This Privacy Policy and Personal Data Processing Policy (hereinafter referred to as the “Privacy Policy”) has been prepared in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection” and defines the procedure for processing personal data and measures to ensure the security of personal data. It applies to all information that CDV may obtain about the User while using the Website.
1. Terms and Definitions
This Privacy Policy uses the following terms and definitions:
“Website” – the website located on the Internet at www.cdv.kz. All exclusive rights to the Website and its individual elements (including software and design) belong entirely to CDV.
“Website Administration” – authorized employees responsible for managing the Website on behalf of PREMIUM BEAUTY LLP, organizing and/or carrying out the processing of personal data, as well as determining the purposes of personal data processing, the composition of personal data subject to processing, and the actions (operations) performed with personal data.
“Non-personal data” – information that is automatically transmitted during the process of viewing advertising blocks by the User and when visiting pages where a statistical system script (pixel) is installed.
“User” – a person who has access to the Website via the Internet and uses the website www.cdv.kz.
“Personal data” – information relating to a specific or identifiable subject of personal data recorded on electronic, paper and/or other material media.
“Processing of personal data” – actions performed with or without the use of automation tools with personal data and aimed at collection, storage, modification, supplementation, use, distribution, depersonalization, blocking and destruction of personal data.
“Website Services” – the set of services available to the User for use on the Website.
“Registration” – completion by the User of the Registration Form located on the Website by providing the required personal data in order to create an account and use the Website Services.
“Registration Form” – the form located on the Website that the User must complete in order to use the Website in full.
“CDV” – the owner of the website www.cdv.kz – PREMIUM BEAUTY LLP.
“Cookies” – a small piece of data sent by a web server and stored on the User’s computer, which the web client or web browser sends back to the web server each time in an HTTP request when attempting to open a page of the Website.
“IP address” – a unique network address of a node in a computer network built using the IP protocol.
2. General Provisions
2.1. By registering on and using the Website, the User agrees to the terms of this Privacy Policy. If the User does not agree with the terms of this Privacy Policy, the use of the Website must be immediately discontinued.
2.2. The User’s consent to the collection and processing of personal data is expressed by placing a check mark in the field “I agree with the terms of the Privacy Policy” during registration or when placing an order, or by any other action confirming the User’s expression of will (for example, clicking the “Submit”, “Place Order” button, etc.), which shall be considered as granting consent in electronic form.
2.3. This Privacy Policy applies only to the website www.cdv.kz. CDV does not control and is not responsible for third-party websites that the User may access through links available on the Website.
2.4. CDV does not verify the accuracy of personal data provided by the User. However, CDV assumes that the User provides accurate personal data and keeps such data up to date. The User bears full responsibility, including possible consequences, for providing inaccurate or outdated personal data.
3. Subject of the Privacy Policy
3.1. This Privacy Policy establishes the obligations of the Website Administration to maintain confidentiality and ensure the protection of personal data that the User provides at the request of the Website Administration when registering on the Website or when placing an order to use any of the Website Services.
3.2. Personal data permitted to be processed under this Privacy Policy may include, but is not limited to, the following information:
3.2.1. the User’s first and last name;
3.2.2. the User’s contact phone numbers;
3.2.3. email address (e-mail);
3.2.4. date of birth;
3.2.5. gender;
3.2.6. bank details of an individual, including payment card details;
3.2.7. data regarding the User’s loyalty program membership status;
3.2.8. username and phone number used for communication via messaging services, including WhatsApp, if such data is provided by the User.
3.3. The Website protects Non-personal data including:
3.3.1. IP address;
3.3.2. information from cookies;
3.3.3. information about the browser (or other software used to access advertisements);
3.3.4. access time;
3.3.5. the address of the page where the advertising block is located;
3.3.6. referrer (the address of the previous page).
3.4. Disabling cookies may result in the inability to access parts of the Website that require authorization, including the inability to place orders on the Website.
3.5. The Website collects statistics about the IP addresses of its visitors. This information is used to identify and resolve technical issues.
3.6. Any other personal information not specified above (purchase history, browsers and operating systems used, etc.) shall be securely stored and not disclosed, except in cases provided for in clauses 5.2 and 5.3 of this Privacy Policy.
3.7. PREMIUM BEAUTY LLP may use the User’s personal data, including name and phone number, to send service, informational, and marketing messages via messaging services, including WhatsApp.
3.8. The first message sent to the User via messaging services may contain a request for informed consent to receive messages from CDV.
3.9. The User has the right to consent to receiving messages or to refuse to receive them.
4. Purposes of Collecting and Processing Users’ Personal Data
4.1. CDV collects, processes, and stores only those personal data that are necessary to provide the Website Services and/or enable the User to purchase goods from the online store catalog.
4.2. CDV uses the User’s personal data for the following purposes:
4.2.1. identification of the User for placing an order and/or concluding a sales contract;
4.2.2. processing and receiving payments from the User;
4.2.3. delivery of goods to the User;
4.2.4. providing effective customer support to the User;
4.2.5. providing the User with personalized Website Services;
4.2.6. communication with the User, including sending notifications, requests and information related to the use of the Website Services, provision of services, and processing of the User’s requests and applications;
4.2.7. improving the quality of Website Services, convenience of their use, and development of new services;
4.2.8. informing the User about events and promotions;
4.2.9. conducting statistical and other research based on non-personal data, as well as optimizing advertising messages;
4.2.10. sending notifications regarding order status, service messages and marketing offers via email, SMS and messaging services including WhatsApp;
4.2.11. providing the User with personalized recommendations and notifications about new products, promotions, special offers and company events.
