Privacy Policy

Last Updated: October 25, 2026

Effective Date: October 11, 2026

This Privacy Policy describes how shushanik.co (“I,” “me,” or “my”) collects, uses, and safeguards information about the people (“you” or “your”) who visit or interact with my website. shushanik.co is operated by Shushanik Gyozalyan, Individual Entrepreneur (TIN 67290936), registered at 41 Tigran Mets Ave, Vanadzor 2001, Republic of Armenia. The term “Website” refers to all pages, content, and features available at shushanik.co.

You are never required to share personal information with me. If you do not wish to provide me with your personal information, or to have it processed by me or any of my service providers, please do not provide it to me and avoid any interaction with me or my Website.

By using my Website or purchasing my products or services, you are agreeing to this privacy statement and that I may use and disclose your information as described in this policy.

1. Key Terms

To keep things clear, here is how I use a few important terms throughout this policy:

“Personal information” means any data that can be used to identify you or that can reasonably be linked to you, such as your name, email address, or phone number.
“Processing” means anything I do with your data, collecting, storing, using, or deleting it.
“Third-party service providers” means companies I work with to help operate my Website and deliver my services (e.g., email platforms, analytics tools, payment processors).

2. Information I Collect

a) Information You Provide Voluntarily

I only collect personal information that you choose to share with me directly e.g. when you sign up for my newsletter, download a resource, submit a contact form, or purchase a service. The information you may provide includes:

Identifiers and contact details: Name, email address, billing address, phone number, and social media handle
Account credentials: Username and password for logging into my website
Demographic information: Date of birth and gender
Payment details: I do not collect, see or store your card details. Card payments are made on Ameriabank’s secure payment page (see “Payment Information” below). If you pay by bank transfer, I see the details your bank includes with the transfer
Transactional information: Product details, purchase price, and the date and location of the transaction
Multimedia content and documents: Images, videos, voice recordings, text, or documents you upload or share with me in connection with my services (including my website creation service)
Other information you voluntarily provide in your interactions with me

By submitting a form on my Website, you are giving me your explicit consent to collect and use the information you have provided for the purpose stated on that form. Providing your information is entirely your choice. Choosing not to do so will not affect your ability to browse my Website, but may limit your access to certain resources or services.

b) Automatically Collected Information

I do not directly collect or store data such as IP addresses, browser types, or the specific pages you visit. However, because the Website connects to Google Analytics, that service may automatically gather certain usage data on my behalf, including:

IP address and approximate geographic location
Browser type and version
Operating system
Pages visited, time spent on each page, and referring URLs

This data is collected and stored by Google Analytics under its own privacy policy. I access it only in aggregate, summarized form to understand how the Website is being used and to improve the experience for visitors. I do not use this data to identify you individually.

c) Cookies

My Website uses cookies: small text files stored on your device by your browser. Below is a summary of the cookie types that may be active on my Website:

Cookie Type	Purpose
Essential	Required for the Website to function correctly. These cookies enable core features such as page caching, which helps the site load faster for returning visitors. These cookies are always active.
Analytics	Used by Google Analytics to help me understand how visitors navigate and use my Website. This data is collected in aggregate and is not used to identify you personally. These cookies are only activated with your consent.
Advertising	I do not currently run paid advertising campaigns. If this changes in the future (e.g., through Google Ads or Meta Ads), advertising cookies may be introduced to measure campaign performance. This policy will be updated accordingly, and your consent will be requested before any such cookies are activated.

You can manage or disable cookies at any time through your browser settings or by clearing your browser’s cache and cookies. Note that disabling cookies may affect how certain parts of my Website function.

d) Payment Information

Card payments on this Website are processed by Ameriabank CJSC, a bank licensed in the Republic of Armenia. When you choose to pay, you are taken to the bank’s secure payment page and you enter your card details there.

