Documents · edition 5 of 13 September 2026
Consent to personal-data processing for responding to an enquiry
This is an unofficial translation published for information only. Only the Russian version is legally binding: the Russian original.
Edition date: 13 September 2026, edition 5. Given in accordance with Article 9 of Russian Federal Law No. 152-FZ of 27.07.2006 “On Personal Data” (hereinafter, 152-FZ).
By confirming the submission of an enquiry on the diff.legal website — by checking the consent field in the form or by expressly confirming submission through my AI assistant — I, the personal-data subject (hereinafter, the “Subject”), acting freely, of my own will, and in my own interest, give the operator specified in section 1 (hereinafter, the “Operator”) my consent to the processing of my personal data on the terms set out below.
1. Operator
Personal-data operator, registration number 77-26-560740 in the Roskomnadzor operator register, Moscow. Contact for personal-data processing and consent-withdrawal matters: support@diff.legal.
2. List of personal data
- one contact of the Subject’s choice: an email address, a phone number, or a Telegram username;
- the selected communication channel and the subject of the enquiry;
- a description of the task, if the Subject completed one, including information that the Subject voluntarily provided in the text;
- if the optional brief is completed — the project stage, the desired result, and deadlines.
Special categories and biometric personal data are not requested and are not processed. Third parties’ personal data, special categories of data, and confidential documents should not be entered in the form; the parties agree the channel for transferring documents separately.
3. Processing purposes
The consent is given for the purpose entered in the operator register: preparation, conclusion, and performance of a contract, including consideration of the enquiry, communication via the contact provided, clarification of the task, and discussion of the possibility and terms of providing legal services.
The consent does not cover the sending of advertising messages, web analytics, or the publication of the Subject’s data. Traffic statistics (cookies and Yandex Metrica) are made through a separate choice in the cookie window and are described in the Personal-data processing policy. Promotion of services is possible only with the Subject’s separate consent; it is given by a separate optional check and is set out in a separate document — the Consent to informational and advertising mailings.
An enquiry is of an informational nature: it is not an offer (under Russian law), an acceptance, or any other legally binding act, does not oblige the Subject to purchase services, and does not oblige the Operator to provide them; the parties’ rights and obligations arise only upon the conclusion of a contract.
4. List of actions and processing methods
The consent is given for the following actions: collection, recording, systematisation, accumulation, storage, clarification (updating, amendment), retrieval, use, provision of access to the Operator’s authorised persons for responding to the enquiry, transfer (provision of access) to the persons specified in section 6, blocking, deletion, destruction. Processing is carried out by mixed means: both with and without the use of automation tools. The data are stored in the application database on a server in Russia; technical storage is ensured by the hosting provider. The website’s public reference service for AI agents (the catalogue of services and approach) does not receive enquiry data. If the enquiry is submitted through the Subject’s AI assistant, the draft and the details pass through the service in which the assistant operates and reach the Operator together with a mark that it was sent via the assistant. No cross-border transfer of personal data takes place, except for correspondence on Telegram. If Telegram is selected as the communication channel, the correspondence goes through the Telegram service, whose servers may be located outside the Russian Federation.
5. Legal basis
The Subject’s consent to the processing of his or her personal data (para. 1 of part 1 of Article 6, Article 9 of 152-FZ). For the purpose of preparing, concluding, and performing a contract, the processing is also necessary for the conclusion and performance of a contract to which the Subject is a party or intends to become a party (para. 5 of part 1 of Article 6 of 152-FZ).
6. Transfer to third parties
The Operator does not transfer the Subject’s personal data to third parties, except:
- the hosting provider — for technical storage;
- the Operator’s email service provider — for the storage and transmission of electronic correspondence via the Operator’s mailboxes hello@diff.legal and support@diff.legal, including service notifications about new enquiries;
- the Subject’s AI assistant service — if the enquiry is submitted through an AI assistant: the enquiry details pass through this service before reaching the Operator;
- the Telegram service — if Telegram is selected as the communication channel: the correspondence goes through this service; the terms of the cross-border transfer are specified in section 4;
- cases directly provided for by the legislation of the Russian Federation.
Personal data is not disseminated or disclosed to an unlimited circle of persons.
7. Term of the consent and withdrawal procedure
The consent is valid until the processing purposes are achieved, but for no longer than 3 years from the date of the Subject’s last interaction with the Operator, and terminates early upon withdrawal. The Subject may withdraw the consent at any time by sending an email to support@diff.legal with the subject line “Withdrawal of diff.legal consent” and the contact specified in the enquiry. To confirm that the request relates to the Subject, the Operator may request minimal information. After withdrawal, the Operator stops the processing and destroys the personal data within 30 days, except in cases where the law requires its retention.
8. Subject’s confirmations
- the data provided is accurate and relates to me;
- I have read the Personal-data processing policy and understand the purposes, scope, and conditions of processing;
- I have been informed of the rights provided for by 152-FZ, including the right to withdraw the consent;
- I confirm the consent by a separate check in the form or by an express confirmation of submission through an AI assistant; the fact of confirmation, the edition of the text, and the time are saved together with the enquiry.