Confidentiality policy
This Privacy Policy and Personal Data Processing Agreement (hereinafter – the “Privacy Policy”) is a public Agreement concluded between the owner of the Website www.cdv.kz – LLP “PREMIUM BEAUTY” (hereinafter – “CDV”) and the “User”.
This Privacy Policy is drafted in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection” and defines the procedure for processing personal data and measures to ensure the security of personal data. It applies to all information that CDV may receive about the User while using the Website.
1. Terms and Definitions
This Privacy Policy contains the following terms and definitions:
“Website” – the website located on the Internet at www.cdv.kz. All exclusive rights to the Website and its individual elements (including software, design) belong fully to CDV.
“Website Administration” – authorized employees managing the Website on behalf of LLP “PREMIUM BEAUTY”, organizing and/or performing the processing of personal data, and determining the purposes of such processing, the composition of personal data subject to processing, and the actions (operations) performed with personal data.
“Non-personal data” – information automatically transmitted during the User’s viewing of advertising blocks and visiting pages with an installed statistical system script (pixel).
“User” – an individual having access to the Website via the Internet and using the Website www.cdv.kz.
“Personal data” – information relating to an identified or identifiable subject of personal data, recorded on electronic, paper, or other material carriers.
“Processing of personal data” – any action performed with or without the use of automation tools with personal data, including collection, storage, modification, supplementation, use, dissemination, anonymization, blocking, and destruction of personal data.
“Website Services” – a set of services available to the User on the Website.
“Registration” – completion by the User of the Registration Form located on the Website by providing required information and submitting scanned documents.
“Registration Form” – the form located on the Website, which the User must complete to be able to use the Website in full.
“CDV” – the owner of the Website www.cdv.kz – LLP “PREMIUM BEAUTY”.
“Cookies” – a data fragment sent by a web server and stored on the User’s computer, which the web client or browser transmits back to the server in an HTTP request when accessing a page.
“IP address” – a unique network address of a node in a computer network based on the IP protocol.
General Provisions
By registering and using the Website, the User agrees to the terms of this Privacy Policy. If the User does not agree with these terms, the use of the Website must be immediately terminated.
This Privacy Policy applies solely to the Website www.cdv.kz and does not control or assume responsibility for third-party websites that the User may access via links available on the Website.
CDV does not verify the accuracy of personal data provided by the User. However, CDV assumes that the User provides accurate and up-to-date data. The User bears full responsibility and possible consequences for providing false or outdated personal data.
Subject of the Privacy Policy
3.1. This Privacy Policy establishes the obligations of the Website Administration regarding the non-disclosure and protection of personal data provided by the User upon request during registration on the Website or when placing an order to use Website Services.
3.2. Personal data permitted for processing under this Privacy Policy may include:
User’s surname and name;
User’s contact phone numbers;
Email address;
Date of birth;
Gender;
Bank account details, including payment card data;
Loyalty program participant status.
3.3. The Website also protects non-personal data:
IP address;
Cookies information;
Browser information (or other software used to display ads);
Access time;
Address of the page where the ad block is located;
Referrer (previous page address).
Disabling cookies may result in restricted access to certain Website sections requiring authorization, including the inability to place an order.
The Website collects statistics on IP addresses of its visitors to detect and resolve technical problems.
Any other personal information not specified above (purchase history, browser/OS used, etc.) is securely stored and not disclosed, except as provided in Clauses 5.2. and 5.3. of this Privacy Policy.
Purposes of Collection and Processing of Personal Data
CDV collects, processes, and stores only those personal data necessary for providing Services and/or enabling the User to purchase goods from the online store catalog.
Personal data are used for:
Identifying the User for order processing and/or sales contract conclusion;
Processing and receiving payments from the User;
Delivering goods to the User;
Providing effective customer support;
Providing personalized Website Services;
Communication with the User (notifications, service messages, inquiries, feedback handling);
Improving Website Services and developing new ones;
Informing the User about events and promotions;
Conducting statistical and other research based on non-personal data, optimizing advertising.
Methods and Terms of Personal Data Processing
Personal data processing is carried out without time limitation by any lawful means, including automated and non-automated systems.
The User agrees that the Website Administration may transfer personal data to third parties (couriers, postal services, telecom operators) solely for order fulfillment and notification purposes.
Personal data may be transferred to authorized state authorities of the Republic of Kazakhstan only on legal grounds.
In case of loss or disclosure of personal data, the Website Administration notifies the User.
The Website Administration implements organizational and technical measures to protect personal data from unlawful or accidental access, destruction, modification, blocking, copying, dissemination, and other unlawful actions by third parties.
Together with the User, the Website Administration takes necessary measures to prevent damages or other adverse consequences caused by loss or disclosure of personal data.
Obligations of the Parties
User’s obligations: provide up-to-date personal data when using the Website.
User’s rights: access and edit personal data through the Website interface.
Website Administration’s obligations:
Use the information solely for purposes outlined in Section 4;
Keep data confidential, not disclose or sell without written User consent, except as provided in Sections 5.2. and 5.3.;
Protect User’s personal data according to industry standards;
Block incorrect or unlawfully obtained data upon User’s or authority’s request.
Website Administration’s rights: provide third parties access to non-personal User data for statistics and advertising optimization. Use of such data is regulated by third-party privacy policies.
Protection Measures
The Website Administration ensures protection of personal data guaranteed by the state and applies legal, organizational, and technical measures to prevent unauthorized access, detect breaches, minimize risks, and ensure confidentiality, integrity, and lawful use of data.
Liability
The Website Administration is liable for damages incurred by the User due to unlawful use of personal data in accordance with Kazakh legislation, except as specified in Clauses 5.2., 5.3., and 7.2.
The Website Administration is not liable if confidential information:
Became public before disclosure;
Was obtained from a third party before Website Administration received it;
Was disclosed with User’s consent.
Dispute Resolution
Pre-trial complaint procedure is mandatory before filing a lawsuit.
The Website Administration shall respond in writing to a complaint within the period established by Kazakh law.
If agreement is not reached, the dispute is submitted to court under the laws of Kazakhstan.
This Privacy Policy and related relations are governed by the legislation of the Republic of Kazakhstan.
Additional Conditions
The Website Administration may amend this Privacy Policy without User’s consent.
The new version enters into force upon publication on the Website unless otherwise specified.
Users may send requests regarding personal data in writing to shop@cdv.kz, including:
Full name;
Proof of participation (email used for registration);
Phone number.
The Website Administration will respond within 10 calendar days of receipt.