Privacy Policy

Key privacy points at a glance.

• Client information is kept strictly confidential.
• All searches are handled confidentially.
• The person being researched is never contacted, surveilled, or notified.
• Client identity is never disclosed to the subject of the research.
• Information is used only to provide the requested service and related support.
• We do not sell, rent, or share client data with third parties for marketing.

Two categories of data.

Client data (from forms or correspondence): name, email address, mailing address where given, phone number where given, and case details such as names, photos, and contextual notes you provide for the research.

Technical data (only if you accept cookies): standard web analytics from Google Analytics (anonymised IP address, page views, session duration, referring URL) and session-replay data from Microsoft Clarity (clicks, scrolls, page interactions). Form-field content is not captured by Clarity.

Visitors can browse the site without submitting personal information, and analytics cookies are not loaded unless you accept the cookie banner.

Legitimate interest & data use.

For users in the EEA and UK, we process personal data under the lawful basis of Legitimate Interest (GDPR Article 6(1)(f)). Our legitimate interest includes:

• Preventing financial and emotional fraud through scam-risk verification.
• Assisting individuals in reconnecting with former contacts using lawful public records.
• Providing authorized due diligence for personal and professional security.
• Operating and improving the website (technical data, with consent).

For research that concerns subjects in the EEA or UK, our processing balances the client's legitimate interest against the data subject's rights and freedoms. Highly sensitive categories are handled with additional care.

Access, erasure, correction, and control.

Under GDPR, you have specific rights regarding your data:

• Right to access: request a copy of the data we hold about you.
• Right to rectification: correct any inaccurate or incomplete data.
• Right to erasure: request that we delete your personal or case-related information.
• Right to object: object to our processing based on legitimate interests.
• Right to restrict processing: ask us to pause processing while a dispute is resolved.
• Right to data portability: receive your data in a structured, machine-readable format.
• Right to lodge a complaint: with your national data protection authority.

To exercise these rights, contact Michael Muinov at allrussian@allrussian.com or use the GDPR Request Form. We respond within 30 days.

Who else handles your data.

We use two third-party services that may process personal data:

• Google Analytics (Google LLC, USA) — anonymous traffic statistics. IPs are anonymised; cookies expire after 24 months. Loaded only after consent. Google privacy policy.
• Microsoft Clarity (Microsoft Corporation, USA) — session-replay analytics for understanding how visitors interact with the site. Form-field content is not captured. Loaded only after consent. Microsoft privacy statement.

Each processor is bound by its own GDPR-compliant terms. We do not transfer client data outside these processors and do not sell or rent it to any party.

How long we keep your data.

Different categories of data are retained for different periods, based on what the data is needed for:

• Active case files: duration of the case plus 12 months for client reference and follow-up.
• Order and tax records: 7 years, to meet US accounting and tax requirements.
• Email correspondence: kept until either party deletes it, or until you request erasure under your GDPR rights.
• Google Analytics cookies: 24 months by default; not loaded at all if you decline the cookie banner.
• Microsoft Clarity session data: 13 months by default; not loaded at all if you decline.

Erasure requests are processed even where retention periods are still active, except where law specifically requires retention (e.g. tax records of completed orders).