5. Methods and Terms of Personal Data Processing
5.1. The processing of the User’s personal data is carried out without limitation of time, by any lawful means, including in personal data information systems using automation tools or without using such tools.
5.2. The User agrees that the Website Administration has the right to transfer personal data to third parties, including courier services, postal service organizations, and mobile operators, solely for the purpose of fulfilling the User’s order and informing about its execution.
5.3. The User’s personal data may be transferred to authorized government authorities of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan.
5.4. In case of loss or disclosure of personal data, the Website Administration shall inform the User about such loss or disclosure.
5.5. The Website Administration takes necessary organizational and technical measures to protect the User’s personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and from other unlawful actions of third parties.
5.6. The Website Administration, together with the User, shall take all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User’s personal data.
5.7. The User has the right at any time to opt out of receiving marketing messages by sending the word “Unsubscribe” in the messenger or by sending an email to shop@cdv.kz with the subject line “Unsubscribe from mailing”.
5.8. Upon receipt of such a request, CDV undertakes to stop sending marketing messages within a reasonable time.
5.9. When using messaging services, including WhatsApp, the User’s personal data may be processed on the servers of service providers located outside the Republic of Kazakhstan, provided that the requirements of the legislation of the Republic of Kazakhstan on personal data protection are complied with.
6. Obligations of the Parties
6.1. The User shall:
6.1.1. provide up-to-date personal data requested by the Website when using it.
6.2. The User has the right to:
6.2.1. access and edit personal data information at any time through the Website interface;
6.2.2. request blocking or destruction of personal data in case violations of processing conditions are detected;
6.2.3. withdraw consent to personal data processing at any time.
6.3. The Website Administration shall:
6.3.1. use the received information solely for the purposes specified in clause 4 of this Privacy Policy;
6.3.2. ensure confidentiality of the information and not disclose it without the User’s prior written consent, except as provided in clauses 5.2 and 5.3;
6.3.3. take precautions to protect the confidentiality of personal data according to commonly used business practices;
6.3.4. block personal data related to the relevant User upon request of the User, their legal representative, or an authorized authority during the verification period in case inaccurate data or unlawful actions are detected.
6.4. The Website Administration has the right to:
6.4.1. provide access for collecting and analyzing non-personal data to third parties for statistical and advertising optimization purposes.
7. Procedure for Personal Data Protection Measures
7.1. The Website Administration ensures protection of personal data and takes necessary measures to:
7.1.1. prevent unauthorized access to personal data;
7.1.2. detect unauthorized access in a timely manner if it cannot be prevented;
7.1.3. minimize negative consequences of unauthorized access.
7.2. Obligations to protect personal data arise from the moment of their collection and remain in force until their destruction or anonymization.
7.3. Personal data collection and processing are carried out only if their protection is ensured.
7.4. Personal data protection is ensured through legal, organizational and technical measures including:
7.4.1. protection of privacy and family secrecy rights;
7.4.2. ensuring data integrity and safety;
7.4.3. maintaining confidentiality;
7.4.4. ensuring the right of access;
7.4.5. preventing unlawful collection and processing.
7.5. Technical and organizational security measures are used when communicating with Users through messaging services, including restricted employee access and secure data transmission channels.
8. Liability of the Parties
8.1. The Website Administration that fails to fulfill its obligations shall be liable for damages caused to the User due to unlawful use of personal data in accordance with the legislation of the Republic of Kazakhstan.
8.2. The Website Administration shall not be liable if confidential information:
8.2.1. became public before its loss or disclosure;
8.2.2. was obtained from a third party prior to receipt by the Website Administration;
8.2.3. was disclosed with the User’s consent.
8.3. CDV shall not be liable for actions of third parties who gained access to personal data due to unauthorized access, virus attacks, failures of internet providers, software or other circumstances beyond CDV’s control.
8.4. CDV shall not be liable for inaccurate personal data provided by the User.
9. Dispute Resolution
9.1. Before filing a lawsuit, a written claim must be submitted for voluntary dispute settlement.
9.2. The Website Administration shall notify the claimant in writing about the results within the timeframes established by the legislation of the Republic of Kazakhstan.
9.3. If no agreement is reached, the dispute shall be referred to the court in accordance with the legislation of the Republic of Kazakhstan.
9.4. The legislation of the Republic of Kazakhstan shall apply to this Privacy Policy.
10. Additional Provisions
10.1. The Website Administration has the right to amend this Privacy Policy without the User’s consent.
10.2. The new version enters into force upon publication on the Website.
10.3. Users may send requests regarding personal data to shop@cdv.kz.
10.4. The request must include:
10.4.1. full name;
10.4.2. information confirming the User’s relationship with the Website;
10.4.3. phone number.
10.5. The Website Administration shall respond within 10 calendar days.
10.6. Continued use of the Website after publication of the new version means acceptance of the updated Privacy Policy.
10.7. If cross-border data transfer is required, CDV may transfer personal data to foreign countries with the User’s consent and provided that adequate data protection is ensured.