Cookies and site data

1.1. The owner and operator of personal data is IP «TB CORP», IIN __________ Hereinafter referred to as the store. Inquiries can be made via: WhatsApp +7 707 122 9876

1.2. The policy explains what data is processed when using the website, placing an order, delivery, and inquiries. When the law requires consent, the store obtains it separately. Visiting the website does not imply consent to any processing.

2. What data is needed and why

2.1. To place and fulfill an order: Full name, phone number, email if provided, order composition, delivery address, necessary instructions for the courier, payment and product transfer information. The store uses this data for communication, calculations, delivery, exchanges, and returns.

2.2. For a personal account, if used: contact for login, account identifier, secure login data, order history, and selected settings. The purpose is to provide account functions and protect access to them.

2.3. For inquiries and disputes: the content of correspondence, purchase information, documents and materials necessary to verify the inquiry, confirm execution, and protect the rights of the parties. Do not send unnecessary information about health, identity documents, and data of other people unless required for the inquiry.

2.4. For the operation and protection of the website: IP address, event time, technical information about the device and browser, session identifiers, action logs, and consent choices. The data is used to the extent necessary for the operation of the cart, security, and confirmation of transactions.

2.5. For advertising, only contacts and information for which separate consent has been obtained are used. Refusal of advertising does not affect the purchase. A service message about the order does not constitute consent to a promotional subscription.

2.6. The store does not require the buyer's IIN, a copy of the identity document, and full bank card details for a regular order. If additional information is required by law in a specific situation, the store explains the basis and requests only the necessary volume.

3. How data is processed and transmitted

3.1. The store collects, records, stores, clarifies, and uses data, and if necessary, transmits it to authorized recipients, blocks, anonymizes, deletes, or destroys it. The basis is confirmed consent or a specific legal basis for processing without consent.

3.2. To fulfill an order, the store may transmit necessary information to the delivery service, payment provider, hosting, CRM, and service of official messages. The transmission is limited to their tasks and is arranged considering confidentiality and protection requirements.

3.3. Actual recipients and services: [NAME OF EACH RECIPIENT, THEIR FUNCTION, LIST OF DATA, COUNTRY OF PROCESSING]. If the list is posted separately, its permanent link is: [LINK], edition [DATE]. With the user's consent, the active list is retained.

3.4. Banks and payment organizations independently process the data entered in their payment interface according to their terms and the law. The store receives the information necessary for identifying and confirming the payment, as specified in the list of services.

3.5. Information is provided to government authorities when there is a legal basis. In the event of a dispute, necessary materials may be transferred to representatives and authorities reviewing the dispute on a legally prescribed basis. Data is not sold or transferred for independent advertising by third-party companies.

3.6. Personal data such as names, photographs, reviews with identifying information, and other data are not published without separate consent or another legal basis. Transfer for delivery does not imply permission for open distribution.

4. Where and how long data is stored

4.1. Personal data is stored in a database and/or digital object within the territory of Kazakhstan.

4.2. When transferring abroad, the store complies with Article 16 of the Law of the Republic of Kazakhstan "On Personal Data and Their Protection." Foreign messengers, analytics, and cloud services are included in this list.

4.3. Order data is used until the completion of the purchase, delivery, settlements, and related inquiries. Documents that must be stored longer by law are kept for the prescribed period. In the event of a dispute, necessary materials are retained on a legal basis until its resolution and the execution of the decision.

4.4. Cabinet data is processed until its deletion or the cessation of the relevant purpose. Data of incomplete orders - [TERM]; security logs - [TERM]; confirmations of consents - [JUSTIFIED TERM]. These terms are not extended merely because storage is technically convenient for the store.

4.5. After the cessation of purposes and legal bases, data is deleted, destroyed, or anonymized. Deletion from backups is performed on a cycle of [TERM]; until deletion, data is not used for new purposes.

5. Cookies and analytics

5.1. The website may use cookies and similar technologies for the cart, login, and saving settings. List: [NAME, PROVIDER, PURPOSE, DATA, TERM OF EACH TECHNOLOGY]. Classifying cookies as necessary does not negate the legal requirements for processing personal data.

5.2. Optional analytics and advertising technologies are included after a separate choice by the user. Their providers, data, terms, and countries of transfer are disclosed before selection. Refusal is available alongside consent; the choice can be changed through "Cookie Settings."

6. User rights and data protection

6.1. The user has the right to know about their data and the purposes of its processing, to request clarification, blocking, anonymization, or deletion in cases provided by law, to withdraw consent, and to appeal violations of their rights.

6.2. Send a request via WhatsApp to +7 707 122 9876. Indicate your full name and the contact previously used in the store. If there is doubt about the identity of the applicant, the store requests proportionate confirmation to avoid disclosing data to a third party.

6.3. After the withdrawal of consent, the store will cease processing within 15 working days unless continuation is required by law, or will send a reasoned refusal. The limitations on withdrawal established by law apply, including in cases of unfulfilled obligations. Withdrawal does not cancel completed transactions and mandatory document retention periods.

6.4. Without the necessary data for delivery, the store may not be able to fulfill the chosen method of receipt. Refusal of non-mandatory analytics and advertising does not hinder the order placement.

6.5. The store restricts access, uses secure transmission, logging, and other necessary measures, and establishes the responsibilities of employees and contractors. The user is obliged to keep login data confidential and report any suspicion of unauthorized access. This does not exempt the store from its own obligations to protect data.

6.6. The new policy is published with a date. If new goals or methods of transmission require new consent, it will be requested separately. A simple replacement of the policy text does not extend the previously obtained permission.