This Privacy Policy explains how Vista Top Flight Strategy ("vistahumanfactor.ai", "we", "us") collects, uses and protects your personal information when you visit our website, submit a contact form or otherwise interact with us online. If you have any questions about this Policy, please email risklab@vistahumanfactor.ai

1. Information we collect
We collect only the minimum personal data needed to provide and improve our services: 
• Contact details – such as your name, company or organisation name, position and email address, when you fill out a contact form or communicate with us;
• Inquiry details – any information you choose to include in your message to us; 
• Technical data – such as your IP address and request details, recorded automatically by our hosting provider.

2. How we use your dataWe use personal data for the following purposes: 
• To respond to and manage inquiries submitted through our contact form or sent to the addresses shown on the website. 
• To discuss the scope and terms of services you are considering. 
• To comply with obligations imposed on us by law.
We do not use your personal data for automated decision-making or profiling.

3. Legal bases for processingWe rely on: 
• Consent, given when you submit a form or write to us. 
• The necessity of taking steps at your request before entering into a contract, and of performing it. 
• Compliance with legal obligations applicable to us.
You may withdraw your consent at any time without affecting the lawfulness of processing prior to withdrawal.

4. Cookies and tracking technologies
We use essential cookies only – those needed for the website to function, including session handling and your choice of language. We do not use analytics, advertising or social media tracking cookies, and the website therefore displays no consent banner. You can block or delete cookies through your browser settings. If we introduce non-essential cookies in future, we will update this Policy and ask for your consent beforehand.

5. International transfers
We are based in the Russian Federation. Your data may be processed in or transferred to countries that do not provide the same level of data protection as your home jurisdiction. We process only what is necessary to correspond with you.

6. Data retention
We retain personal information only for as long as necessary to fulfil the purposes described above or as required by law. For contact inquiries, we generally keep data for up to 12 months after the last communication.

7. Your rights
Depending on your location, you may have the right to: 
• Access the personal data we hold about you. 
• Request correction of inaccurate or incomplete data. 
• Request deletion of your data. 
• Object to or restrict processing of your data. 
• Withdraw consent for processing where consent was provided. 
• Lodge a complaint with a supervisory authority.
To exercise any of these rights, please contact risklab@vistahumanfactor.ai

8. No sale or sharing of personal data
We do not sell your personal information or share it with third parties for commercial purposes or targeted advertising. Data is disclosed only to our hosting provider, acting on our instructions under a written agreement, and where the law requires it.

9. Children's privacy
The website is intended for business audiences and is not directed at anyone under 18 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us so we can remove it.

10.Third-party links
Our website may link to third-party sites. We are not responsible for the privacy practices of those sites.

11.Security
We implement appropriate technical and organisational measures—such as encrypted connections, access controls and regular backups—to protect personal data against unauthorised access, loss or disclosure.

12. Contact us
JSC Vista AI-Human Factor
If you have any questions or concerns about this Privacy Policy, contact risklab@vistahumanfactor.ai