAC values produced with a secret key that are needed for search, duplicate-submission protection and rate limiting.

Full IP addresses and user agents are not stored in general enquiries, specialised briefs or first-party analytics. For rate limiting, an IP address is used only while its HMAC is calculated; only the HMAC value is stored in the rate-limit table and is deleted approximately two days later, subject to the next cleanup cycle.

A general enquiry is linked to internal CRM fields: Inbound direction, company, contact, S1–S5 segment, status, owner, next action and its date. If discussion continues and the task is qualified, notes, replies, meetings, proposals, stage, value, currency and deal outcome may be processed.

A specialised brief is stored in separate server-side storage and does not automatically create a lead in the internal CRM. A random unique submission identifier and the brief type and version are also recorded for it.

A minimal security audit log may contain the internal submission identifier, form type, event, identifier of the staff member who performed the action and event time, without my contact details or form answers.

An optional local specialised-brief draft is saved to `localStorage` only after I explicitly enable this feature and is not transferred to OWI Studio before the form is submitted. The consent checkbox state, the fact of consent and the identifiers of the Consent and Policy are not written to the local draft.

I should not enter or attach excessive personal data, identity-document details, banking or medical information, or another person’s personal data without a lawful basis. Personal data should also not be included in UTM tags or other link parameters.

General-enquiry data is processed to:

• receive and review my enquiry;
• contact me and discuss a project, product, service or other task;
• clarify the task, scope, timing, budget and terms of potential cooperation;
• assess potential cooperation and prepare a proposal, estimate, presentation, quotation or draft agreement;
• maintain internal records of the lead, communication and possible deal;
• continue or resume discussion of the same enquiry;
• enter into and perform an agreement if the parties agree to cooperate.

Specialised-brief data is processed to:

• receive and review the brief;
• assess whether the task fits OWI Studio’s services and expertise;
• understand the context, goals, composition, scope, priorities and constraints of the work;
• assess expected timing, capacity, working format and preliminary cost;
• prepare questions, recommendations or a proposal;
• contact me using the details provided.

Data from both forms is also processed to protect against spam, duplicate submissions, abuse and unauthorised access, conduct first-party analysis of sources and conversion without creating a permanent user profile, evidence the granting or withdrawal of Consent and comply with the laws of the Republic of Kazakhstan.

I authorise the Operator to perform the operations with my personal data that are required for the stated purposes, including:

• collection;
• recording;
• organisation;
• accumulation;
• storage;
• correction and updating;
• use;
• provision of access to the extent required;
• limited access by the hosting provider and authorised persons in the cases set out in this Consent;
• restriction;
• deletion;
• destruction.

Processing may be automated or manual.

Limited third-party access is permitted only in the cases set out below and only to the extent required.

Recipients or persons with access to particular data may include:

• the server, database, file-storage and backup provider located in the Republic of Kazakhstan;
• authorised OWI Studio technical contractors where access is required to maintain the website and is subject to confidentiality;
• public authorities and other persons in cases provided by law.

When the forms are submitted, the website does not send their contents, contact details or files to email, Telegram, external CRM services, analytics systems, advertising systems or other external APIs.

The contents and contact details of both forms are encrypted by the application before being written to the server-side database, and the encryption key is stored separately from the encrypted data. This is not a claim that a certified cryptographic protection tool is used.

No cross-border transfer of personal data contained in a general form or specialised brief takes place when it is submitted.

The database and digital object containing personal data, attached files and backups are located in the Republic of Kazakhstan.

If, after the form is reviewed, I choose an external service for further communication, sending messages and files through it may result in processing outside the Republic of Kazakhstan under the service owner’s rules. OWI Studio uses such an external channel to transfer data abroad only when I have selected it and the cross-border transfer conditions under the laws of the Republic of Kazakhstan are met.

I do not consent to dissemination of my personal data in publicly available sources merely by submitting a form.

Submitting a general enquiry or specialised brief does not by itself authorise OWI Studio to publish my name, contact details, form contents or correspondence, attached files, a testimonial in my name, confidential project materials or information about me as a client or participant in a public case study.

Such information is published only where there is a separate lawful ground, an agreement or additional approval.

For a general enquiry, this Consent remains valid until 12 months have elapsed from my last communication with OWI Studio concerning the enquiry or potential cooperation, unless withdrawn earlier. Internal OWI Studio actions without my involvement do not extend this period.

For a specialised brief, this Consent remains valid until 12 months have elapsed from its submission, unless withdrawn earlier. Internal review or a change in the brief’s status does not extend this period.

An optional local specialised-brief draft remains current for up to 30 days. It is physically removed the next time the form is opened after that period, when draft saving is disabled, after successful submission or when browser data is cleared. If I do not open the form again or clear browser data, OWI Studio cannot remotely delete that local copy.

Minimal security audit logs are retained for no more than 12 months from the event. After the enquiry or brief itself is deleted, a limited operational trace may remain until the end of that period for security and to evidence the completed action.

If the parties enter into an agreement or another basis provided by law arises, particular data may be processed after this Consent ends only to the extent and for the period required by that basis.

To withdraw this Consent or request information, correction or deletion, I may contact OWI Studio through:

• email: hello@owi.studio;
• Telegram: @owistudio;
• telephone: +7 706 736 67 30.

My request must include information sufficient to identify the relevant enquiry or brief and confirm that the data belongs to me: full name, the contact used, the approximate submission date and, where available, the brief type or company or project name. The Operator may request additional information to protect the data from alteration or deletion at the request of an unauthorised person.

In response to my verified request about the existence and processing of personal data, the Operator provides the information or sends a reasoned refusal no later than 3 working days after receiving the request.

After receiving a withdrawal, the Operator stops processing and deletes the relevant data within 15 working days, or sends a reasoned refusal within the same period if retention or processing is required by law or an outstanding obligation.

A withdrawal sent to the Operator does not delete a local draft from my device. I can remove it by disabling draft saving, clearing the website’s browser data or reopening the form after 30 days have elapsed.

I grant this Consent electronically by completing a general form or specialised brief at owi.studio, selecting the checkbox next to the consent text, which is not selected in advance, and submitting the form. The form cannot be submitted without this confirmation.

To evidence receipt of Consent, the Operator records the following as relating to one submission:

• my full name;
• form type and version;
• submission date and time and the fact that the checkbox was selected;
• Policy identifier 2026-08-26-v5;
• this Consent identifier 2026-08-26-v4;
• the minimal technical information needed to evidence submission and protect the form.

The consent and its identifiers are not stored in a local specialised-brief draft.

The current version of this Consent is available at:

owi.studio/consent

The Personal Data Collection, Processing and Protection Policy is available at:

owi.studio/privacy