Privacy Policy for the website tumar-carpets.kz

This Privacy Policy for Personal Data (hereinafter referred to as the "Privacy Policy") applies to all information that "Tumar Carpets" Limited Liability Partnership (LLP) may obtain about the User via the "Internet" information and telecommunications network through the "Tumar Carpets" LLP online store website (hereinafter referred to as the "Online Store").

1. Definition of Terms

1.1. The following terms are used in this Privacy Policy: 1.1.1. Online Store Administration – employees authorized to manage the Online Store, acting on behalf of "Tumar Carpets" LLP, who organize and (or) perform the processing of personal data, as well as determine the purposes of personal data processing, the scope of personal data to be processed, and the actions (operations) performed with personal data. 1.1.2. Personal Data – any information relating directly or indirectly to an identified or identifiable natural person (subject of personal data). 1.1.3. Processing of Personal Data – any action (operation) or set of actions (operations) performed with personal data, whether or not by automated means, including collection, recording, systematization, accumulation, storage, clarification (updating, modification), extraction, use, transfer (distribution, provision, access), depersonalization, blocking, deletion, or destruction of personal data. 1.1.4. Confidentiality of Personal Data – a mandatory requirement for "Tumar Carpets" LLP or any other person who has gained access to personal data not to allow its distribution without the consent of the subject of the personal data or the existence of another legal basis. 1.1.5. User – any person having access to the Online Store and using it via the "Internet" information and telecommunications network. 1.1.6. Cookies — a small piece of data sent by a web server and stored on the user's computer, which the web client or web browser sends to the web server in an HTTP request every time an attempt is made to open a page of the corresponding site. 1.1.7. IP Address — a unique network address of a node in a computer network built using the IP protocol.

2. General Provisions

2.1. Use of the Online Store constitutes the User's agreement to this Privacy Policy and the terms of processing the User's personal data. 2.2. In case of disagreement with the terms of the Privacy Policy, the User must stop using the Online Store. 2.3. This Privacy Policy applies to the Online Store. "Tumar Carpets" LLP does not control and is not responsible for third-party websites or other Internet resources to which the User may navigate via links available in the Online Store. 2.4. The Online Store Administration does not verify the accuracy of the personal data provided by the User.

3. Subject of the Privacy Policy

3.1. This Privacy Policy establishes the obligations of "Tumar Carpets" LLP regarding non-disclosure and ensuring a regime for protecting the confidentiality of personal data that the User provides at the request of the Online Store Administration when registering a personal account or when placing an order without registration. 3.2. Personal data authorized for processing under this Privacy Policy is provided by the User voluntarily and includes the following information: 3.2.1. Surname and first name of the User; 3.2.2. Contact phone number of the User; 3.2.3. Email address (e-mail) of the User; 3.2.4. Residential/location address of the User (delivery address of the Goods). 3.3. The Online Store Administration protects data that is automatically transmitted during the viewing of advertising blocks and when visiting pages where a statistical system script ("pixel") is installed:

• IP address;

• Information from cookies;

• Information about the browser (or other program that accesses the advertisement display);

• Access time;

• The address of the page where the advertising block is located;

• Referrer (address of the previous page). 3.3.1. Disabling cookies may result in the inability to access parts of the Online Store that require authorization. 3.3.2. The Online Store Administration collects statistics on the IP addresses of its visitors. This information is used to identify and solve technical problems and to monitor the legality of financial payments. 3.4. Any other personal information not specified above (purchase history, browsers and operating systems used, etc.) is subject to secure storage and non-distribution, except as provided in clauses 5.2. and 5.3. of this Privacy Policy.

4. Purposes of Collecting User's Personal Information

4.1. The Online Store Administration may use the User's personal data for the following purposes: 4.1.1. Identification of a registered User for placing an order and (or) concluding a Sale and Purchase Agreement with "Tumar Carpets" LLP. 4.1.2. Providing the User with access to personalized resources of the Online Store. 4.1.3. Establishing feedback with the User, including sending notifications and requests regarding the use of the Online Store, the provision of services, and the processing of requests and applications from the User. 4.1.4. Determining the User's location to ensure security and prevent fraud. 4.1.5. Confirming the accuracy and completeness of the personal data provided by the User. 4.1.6. Creating an account for making purchases, if the User has consented to the creation of an account. 4.1.7. Notifying the User about the status of the Order. 4.1.8. Processing and receiving payments, confirming tax or tax benefits, contesting a payment, or determining the User's eligibility for a credit line. 4.1.9. Providing the User with effective customer and technical support in case of problems related to the use of the Online Store. 4.1.10. Providing the User, with their consent, with product updates, special offers, price information, newsletters, and other information on behalf of the Online Store or on behalf of the Online Store's partners. 4.1.11. Carrying out advertising activities with the User's consent. 4.1.12. Providing the User with access to the websites or services of the Online Store's partners for the purpose of receiving products, updates, and/or services.

