Privacy Policy – Belarus Virtual Consult

1. Who we are

Belarus Virtual Consult (belarusvc.com) is an independent, non-governmental information platform. We are not affiliated with any government or state institution. Our contact email is [email protected].

2. What data we collect

We collect personal data only when you actively provide it:

Account data — email address and encrypted password when you register with email/password.
Profile data — country of residence and profile photo, which you voluntarily provide in your dashboard.
Social login data — if you sign in with Google or Yandex, we receive your email address and a unique account identifier from that provider. We do not receive your passwords from those services.
Usage data — aggregate, anonymised traffic statistics collected by Cloudflare (page views, country of visitor, browser type). This data does not identify you personally.
Contact form — name, email address and message content when you contact us.

We do not use advertising trackers, sell your data, or share it with third parties for marketing purposes.

3. How we use your data

To create and manage your user account.
To personalise your experience (e.g. display your country).
To send transactional emails: email confirmation, password reset. We do not send newsletters unless you explicitly subscribe.
To respond to your contact form messages.
To detect abuse, enforce our Terms of Service and protect the security of our platform.

4. Cookies and local storage

We use only technically necessary cookies:

sessionid — keeps you logged in during your browsing session.
csrftoken — protects forms against Cross-Site Request Forgery attacks.
django_language — remembers your selected language.

We do not use advertising, tracking or analytics cookies beyond what Cloudflare sets at the network level (see their policy at cloudflare.com/privacypolicy).

5. Third-party services

Cloudflare — provides CDN, DDoS protection and aggregate analytics. Cloudflare processes requests on our behalf under their own privacy policy.
Google OAuth — optional social login. Governed by Google's Privacy Policy.
Yandex OAuth — optional social login. Governed by Yandex's Privacy Policy.
Google Fonts — fonts loaded from Google servers. Google may log your IP address.

6. Data retention

Your account data is kept for as long as your account exists. You can permanently delete your account and all associated data at any time from your dashboard. Contact form messages are retained for up to 12 months.

7. Your rights

Depending on your country of residence, you may have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request deletion of your data.
Object to or restrict certain processing.
Data portability.

To exercise any of these rights, email us at [email protected]. You may also delete your account directly from your dashboard.

8. Security

Passwords are stored as secure hashes (never in plain text). All traffic is encrypted via HTTPS. We apply rate limiting and security headers to protect against common attacks. Despite these measures, no system is completely secure.

9. Children

This website is not directed at children under 16. We do not knowingly collect personal data from minors.

10. Changes to this policy

We may update this Privacy Policy periodically. The date at the top of this page reflects the most recent revision. Continued use of the site after changes constitutes acceptance of the updated policy.

11. Contact

Questions about this policy? Contact us at [email protected] or via the contact form.