Last updated: 23 September 2026.
Operator and contact
SONIONS is an independent business.
Website and privacy contact: sonions.agency@gmail.com.
Project-brief information
Preparing, copying or downloading a brief happens in your browser and does not submit it. When online submissions are enabled, a separate Send project request action sends your contact details and brief to SONIONS for review, stores the request and queues a confirmation email to you and a notification to the agency. Cloudflare Turnstile verifies the submission using technical browser and network information. These protections are separate from optional analytics. If online submissions are unavailable, only the local brief and email-app handoff are offered. Form entries are not saved in browser storage. Reloading or leaving the page discards the form state, subject to your browser’s own form-restoration behaviour.
When you submit, we collect your name, email, optional company or project name, selected service, timing, budget, project details, language, consent record and request reference. We use them to assess the project, respond, prevent abuse and manage delivery. Requests are not published in the public portfolio. Consent covers this enquiry and the providers and international processing described here until its purpose is fulfilled or consent is withdrawn, subject to applicable retention obligations.
Hosting and media delivery
The primary enquiry database is hosted on the SONIONS VPS at PS.kz in Almaty, Kazakhstan. Portfolio videos are delivered through Cloudflare R2 at media.sonions.agency; the enquiry database is not placed in that public media bucket. Cloudflare provides DNS, content delivery and Turnstile spam protection. These services process IP addresses, browser information and technical requests, and processing can take place outside Kazakhstan.
Automatic request emails
Cloudflare Email Sending sends request confirmations and agency notifications and processes recipient addresses and message content. Agency notifications go to sonions.agency@gmail.com, where Google processes and stores the messages. Your email provider processes confirmations sent to you. These services can process information outside Kazakhstan. Confirmations concern your request and do not subscribe you to marketing. A queued confirmation is not a guarantee of delivery.
Enquiry retention
An automated task deletes enquiries from the primary database after 90 days without a recorded workflow update. Requests marked as won projects are excluded; their records are handled under the project agreement and applicable obligations. Requests with active or retryable email deliveries are retained until delivery is resolved or retries are exhausted. Deletion also removes the linked delivery records. This database policy does not automatically delete email or backup copies.
Backups and mailbox copies
Database backups are made daily with seven rotating copies accessible only to the server administrator. PS.kz is configured to retain up to two weekly server backup copies. Deleted records can remain in these rotating backups until replaced. Email notifications and correspondence in the agency Gmail mailbox remain until manually deleted; the 90-day database rule does not apply to that mailbox. You may request deletion using the privacy contact below, subject to records that must be retained for an active project or a legal obligation.
Email correspondence
If you choose to email SONIONS, we receive the message, attachments and associated email information you send. We use that correspondence to understand and respond to your enquiry. The supplied contact address uses Gmail; Google and your own email provider may process information outside Kazakhstan. Opening an email app does not establish delivery or satisfy Kazakhstan data-storage requirements.
Privacy requests
You can use the contact address above to ask about your information, request a correction or deletion, withdraw consent where applicable, or raise a privacy concern. Requests remain subject to applicable requirements and information we must retain by law.
Cookie choices
The selected website language is saved in local storage under sonions-language. It stays on this device until changed or cleared.
The website saves your preference in local storage under the name sonions-consent-v1. The record contains your optional-analytics choice, a preference version and the date of that choice. It stays on this device until replaced or cleared. You can change your choice using Cookie settings in the footer, or remove it through your browser’s site-data settings.
Optional analytics
Cloudflare Web Analytics and Google Analytics 4 are optional. On sonions.agency they load only after you accept optional analytics under this notice. Earlier approvals require a new choice. Cloudflare measures page visits and performance. Google measures page visits and standard session information using cookies and technical browser and device data, including IP addresses processed by Google. Processing may take place outside Kazakhstan.
We do not send names, email addresses, project-form answers or enquiry references to analytics. Our Google page-view event uses the public page address and title without URL queries, fragments or referrer information. Google Signals, advertising personalization and enhanced measurement of forms, searches, downloads, outbound links and videos are disabled.
Google Analytics uses first-party cookies named _ga and _ga_* to distinguish visits and sessions. We configure these cookies to expire after 90 days without extending that lifetime on each visit; your browser may shorten it. Cookie expiry is separate from Google’s analytics-data retention.
Do Not Track and Global Privacy Control keep both tools off. Analytics also stays off in local previews and on addresses with query strings or fragments. Use Cookie settings to withdraw permission at any time. Withdrawal blocks future analytics transmissions and removes this site’s Google Analytics cookies without clearing your brief; it cannot undo information already sent.
How Google uses information from sites and apps that use its services
External content
Fonts and poster images are served by the website, and portfolio videos use Cloudflare R2. The ALGORITHM player connects to YouTube only after you press Play ALGORITHM. Playback can send your IP address, browser information and viewing activity to YouTube. Close player stops playback but cannot undo information already sent. This playback choice is separate from optional analytics.