Your card number, expiry date and security code are never entered on this Website. I never receive them, see them or store them.
The connection to the bank’s payment page is encrypted, and payments are verified with 3-D Secure, the extra confirmation step your own bank may ask you to complete.
Before sending you to the bank, the Website asks for your name, an email address for your receipt, your phone number and your billing address. I keep these with your order. I pass the bank only the order number, the amount and a description of what you are buying.
After the payment, the bank tells me whether it succeeded and gives me a payment reference. It may also show me a masked version of the card number, with most digits hidden. That is not enough to use the card.
Apple Pay and Google Pay payments, where offered, go through the same bank page and are handled the same way.
I do not take automatic or recurring payments, and no card is kept on file.

For payments by bank transfer, I receive only the information your bank includes with the transfer, and I use it only to match the payment to your order.

I keep a record of each transaction (the order, the amount, the date and the result) for at least 3 years, as my agreement with the bank requires, and for longer where Armenian accounting and tax law requires it. On request I must provide these records to the bank.

3. Legal Basis for Collecting Your Information

Where required by law, I rely on one or more of the following legal grounds when collecting and using your personal information:

Consent: you have clearly and voluntarily provided me with your information (for example, by submitting a form or signing up for a newsletter).
Contractual necessity: processing your information is necessary to deliver a service you have purchased from me.
Legitimate interests: I have a legitimate business interest in understanding how my Website is used so that I can improve it, provided this does not override your rights and interests.
Legal obligation: I may be required to retain certain data (such as financial records) to comply with applicable laws, accounting requirements, or other regulatory obligations.

4. How I Use Your Information

I use the information I collect for the following purposes:

To deliver the content, materials, or services you requested (e.g., newsletters, downloadable resources)
To send you marketing communications and updates that you have opted into
To improve my Website’s performance, content, and user experience through aggregate analytics
To process payments and refunds for the services you buy
To respond to your inquiries or support requests
To fulfill legal, accounting, or regulatory obligations where required

5. How I Share Your Information

I do not sell your personal data to any third party. Your information is shared only where strictly necessary to operate my Website and deliver my services, and only with trusted providers who are contractually required to handle it responsibly. These include:

Google Analytics, for aggregate website usage analysis
Email marketing platforms, to send newsletters and marketing communications you have subscribed to
Ameriabank CJSC: to process card payments and refunds. The bank receives the card details you enter on its own page, and from me the order number, amount and description

I may also disclose your information if required to do so by law, court order, or a lawful request from a government authority.

6. Your Rights

Depending on where you are located, for example in California, Colorado, the European Union, or the United Kingdom, you may have certain rights regarding your personal information. A summary of those rights is set out below.

Right to know and access: You may request details about what personal information I hold about you, how I collected it, and how I use it. You may also request a copy of that information in a machine-readable format.
Right to correction: If any of the personal information I hold about you is inaccurate or incomplete, you may ask me to correct it and I will make commercially reasonable efforts to do so.
Right to erasure: You may ask me to delete your personal information. Please note that I cannot remove your data without also removing you from any programs or services you are currently enrolled in.
Right to restrict processing: Under certain conditions, you may ask me to limit how I use your personal information. Where this right applies and your request is valid, your data will be flagged and used only for specific, limited purposes.
Right to object: You may object to my processing of your personal information under certain conditions. I do not currently use automated decision-making or profiling. If you do exercise this right and it applies to your situation, I will stop processing your data for the relevant purpose, unless processing is necessary to fulfil a contract with you.
Right to data portability: Where applicable, you may request a copy of your personal information in a structured, portable format.
Right to withdraw consent: Where my processing of your data is based on your consent, you may withdraw that consent at any time. Withdrawing consent will not affect the lawfulness of any processing that took place before your withdrawal.
Right to opt out of marketing: You may stop receiving my marketing emails at any time by clicking the “Unsubscribe” link at the bottom of any email, or by contacting me directly at legal@shushanik.co. Please note that even after opting out of marketing communications, I may still contact you by email in response to a question or request you have submitted.
Right to non-discrimination: Exercising any of the rights described above will never result in you receiving a different level of service or being treated differently by me in any way.

Please note that many of the rights above are subject to conditions, exceptions, and limitations under applicable law. My response to any request will depend on the nature of the request and your location, and will be provided within the timeframe required by the law that applies to you.

