Privacy Policy

This Privacy Policy governs the processing of personal data of users of baybanugaidar.com.

The data controller is LLP «BANU GAIDAR» (BIN: 251140034685), operating in accordance with the laws of the Republic of Kazakhstan.

Legal basis: Law of the Republic of Kazakhstan «On Personal Data and Their Protection» (No. 94-V, 21 May 2013).

By using baybanugaidar.com and placing orders, you accept the terms of this policy.

Depending on how you interact with our website, we may collect:

• Identity data: first name, last name.
• Contact data: phone number, email address.
• Delivery address: country, city, street, postal code.
• Order data: items ordered, amounts, purchase history, order statuses.
• Technical data: IP address, browser/device type, pages visited (anonymous analytics).

Payment card details (card number, CVV, expiry) are never stored by us — they are processed exclusively by Freedom Pay (PCI DSS certified).

• Processing, confirming and fulfilling your orders.
• Communicating with you about your order, delivery and returns.
• Improving our website and service quality.
• Sending marketing communications — only with your explicit consent, which you may withdraw at any time.
• Complying with tax and financial regulations.

We share only the minimum necessary data with the following partners, solely to fulfil your order:

• Freedom Pay — online payment processing.
• CDEK, Kazpost, courier services — order delivery (name, address, phone).
• Supabase Inc. (Ireland, EU) — encrypted cloud database storage.

We do not sell or share your personal data with third parties for marketing or advertising purposes.

• Order and transaction data — minimum 5 years as required by Kazakhstani tax law.
• Customer data with no active orders — deleted on request or after 3 years of inactivity.
• Technical logs (analytics, sessions) — maximum 90 days.

Under the Law of Kazakhstan «On Personal Data and Their Protection», you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate or outdated data.
• Request deletion of your data («right to erasure»), subject to legal retention requirements.
• Withdraw consent to marketing communications at any time.

To exercise any of these rights, contact us via WhatsApp: +7 778 914 9692. We will respond within 10 business days.

We use two types of cookies:

• Essential cookies — required for the shopping cart, checkout session and language settings.
• Analytics cookies — help us understand how users interact with the site (anonymous, not linked to personal identity).

You may disable cookies in your browser settings. Disabling essential cookies may prevent the shopping cart and checkout from functioning correctly.

• All data transfers use HTTPS (TLS 1.2+) encryption.
• Database access is restricted to authorised personnel only.
• Data is stored on Supabase servers in the EU with encryption at rest.
• Payment transactions are protected by PCI DSS via Freedom Pay.

We may update this Privacy Policy from time to time. For significant changes, we will notify you via the website or WhatsApp at least 7 days before the changes take effect.

Continued use of the site after the changes take effect constitutes acceptance of the updated policy.

For data protection enquiries:

• WhatsApp: +7 778 914 9692
• Address: 13 Aleksandr Griboyedov St, 3rd Floor, Atyrau, Kazakhstan
• Hours: Mon–Fri, 10:00–18:00 (UTC+5)