PRIVACY POLICY REGARDING THE PROCESSING OF PERSONAL DATA (hereinafter referred to as the “Policy”)
1.1. This Privacy Policy (hereinafter, the "Policy") is an official document of Sole Proprietor Ivanov Alexey Victorovich, OGRNIP 325344300019050 (hereinafter, the "Operator"), and sets forth the procedure for processing personal data and measures for ensuring the security of personal data of individuals (hereinafter, the "Data Subject(s)") using the Operator's services, information, programs, and products on the website located at https://fuelborn.store (the "Website") and on the Operator's official social media pages. 1.2. This Policy applies to all personal data collected from individuals during their registration on the Website. 1.3. This Policy is implemented by the Operator in accordance with Federal Law No. 152-FZ of July 27, 2006, "On Personal Data", Federal Law No. 38-FZ of March 13, 2006, "On Advertising", and other applicable regulations governing personal data protection within the Russian Federation. The Policy is intended to prevent violations of personal data laws and mitigate the consequences of such violations. 1.4. The Operator's main objective in processing personal data is to respect and protect the rights and freedoms of individuals, including the right to privacy, personal and family secrets, and protection from unauthorized access or disclosure. 1.5. The processing of personal data is carried out lawfully and fairly, based on the following principles:
legality of the purposes and methods of processing;
good faith;
relevance and conformity of the purposes of processing with previously defined and stated purposes;
proportionality and adequacy of the data collected relative to the stated purposes of processing.
1.6. The Operator may process the following personal data:
last name, first name;
date of birth;
phone number;
email address;
data related to services provided, including history of communications;
delivery address for goods.
1.7. When using the Website, the Operator may also collect anonymized data automatically transmitted by the software used on the user's device:
information about the browser or other access tools;
IP address;
cookie data.
1.8. The Operator guarantees that third parties do not have access to personal data, except in cases explicitly provided by Russian law or this Policy. If any data not listed above is received, it will be immediately destroyed. 1.9. The Operator processes personal data through automated, mechanical, or manual means for the following purposes:
1.9.1. Processing orders and other user interactions with the Website, including inquiries;
1.9.2. With the user’s explicit consent, for marketing and promotional communications;
1.9.3. For other lawful purposes with the user's consent;
1.9.4. To improve the Website, analyze usage, ensure security, prevent fraud, and support product development and customer service.
1.10. The processing includes the following operations:
1.11. Payment data (name, address, phone number, email, card number) is not stored on the Operator’s server and is transmitted solely to the partner bank. Only payment confirmation is received. Partner banks comply with PCI DSS standards and have the necessary certifications. COLLECTION, USE, AND DISCLOSURE OF PERSONAL DATA2.1. The Operator begins processing personal data upon receiving the user’s consent. Consent can be expressed in any form that verifies its granting, including written, oral, or implied actions. 2.2. The Operator receives data:
through electronic form submissions on the Website;
by phone when placing orders;
by other lawful means in accordance with Russian and international law.
2.3. Consent is deemed granted when the Data Subject:
registers on the Website;
checks a consent box on the Website;
provides data orally over the phone;
provides data in writing during service interaction.
2.4. Consent remains valid until revoked by the Data Subject by submitting a written request to the Operator. 2.5. The Data Subject may withdraw consent at any time without violating applicable law. Upon withdrawal, the Operator shall stop processing the data within 30 days, unless otherwise provided by law or contract. 2.6. If inaccuracies are found, the Data Subject may update their information by contacting the Operator via social media. DATA PROTECTION MEASURES3.1. The Operator treats confidentiality as integral to its data processing activities. 3.2. Third parties granted access to data must not disclose it unless required by law. 3.3. All Operator personnel are required to maintain confidentiality of personal data. 3.4. The Operator takes necessary legal, organizational, and technical measures to protect data from unauthorized access, alteration, destruction, or disclosure. 3.5. These measures include:
identifying data security threats;
implementing security protocols;
using certified protection tools;
auditing security systems;
maintaining data carrier logs;
monitoring unauthorized access;
establishing access rules and logging actions.
3.6. For security reasons, the Operator does not disclose specific protection measures or tools. 3.7. Disclosure to third parties is not considered a breach if it is required by law or performed under contract to fulfill obligations to the Data Subject. CONSENT TO RECEIVE MARKETING COMMUNICATIONS4.1. By placing an order on the Website, the Data Subject agrees to receive marketing communications. 4.2. The Data Subject confirms that the provided data is accurate and submitted voluntarily. 4.3. The Operator may use retargeting for:
reminding users about brand interest;
encouraging completion of purchases;
excluding existing customers from new campaigns;
analyzing Website audience behavior.
CROSS-BORDER DATA TRANSFER5.1. Before transferring data abroad, the Operator ensures that the destination country provides adequate protection. 5.2. Transfers to countries lacking such protection are permitted only with the Data Subject’s written consent or for contract performance. FINAL PROVISIONS6.1. The Data Subject may contact the Operator through its social media page for any clarifications. Any changes to this Policy will be published on the Website. This Policy remains in effect until replaced with a new version. The current version is always publicly available on the Website.