For California residents: You may designate an authorized agent to submit a privacy request on your behalf. If you do so, I will require verification that you have granted that person permission to act for you.

Submitting a request: To exercise any of the rights above, please email me at legal@shushanik.co with the subject line “Data Request.” Your request should include enough detail for me to verify your identity and understand what you are asking for. Any personal information you provide when submitting a request will be used solely for the purpose of verifying your identity and processing your request.

7. Data Retention

I keep your personal information only for as long as it is genuinely needed:

Newsletter and marketing subscribers: Your data is retained while you remain subscribed. Upon unsubscribing, your information is removed from my active mailing lists.
Client and service data: Retained for the duration of my working relationship, and thereafter only as required by applicable legal or accounting obligations.
Your website’s source files: After handover, I may retain a copy as a backup for up to 3 years, as set out in my Terms & Conditions. You may ask me to delete it at any time after handover.
Payment records: I hold no card details. Records of transactions are kept for at least 3 years, and for longer where the law requires it

You may request deletion of your data at any time, regardless of the above, by emailing legal@shushanik.co.

8. Data Security

I take reasonable and appropriate steps to protect your personal information from unauthorized access, loss, misuse, or disclosure. The Website is served only over an encrypted connection (https). It holds no card data: all card payments are made on Ameriabank’s secure payment page, which the bank operates to the security standards of the card schemes and protects with 3-D Secure.

That said, no system or method of transmitting data over the internet can be guaranteed to be completely secure. I cannot give an absolute guarantee against unauthorised access or data loss, and I encourage you to take care when sharing information online.

9. International Users & Legal Compliance

The Website is operated from the Republic of Armenia and is accessible to visitors from around the world. I process personal data in line with the Law of the Republic of Armenia on Protection of Personal Data, and I am committed to complying with the privacy laws that apply to users based on their location, including:

GDPR (EU/EEA): I process your data only when I have a valid legal basis for doing so (see Section 3). You have the full range of rights described in Section 6, and you may withdraw your consent at any time.
CCPA (California, USA): I do not sell your personal information. California residents have the right to know what data I collect, request its deletion, and opt out of any data sharing for cross-contextual advertising purposes.
PIPEDA (Canada): I collect, use, and disclose your personal information only with your consent and only for the purposes identified in this policy.

If you are located outside the country where my Website is hosted, please be aware that your information may be transferred to and processed in a different jurisdiction. By choosing to use my Website and submit your information, you acknowledge and consent to this transfer.

10. Children’s Privacy

My Website, products, and services are not intended for anyone under the age of 18. I do not knowingly collect personal information from minors. If I become aware that someone under the age of 18 has submitted personal information through my Website, I will delete that information promptly and will not use it for any purpose.

If you believe that a minor has submitted personal information through my Website, please contact me immediately at legal@shushanik.co and I will take the necessary steps to remove it. I encourage parents and guardians to speak with their children about staying safe online and the risks of sharing personal information on the internet.

11. Third-Party Links

My Website may include links to external websites that I do not own or operate. I am not responsible for the privacy practices or content of those websites. I encourage you to review the privacy policy of any third-party site before sharing your personal information with them.

12. Do Not Track Signals

Some browsers include a “Do Not Track” setting that sends a signal to websites requesting that your browsing not be tracked. My Website does not currently respond to these signals. You can manage your tracking preferences through my cookie consent tool (where applicable) or through your browser settings.

13. Changes to This Policy

I may update this Privacy Policy from time to time. When I do, the “Last Updated” date at the top of this page will be revised. I do not anticipate making significant changes to my data practices, but I encourage you to review this page periodically to stay informed. Your continued use of my Website after any update constitutes your acceptance of the revised policy.

14. Contact

If you have any questions or concerns about this Privacy Policy, or if you would like to make a data request, you can reach me at:

Email: legal@shushanik.co

Subject line for all data requests: “Data Request”

Shushanik Gyozalyan, Individual Entrepreneur. TIN 67290936.

41 Tigran Mets Ave, Vanadzor 2001, Republic of Armenia

Phone: +374 95 01 95 03 or +1 646 206 4580