The following terms are used in this Policy:

Personal data — information relating to a specific or identifiable individual.

Subject of personal data — Buyer whose personal data is processed by the Platform.

Personal data operator — LLP «Atasuai», organizing and carrying out the processing of personal data.

Processing of personal data — any actions with personal data, including collection, storage, use, transfer, anonymization, and deletion.

Automated processing — processing of personal data using computer technology.

Destruction of personal data — actions resulting in the impossibility of restoring personal data.

The Atasuai platform — is a software suite designed for placing product orders, making payments, tracking deliveries, and managing the Buyer's personal account through the website and mobile application.

The Platform collects information when the Buyer registers, places orders, and uses the Platform's services.

The collected information may include:

• last name, first name, middle name;

• mobile phone number;

• email address;

• delivery address;

• information about orders and returns;

• payment data;

• device IP address;

• information about the browser, operating system, and time of Platform use;

• technical and analytical data.

The Platform does not collect precise geolocation data without the Buyer's consent.

The Buyer's personal data is processed for the purposes of:

• registration and identification of the Buyer;

• conclusion and execution of sales contracts;

• processing payments and refunds;

• organizing the delivery of goods;

• interaction with customer support;

• compliance with the legislation of the Republic of Kazakhstan;

• ensuring the security of the Platform and preventing fraud.

The platform stores the Buyer's personal data for the entire duration of their account, as well as after its deletion — for the periods established by the legislation of the Republic of Kazakhstan, namely:

• Personal data contained in accounting and financial documents (including data on payments, refunds, settlements) — at least 5 (five) years in accordance with the requirements of the tax and accounting legislation of the Republic of Kazakhstan;

• Data related to contracts, obligations, and settlements between parties — 5 (five) years from the termination of contractual relations;

• Data necessary for resolving disputes, claims, and legal proceedings — until the end of such proceedings and for 3 (three) years after their completion;

• Identification and contact data of the User's account — until the account is deleted, and after deletion — for the periods provided by legislation, or until the expiration of the above-mentioned storage periods.

After the expiration of the mandatory storage periods, personal data is subject to anonymization or destruction, except in cases where further storage is required in accordance with the legislation of the Republic of Kazakhstan.

The platform may transfer the Buyer's personal data to third parties exclusively in the following cases:

• to payment organizations and banks;

• to logistics and courier services;

• to government bodies upon lawful request;

• to technical and cloud providers ensuring the operation of the Platform.

Data transfer is carried out under the condition of confidentiality and security requirements.

7.1. Right to Deletion
In accordance with the Law of the Republic of Kazakhstan "On Personal Data and Their Protection", you have the right to request the deletion of your personal data.

7.2. How to Submit a Request
Method 1: Through Personal Account → Settings → "Delete Account"
Method 2: Email to help@atasuai.com with the subject "Data Deletion Request"
Method 3: Written statement to the address: Republic of Kazakhstan, Almaty, Kunaev St. 18/2

7.3. What to Include in the Request

• Full Name
• Email or phone number linked to the account
• Reason for deletion (optional)

7.4. Processing Timeframes

7.5. What is Deleted

• Profile and personal data
• Order history (anonymized)
• Payment data
• Delivery addresses
• Settings and preferences

7.6. What is NOT Deleted (by law)

• Accounting data — stored for 5 years
• Data for tax reporting — stored for 5 years
• Data necessary for legal proceedings
• Anonymized statistical data

7.7. Consequences of Deletion

• Account will be fully deactivated
• Order history cannot be restored
• Bonus points will be forfeited
• For Sellers: pending payments will be transferred to the specified details

The platform applies modern technical and organizational measures to protect personal data, including encryption, secure data transmission channels, and access control.

At the same time, the platform cannot guarantee absolute data protection from all possible threats. The buyer is solely responsible for the security of access data to their account.

By using the Platform, the Buyer confirms consent to the processing of their personal data in accordance with this Policy.

10.1. What are cookies
Cookies are small text files that are saved on your device when you visit the site atasuai.com. They help us improve the site's performance and make its use more convenient for you.

10.2. What cookies we use

10.2.1. Strictly necessary cookies
These cookies are necessary for the site's operation. Without them, it is impossible to:

• Log in to your account
• Add items to the cart
• Place orders
• Ensure transaction security

10.2.2. Functional cookies
These cookies enhance usability:

• Remember the selected language
• Save the delivery region
• Remember browsing history

10.2.3. Analytical cookies
We use analytical services to improve the site:

• Google Analytics — visit statistics
• Yandex.Metrica — user behavior analysis
• This data is anonymous and used only to improve the site.

10.2.4. Marketing cookies
These cookies are used to display relevant advertising. You can disable them in the settings.

10.3. How to manage cookies

10.3.1. Through browser settings
You can manage cookies in the browser settings:

• Chrome: Settings → Privacy and security → Cookies
• Safari: Settings → Privacy → Manage website data
• Firefox: Settings → Privacy & Security → Cookies
• Edge: Settings → Cookies and site permissions

10.4. Consequences of disabling cookies
If you disable cookies:

• Strictly necessary — the site may not function correctly
• Functional — you will have to select the language and region each time
• Analytical — we will not be able to improve the site based on statistics
• Marketing — advertising will be less relevant

10.5. Third-party cookies
Our site may place cookies from third parties (Google, Yandex, Facebook). We do not control these cookies. Please review the privacy policies of these services.