5. Methods and Timing of Personal Information Processing

5.1. The processing of the User's personal data is carried out for the period specified in the Consent to the Processing of Personal Data, by any legal means, including in personal data information systems using automation tools or without using such tools. 5.2. The User agrees that the Online Store Administration has the right to transfer personal data to third parties, in particular, courier services, postal organizations, and telecommunications operators, solely for the purpose of fulfilling the User's order placed in the Online Store, including the delivery of the Goods. 5.3. The User's personal data may be transferred to authorized state authorities of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan. 5.4. In case of loss or disclosure of personal data, the Online Store Administration informs the User about such loss or disclosure. 5.5. The Online Store Administration takes the necessary organizational and technical measures to protect the User's personal information from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties, in particular:

• Appointment of persons responsible for organizing the processing of personal data;

• Implementation of internal control and (or) audit of personal data processing compliance with the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V "On Personal Data and Protection Thereof," and regulatory legal acts adopted in accordance with it, requirements for personal data protection, and local acts;

• Familiarizing employees directly involved in personal data processing with the provisions of the legislation of the Republic of Kazakhstan on personal data, including requirements for personal data protection, and local acts regarding personal data processing, and (or) training said employees;

• Determination of threats to the security of personal data during its processing in personal data information systems;

• Assessment of the effectiveness of measures taken to ensure the security of personal data prior to the commissioning of the personal data information system;

• Accounting for machine-readable media of personal data;

• Detection of unauthorized access to personal data and taking appropriate measures;

• Restoration of personal data modified or destroyed as a result of unauthorized access;

• Establishing rules for access to personal data processed in the personal data information system, as well as ensuring the registration and accounting of all actions performed with personal data in the personal data information system;

• Monitoring of measures taken to ensure the security of personal data and the level of protection of personal data information systems. 5.6. The Online Store Administration, together with the User, takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User's personal data.

6. Obligations of the Parties

6.1. The User is obliged to: 6.1.1. Provide information about personal data necessary for the use of the Online Store. 6.1.2. Update or supplement the provided information about personal data in the event of changes to said information. 6.2. The Online Store Administration is obliged to: 6.2.1. Use the received information exclusively for the purposes specified in Section 4 of this Privacy Policy. 6.2.2. Ensure the storage of confidential information in secret, not disclose it without the User's prior written permission, and not sell, exchange, publish, or disclose by other possible means the transferred personal data of the User, except for clauses 5.2. and 5.3. of this Privacy Policy. 6.2.3. Take precautions to protect the confidentiality of the User's personal data in accordance with the procedure usually used to protect this kind of information in existing business practices. 6.2.4. Block personal data relating to the relevant User from the moment of application or request by the User, their legal representative, or an authorized body for the protection of the rights of personal data subjects for the period of verification, in case of detection of unreliable personal data or illegal actions.

7. Liability of the Parties

7.1. "Tumar Carpets" LLP, having failed to fulfill its obligations, is liable for losses incurred by the User in connection with the unlawful use of personal data, in accordance with the legislation of the Republic of Kazakhstan, except for cases provided for in clauses 5.2., 5.3., and 7.2. of this Privacy Policy. 7.2. In case of loss or disclosure of Confidential Information, "Tumar Carpets" LLP is not liable if this confidential information: 7.2.1. Became public domain before its loss or disclosure. 7.2.2. Was received from a third party prior to its receipt by "Tumar Carpets" LLP. 7.2.3. Was disclosed with the consent of the User.

8. Dispute Resolution

8.1. Before applying to a court with a claim for disputes arising from the relationship between the Online Store User and "Tumar Carpets" LLP, it is mandatory to submit a claim (a written proposal for a voluntary settlement of the dispute). 8.2. The recipient of the claim, within five working days from the date of receipt of the claim, shall notify the claimant in writing of the results of its consideration. 8.3. If an agreement is not reached, the dispute will be referred to a court at the location of "Tumar Carpets" LLP in accordance with the current legislation of the Republic of Kazakhstan.

9. Additional Conditions

9.1. Changes to this Privacy Policy are made without the User's consent. 9.2. The new Privacy Policy enters into force from the moment it is posted in the Online Store, unless otherwise provided by the new version of the Privacy Policy. 9.3. All suggestions or questions regarding this Privacy Policy should be reported to the email address: tumar.carpets@gmail.com