Privacy policy
Version of 11 September 2026
1. General
1.1. This Policy explains how personal data of visitors to https://st-petersburg-tours.ru/ (the Site) is processed and protected. It is the publicly available document required by Article 18.1(2) of Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data”.
1.2. Processing follows Law No. 152-FZ as currently in force, including the amendments introduced by Federal Laws No. 233-FZ of 8 August 2024 and No. 122-FZ of 23 May 2025, together with Federal Law No. 149-FZ “On Information” and Federal Law No. 132-FZ “On the Fundamentals of Tourism”.
1.3. The Operator is entered in the register of personal data operators maintained by Roskomnadzor, on the basis of the notification filed under Article 22 of Law No. 152-FZ.
1.4. Browsing the Site is not by itself consent. Where consent is the legal ground, it is given separately and deliberately, for example by ticking the box in an enquiry or booking form.
2. Operator
LLC “TJ Travel” OGRN 1079847103973, registered 27 November 2007 INN 7842372612, KPP 780101001 Tour operator registry number: RTO 011381 Registered address: Kruzenshterna ave. 18, bldg. 1, unit 47n, St Petersburg 199225, Russia Email: info@st-petersburg-tours.ru Phone: +7 (911) 953-84-02
An officer responsible for organising personal data processing has been appointed. Write to the addresses above, marking your message “Personal data”.
3. What we process
3.1. We process data of Site visitors, customers and tourists:
-
full name;
-
phone number and email address;
-
identity document details, only where a service requires the tourist to be identified;
-
group composition, dates and content of the tour booked;
-
payment status, amount, currency, transaction reference and refund details, but not full card credentials;
-
anything else you choose to tell us in a form.
3.2. We do not process special categories of personal data or biometric data.
3.3. Separately from personal data, we process information about visits, including cookies, IP address, device and browser type, and referral source.
4. Purposes and legal grounds
| Purpose | Legal ground |
|---|---|
| Handling enquiries, booking and delivering tours | Art. 6(1)(5) of Law No. 152-FZ - performance of a contract |
| Processing payments and refunds | Art. 6(1)(5) - performance of a contract; Art. 6(1)(2) - legal obligations |
| Replying to your messages | Art. 6(1)(1) - your consent |
| News about tours, offers and discounts | Art. 6(1)(1) and Art. 18(1) of Federal Law No. 38-FZ “On Advertising” - a separate marketing consent |
| Visit statistics and advertising performance | Art. 6(1)(1) - your cookie consent |
| Meeting obligations imposed on us by law | Art. 6(1)(2) |
Marketing consent is a separate tick box. It is not a condition of booking and can be withdrawn at any time without affecting your tour.
5. Cookies and analytics
5.1. The Site is configured with Google Tag Manager and Yandex Metrica. Google Tag Manager manages configured tags; Yandex Metrica provides visit analytics under the Yandex privacy policy.
5.2. Optional analytics tags and cookies are enabled only after you consent in the cookie banner. Strictly necessary cookies are used to operate the Site.
5.3. To withdraw cookie consent, clear cookies in your browser settings and choose again in the banner.
6. How we handle and share data
6.1. Processing is carried out both with and without automation.
6.2. When collecting personal data of Russian citizens through the Site, we ensure that its recording, systematisation, accumulation, storage, clarification and retrieval use databases located in the Russian Federation, as required by Article 18(5) of Law No. 152-FZ.
6.3. Access is limited to our employees who need it for their work and who are bound by confidentiality.
6.4. We entrust data to guides, venues and transport providers only to the extent needed to run your specific tour, under arrangements meeting the requirements of Article 6(3) of Law No. 152-FZ.
6.5. If you choose and we confirm payment through a Stripe Payment Link, you provide payment and related personal data directly to Stripe and its banking partners. Stripe acts as an independent payment provider and processor under its own terms and privacy policy. We receive transaction information needed to confirm the payment, keep accounting records and process any refund, but we do not receive or store your full card number, expiry date or security code.
6.6. We disclose data to other persons only where needed to perform the contract, process a payment or refund chosen by you, or where Russian law expressly requires it.
7. External services and cross-border transfers
7.1. Stripe and WhatsApp are external services whose processing infrastructure may be outside the Russian Federation. Their use may involve a cross-border transfer governed by their own privacy terms and applicable law.
7.2. Stripe receives your data only if you choose a Stripe Payment Link confirmed for your booking. Before using that method, review the privacy information presented on Stripe’s secure payment page.
7.3. A WhatsApp link opens a service operated independently from the Site. If you choose to contact us through WhatsApp, you provide your account details, message and any attachments directly to WhatsApp, and that service may process or transfer them outside Russia under its own privacy policy.
7.4. You may avoid these external transfers by contacting us by email or phone and choosing another confirmed payment method. We handle any cross-border transfer for which we are responsible in accordance with Article 12 of Law No. 152-FZ.
8. Retention
8.1. Enquiry form data is kept until the purpose is met, and no longer than one year after your last contact.
8.2. Customer and tourist data is kept for the term of the contract and three years afterwards, matching the general limitation period. Accounting and payment records are kept for the period required by law, generally five years.
8.3. If you withdraw consent, processing based solely on that consent stops and the data is destroyed within thirty days, unless we still have another lawful ground to hold it.
9. Your rights
You may:
- obtain the information about processing of your data listed in Article 14(7) of Law No. 152-FZ;
- require that incomplete, outdated or unlawfully obtained data be corrected, blocked or destroyed;
- withdraw your consent, including your marketing consent;
- complain to Roskomnadzor or go to court.
Send your request to info@st-petersburg-tours.ru or by post to the registered address. We reply within ten working days, extendable by up to five more working days with notice to you.
10. Security
10.1. We apply the legal, organisational and technical measures required by Article 19 of Law No. 152-FZ, including access controls, information security tools, records of storage media and data recovery procedures.
10.2. Traffic between your browser and the Site is protected by TLS encryption. Stripe protects payment details on its own secure page.
10.3. If personal data is disclosed unlawfully, we notify Roskomnadzor within twenty-four hours and report the outcome of our internal investigation within seventy-two hours, as required by Article 21(3.1) of Law No. 152-FZ.
11. Final provisions
11.1. This Policy is permanently available at https://st-petersburg-tours.ru/privacy-policy/.
11.2. We may amend it. A new version takes effect once published on the Site; the version date is shown at the top.