Personal Data Privacy Policy

This Privacy Policy for personal data (hereinafter referred to as the Privacy Policy) is a public agreement concluded between the owner of the website, Individual Entrepreneur SunSay (hereinafter referred to as the Seller) and the User in accordance with Article 387 of the Civil Code of the Republic of Kazakhstan, is based on the Law of the Republic of Kazakhstan "On Personal Data and Their Protection" and applies to information containing the personal data of Users, which the website hedonistlist.me (hereinafter referred to as the Site) may receive when the User uses the Site's services.

Personal data seller:

       Individual Entrepreneur SunSay

       BIN 861126300701

       Legal address: Republic of Kazakhstan, 050018, Almaty, Zhetysu district, Tyulkubasskaya street, 32/1

       Actual address: Republic of Kazakhstan, 050018, Almaty, Zhetysu district, Tyulkubasskaya street, 32/1

       Email: info@hedonistlist.me

       Phone: +77775605594

1. Definition of terms

1.1. Personal data - data, including biometric data, related to a specific or determinable personal data subject, recorded on electronic, paper, and/or other tangible media.

1.2. Non-personal data - information that is automatically transmitted when the User views ads and visits pages on which the system's statistical script is installed: the address of the requested page, cookie information, IP address, browser information, referrer (the address of the previous page), and access time. Non-personal data does not allow for the identification of a specific user without additional information.

1.3. Collection of personal data - actions aimed at obtaining personal data.

1.4. Processing of personal data - actions aimed at accumulating, storing, modifying, supplementing, using, distributing, depersonalizing, blocking, and destroying personal data.

1.5. Personal data protection is a set of measures, including legal, organizational, and technical, implemented for the purposes established by the Law of the Republic of Kazakhstan "On Personal Data and Their Protection."

1.6. Website - the website located at https://hedonistlist.me.

1.7. User - an individual using the Website.

1.8. Seller - Individual Entrepreneur SunSay, the owner of the Website.

1.9. Cookies are small text files that the browser stores from websites visited by the User. They perform a variety of functions: they help users navigate between pages easily and remember settings and preferences, thereby improving website performance. Cookies also allow advertising to be displayed that is more relevant to the User's interests. Without cookies, it is impossible to complete a purchase on the website: the shopping cart function is based on storing such data. For example, if the User adds an item to the cart and then navigates to another page, the selected item will not be saved without cookies.

1.10. An IP address is a unique network identifier for a device in an IP network that can be used to determine the User's location. The site only records the city and region, without more precise tracking.

 

2. Subject of the privacy policy

2.1. This Policy defines the Seller's responsibilities for maintaining confidentiality and protecting the personal data the User provides while using the Website, including when ordering services. Data processing is carried out only on lawful grounds.

2.2. Personal data processed within the framework of this Policy is submitted by the User through forms on the Website and includes:

 2.2.1. Last name and first name;

 2.2.2. Contact phone number;

 2.2.3. Email address;

2.3. Other information (e.g., order history, devices and browsers used) is also subject to storage and is not subject to distribution, except as provided in Section 4 of this Policy.

 

3. Purposes of collecting and processing personal data of Users

3.1. The Seller collects and processes only the personal data necessary to provide services. 3.2. Personal data is used for:

 3.2.1. processing and recording payments;

 3.2.2. communicating with the User, including sending SMS and WhatsApp notifications;

 3.2.3. providing customer support;

 3.2.4. compliance with the legislation of the Republic of Kazakhstan;

 3.2.5. conducting statistical research on anonymized data.

3.3. The Seller is not responsible for information publicly posted by the User.

3.4. The Seller is not liable for losses incurred as a result of the User losing access to their account.

 

4. Rights and obligations of the parties

4.1. User's Responsibilities

 4.1.1. Provide the personal data necessary to use the Website.

 4.1.2. Not use the personal data of third parties without their legal consent.

 4.1.3. Promptly notify the Seller of any changes to personal data by making changes in your personal account or sending a notification to info@hedonistlist.me.

 4.1.4. Maintain the confidentiality of your account information (login, password, confirmation codes) and do not transfer them to third parties.

 4.1.5. Be solely responsible for the possible consequences of providing inaccurate, outdated, or incorrect personal data.

4.2. User Rights

 4.2.1. Access and edit your personal data at any time through the accessible web interface of the services.

4.3. Seller's Responsibilities

 4.3.1. Use personal data solely for the purposes specified in Section 3 of this Policy.

 4.3.2. Ensure the confidentiality of personal data and not disclose it without the User's prior written consent, except in cases of data transfer for order fulfillment (courier services, postal organizations, banks, etc.), as well as providing it to authorized government agencies of the Republic of Kazakhstan in accordance with the procedure established by the legislation of the Republic of Kazakhstan.

 4.3.3. Take the necessary measures to protect the User's personal data, guided by generally accepted security practices for this type of information.

