Personal data policy

1.1. Personal data is collected and processed by TV MEDIA STYLE Limited Liability Partnership, BIN 190840012980, address: 90 Sharipov St, office 308/2, Almaty 050000, Republic of Kazakhstan.

1.2. Questions about the processing of personal data go to houseofsafetykz@gmail.com.

2.1. At checkout: name, phone number, email address if given, order comment, the contents and total of the order, and the delivery address once it is given to the Operator during confirmation.

2.2. When an account is created: the email address. The password is stored as an irreversible hash and is not known to the Operator.

2.3. Automatically: technical data sent by the browser — IP address, device and browser type, date and time of the request. It ends up in the hosting provider's service logs.

2.4. The Operator does not collect special categories of personal data — health, origin, religion or beliefs — and does not ask for identity documents.

2.5. The Site is not intended for people under eighteen; the Operator does not knowingly collect children's data.

3.1. Receiving, confirming and fulfilling an order, and communicating with the Buyer about it.

3.2. Arranging delivery, exchange and return.

3.3. Keeping order history in the account, where the Buyer has signed in.

3.4. Meeting obligations under the legislation of the Republic of Kazakhstan, including sales records.

3.5. Data is not used for marketing mailings without separate consent and is not passed to third parties for advertising purposes.

4.1. Processing is carried out on the basis of the data subject's consent, given at checkout, on registration or on subscribing to the newsletter.

4.2. Consent may be withdrawn at any time by writing to houseofsafetykz@gmail.com.

5.1. The Operator uses service providers without which the Site and order processing would not work: Vercel Inc. — site hosting; Supabase Inc. — database and accounts, servers in Frankfurt, Germany; Railway Corp. — backend hosting, servers in the Netherlands; Telegram Messenger — notifying the Operator of a new order.

5.2. For delivery, the data needed to hand over a parcel — name, phone number and address — is passed to the courier service or to Kazpost JSC.

5.3. Data is passed to other third parties only at the request of state authorities in the cases provided for by the legislation of the Republic of Kazakhstan.

6.1. The servers of those providers are located outside the Republic of Kazakhstan — in the European Union and the United States. Personal data is therefore transferred to foreign territory.

6.2. By placing an order or creating an account, the data subject consents to that cross-border transfer. Without it the Site cannot operate and orders cannot be processed.

7.1. The Site uses the cookies it needs to work: keeping the sign-in session and the chosen language.

7.2. The contents of the cart are kept in the Buyer's browser storage and are not sent to the Operator's servers until the order is placed.

7.3. No third-party web analytics or advertising trackers are used on the Site.

8.1. Order data is kept for five years from the date the order was fulfilled — the retention period set by accounting legislation.

8.2. Account data is kept until the account is deleted at its owner's request.

8.3. Once the purpose of processing is met or the retention period expires, the data is destroyed.

9.1. The subject may find out what of their data is being processed, require it to be changed, supplemented, blocked or destroyed, and withdraw consent.

9.2. Requests go to houseofsafetykz@gmail.com from the email address given at checkout or on registration.

9.3. Data is changed, supplemented or blocked within one working day of a substantiated request. Processing stops within fifteen working days of consent being withdrawn — the deadlines set by the Law On Personal Data and Its Protection.

9.4. Some data must be kept even after consent is withdrawn where the law requires it, in particular records of completed sales.

10.1. The Site runs over HTTPS: data travels encrypted.

10.2. The order management panel is open to a limited number of people and only after signing in with a username and password.

10.3. Account passwords are stored as hashes and cannot be recovered in their original form.

11.1. The Operator may amend this policy. The current version is always published at houseofsafety.kz/legal/privacy, with its date at the top of the document.