Privacy Policy

1. General provisions

This Privacy Policy (the "Policy") establishes the procedure for processing the personal data of users of the icosmo.shop website (the "Site"), carried out by the Operator — iCosmo Inc. (TIN 253812361701, address: [Address TBD]).

The Policy is developed in accordance with Federal Law No. 152-FZ of 27.07.2006 "On Personal Data" and other applicable regulations of the Russian Federation. By using the Site, you agree to the terms of this Policy.

2. What personal data we collect

The Operator processes the following categories of personal data:

• Identification data: last name, first name, patronymic;
• Contact data: email address, phone number;
• Organization details: name, TIN, legal and actual address (when adding a counterparty);
• Order data: order history, delivery addresses;
• Technical data: IP address (stored on login attempts and in sessions), browser type (User-Agent), cookies, pages viewed.

3. Purposes of personal data processing

• Registration and identification of the user on the Site;
• Processing and fulfillment of orders, preparation of documents;
• Communication with the user regarding orders and service;
• Sending informational and commercial messages — only with separate consent;
• Improving the Site and analyzing usage (with consent to analytics cookies);
• Compliance with the requirements of the legislation of the Russian Federation.

4. Legal grounds for processing

• Consent of the personal data subject (Art. 6 part 1 cl. 1, Art. 9 of 152-FZ);
• Performance of a contract to which the subject is a party (Art. 6 part 1 cl. 5 of 152-FZ);
• Fulfillment of obligations stipulated by the legislation of the Russian Federation (Art. 6 part 1 cl. 2 of 152-FZ).

5. Data retention periods

Personal data is stored for the term of the contract (account) and is deleted within 30 days after its termination at the user's request, unless a longer retention period is established by law (for example, accounting records are kept for 5 years under 402-FZ).

6. Transfer of data to third parties

To ensure the operation of the Site and the fulfillment of orders, the Operator transfers personal data to the following recipients:

• A CRM system for maintaining the customer base. Transferred: the user's name, email address, phone number, and details of added counterparties. The transfer is carried out for the purposes of sales organization and customer service.
• The 1C accounting system for processing and fulfilling orders. Transferred: counterparty identifier, order data (products, quantity, warehouse). The transfer is carried out on the basis of the contract with the user.
• The T-Bank payment service (JSC "TBank") for processing online bank card payments. Transferred: payment amount, order identifier. Bank card data is processed exclusively on the T-Bank side; the Operator does not receive or store it.

Personal data is not transferred to other third parties, except in cases expressly provided for by the legislation of the Russian Federation.

The Site uses only locally hosted fonts and does not transfer users' technical data to foreign analytics services (including Google Fonts).

7. Cookies

The Site uses cookies. On your first visit to the Site, you will see a consent notice. Necessary (technical) cookies enable authentication and the cart. Analytics and marketing cookies are activated only with your explicit consent. You can change your cookie settings at any time in the banner on the Site or in your browser settings.

8. Rights of the personal data subject

In accordance with 152-FZ, you have the right to:

• obtain information about the processing of your personal data;
• require clarification, blocking, or destruction of data if it is incomplete, outdated, or unlawfully processed;
• withdraw previously given consent to processing;
• appeal the Operator's actions or inaction to Roskomnadzor or the court.

To exercise your rights, send a request to the email address: info@icosmo.shop. The review period is 30 days from the receipt of the request.

9. Data security

The Operator takes organizational and technical measures to protect personal data from unauthorized access, alteration, disclosure, or destruction: data is transferred over the encrypted HTTPS protocol, and access to databases is limited on a least-privilege basis.

10. Changes to the Policy

The Operator has the right to make changes to this Policy. The current version is always available at icosmo.shop/privacy. In case of significant changes, users will be notified by email or via a notice on the Site.

11. Operator's contact details

iCosmo Inc. Company ID: [TBD] Address: [Address TBD] E-mail: info@icosmo.shop Phone: +7 (999) 347-67-68