4.4. Seller's Rights

 4.4.1. The Seller reserves the right to grant third parties access to the collection and analysis of the User's non-personal data for statistics and optimization of advertising messages. The use of such non-personal data is governed by the privacy policies of these third parties; the Site is not responsible for their practices.

 

5. Other conditions

5.1. By using the Online Store, the User fully and unconditionally agrees to this Privacy Policy and the terms of processing their personal data by the Seller.

5.2. If the User does not agree with the terms of the Privacy Policy, they must stop using the Website.

5.3. This Policy applies exclusively to the hedonistlist.me website and its subdomains. The Seller is not responsible for third-party websites that the User may access via links posted on the Website.

5.4. Due to the nature of obtaining information, the Seller does not verify the accuracy of the personal data provided by the User and does not control its relevance. The Seller assumes that the data is provided correctly and kept up to date by the User. The User bears responsibility and possible consequences for providing inaccurate or outdated data.

5.5. Disabling cookies may result in the inability to access certain sections of the website that require authorization.

5.6. The Website collects statistics on the IP addresses of Users. This information is used to identify and resolve technical problems, as well as to monitor the legality of payments.

5.7. The current legislation of the Republic of Kazakhstan applies to this Policy and to the relationship between the User and the Seller.

5.8. The Seller reserves the right to unilaterally change this Privacy Policy in order to improve the security system in accordance with the legislation of the Republic of Kazakhstan.

5.9. All suggestions and questions regarding this Policy should be sent to: info@hedonistlist.me.

5.10. The Seller is not responsible for the actions of third parties who have gained access to information about the User via the Internet, or for the consequences of using information available to any Internet user.

6. Consent of the personal data subject

6.1. The processing of the User's personal data is carried out based on the consent of the personal data subject, except in cases stipulated by the legislation of the Republic of Kazakhstan.

6.2. Consent is provided by the User by checking a box when filling out forms on the Website or by performing other actions confirming their expression of will (checkbox, registration form, payment, newsletter subscription).

6.3. Consent is considered specific, informed, and conscious and is provided for the processing of personal data for the purposes specified in Section 3 of this Policy.

6.4. The User confirms that their rights as a personal data subject, as stipulated by the legislation of the Republic of Kazakhstan, have been explained to them.

6.5. The fact of consent is recorded by the Seller in electronic form and stored for the duration of the personal data processing.

 

7. Rights of the personal data subject

7.1. The User has the right to:

 7.1.1. know whether the Seller has their personal data and to receive information about its processing;

 7.1.2. request changes or additions to their personal data, if there are grounds for doing so;

 7.1.3. request blocking or destruction of their personal data if they are processed unlawfully or if they are no longer necessary for the stated purposes;

 7.1.4. revoke consent to the processing of personal data;

 7.1.5. receive information about third parties to whom their personal data is transferred;

 7.1.6. appeal the actions or inactions of the Seller to the authorized body for personal data protection or in court.

7.2. The rights are exercised by sending a written request to the Seller’s email address specified in this Policy.

7.3. receive a copy of their personal data; the period for reviewing the User's requests is 30 (thirty) calendar days.

 

8. Personal data storage periods

8.1. The User's personal data is stored for no longer than required for the purposes of its processing, unless otherwise provided by the legislation of the Republic of Kazakhstan.

8.2. Personal data related to financial transactions and accounting is stored for the periods established by the tax and accounting legislation of the Republic of Kazakhstan.

8.3. Upon achievement of the processing purposes or upon withdrawal of consent, personal data is subject to mandatory destruction or anonymization, unless otherwise provided by the legislation of the Republic of Kazakhstan.

9. Storage location of personal data bases

9.1. Users' personal data databases are stored on servers that ensure their protection in accordance with the requirements of the legislation of the Republic of Kazakhstan.

9.2. The Seller takes measures to ensure the storage of personal data within the territory of the Republic of Kazakhstan, unless otherwise permitted by law.

10. Cross-border transfer of personal data

10.1. Cross-border transfer of personal data shall be carried out only if the receiving party ensures the protection of the personal data at least equal to the level established by the legislation of the Republic of Kazakhstan.

10.2. In the event of transfer of personal data to third parties outside the Republic of Kazakhstan, the Seller shall ensure that the User's separate consent is obtained, unless otherwise provided by law.

10.3. Personal data shall be transferred to third parties solely for the purposes set forth in this Policy.

11. Procedure for revoking consent

11.1. The User has the right to revoke their consent to the processing of personal data at any time by sending a written notice to the Seller's email address (personal account, website form, or email).

11.2. The Seller will cease processing personal data within 30 (thirty) calendar days of receiving the notice, except in cases where processing is necessary in accordance with the legislation of the Republic of Kazakhstan.

11.3. Revocation of consent does not apply to the processing of personal data carried out prior to the Seller's receipt of the revocation.