Confidentiality policy
This Privacy Policy and Personal Data Processing Policy (hereinafter referred to as the “Privacy Policy”) is a public Agreement concluded between the owner of the Website www.viled.kz — VILED FASHION LLP (hereinafter referred to as “Viled.kz”) and the User.
This Policy is drafted in accordance with the requirements of the Law of the Republic of Kazakhstan dated May 21, 2013 No. 94-V “On Personal Data and Their Protection” and defines the procedure for processing personal data and measures to ensure the security of personal data, and applies to all information that Viled.kz may obtain about the User while using the Website.
Terms and definitions
This Privacy Policy contains the following terms and definitions:
“Website” — a website located on the Internet at www.viled.kz. All exclusive rights to the Website and its individual elements (including software and design) belong to Viled.kz in full.
“Website Administration” — authorized employees responsible for managing the Website, acting on behalf of VILED FASHION LLP, organizing and/or carrying out the processing of personal data, as well as determining the purposes of personal data processing, the composition of personal data subject to processing, and the actions (operations) performed with personal data.
“Non-personal Data” — information automatically transmitted during the User’s viewing of advertising blocks and when visiting pages where the statistical system script (pixel) is installed.
“User” — a person who has access to the Website via the Internet and uses the website www.viled.kz.
“Personal Data” — information relating to an identified or identifiable subject of personal data, recorded on electronic, paper and/or other tangible media.
“Processing of Personal Data” — actions performed with or without the use of automation tools with personal data and aimed at accumulation, storage, modification, supplementation, use, dissemination, depersonalization, blocking and destruction of personal data.
“Website Services” — a set of services available to the User for use on the Website.
“Registration” — completion by the User of the Registration Form located on the Website by specifying the necessary information.
“Registration Form” — a form located on the Website that the User must complete in order to use the Website in full.
“Viled.kz” — the owner of the Website www.viled.kz — VILED FASHION LLP.
“Cookies” — a fragment of data sent by a web server and stored on the User’s computer, which the web client or web browser sends back to the web server in an HTTP request each time it attempts to open a page of the Website.
“IP address” — a unique network address of a node in a computer network built on the IP protocol.
1. General provisions
1.1. By registering and using the Website, the User agrees to the terms of this Privacy Policy. If the User does not agree with the terms of this Privacy Policy, the use of the Website must be immediately terminated.
1.2. The User’s consent to the collection and processing of personal data is expressed by placing a mark (“checkmark”) in the consent field during registration, placing an order, or by another action confirming the User’s expression of will, which is considered the provision of consent in electronic form.
1.3. This Privacy Policy applies only to the website www.viled.kz, and does not control or bear responsibility for third-party websites to which the User may navigate via links available on the Website.
1.4. Viled.kz does not verify the accuracy of personal data provided by the User. However, Viled.kz assumes that the User provides accurate personal data and keeps such data up to date. All responsibility, as well as possible consequences for providing inaccurate or outdated personal data, is born by the User.
2. Subject of the privacy policy
2.1. This Privacy Policy establishes the obligations of the Website Administration not to disclose and to ensure the protection regime of the confidentiality of personal data that the User provides at the request of the Website Administration when registering on the Website or when placing an order for the use of any Website Services.
2.2. Personal data permitted for processing under this Privacy Policy may include the following information:
2.2.1. The User’s surname and first name;
2.2.2. The User’s contact phone numbers;
2.2.3. Email address (e-mail);
2.2.4. Date of birth;
2.2.5. Gender;
2.2.6. Banking details of an individual, including payment card details;
2.2.7. Data on the status of participation in the loyalty program;
2.2.8. Username and phone number used for communication through messengers, including WhatsApp, if such data is provided by the User.
2.3. The Website protects Non-personal Data:
2.3.1. IP address;
2.3.2. Information from cookies;
2.3.3. Information about the browser (or other program used to access advertising);
2.3.4. Access time;
2.3.5. The address of the page on which the advertising block is located;
2.3.6. Referrer (the address of the previous page).
2.4. Disabling cookies may result in the inability to access parts of the Website requiring authorization, including the inability to place an order on the Website.
2.5. The Website collects statistics about the IP addresses of its visitors. This information is used for the purpose of identifying and resolving technical problems.
2.6. Any other personal information not specified above (purchase history, browsers and operating systems used, etc.) is subject to secure storage and non-disclosure, except for cases provided in clauses 5.2 and 5.3 of this Privacy Policy.
2.7. VILED FASHION LLP may use the User’s personal data, including name and phone number, to send service, informational and marketing messages through messengers, including WhatsApp.
2.8. The first message sent to the User through messengers may contain a request for informed consent to receive messages from Viled.kz.
2.9. The User has the right to provide consent to receive messages or refuse to receive them.
3. Purposes of collection and processing of users’ personal data
3.1. Viled.kz collects, processes and stores only those personal data that are necessary for the provision of Services and/or for the purchase by the User of goods from the catalog of the online store.
3.2. Viled.kz uses the User’s personal data for the following purposes:
3.2.1. Identification of the User for placing an order and/or concluding a contract of sale;
3.2.2. Processing and receiving payments from the User;
3.2.3. Delivery of goods to the User;
3.2.4. Providing effective customer support;
3.2.5. Providing the User with personalized Website Services;
3.2.6. Communication with the User, including sending notifications, requests and information regarding the use of Website Services, the provision of services, as well as processing requests and applications from the User;
3.2.7. Improving the quality of Website Services, convenience of their use, development of new Services and services;
3.2.8. Informing the User about events and promotions held;
3.2.9. Conducting statistical and other research based on Non-personal Data, as well as optimizing advertising messages;
3.2.10. Sending notifications to the User about order status, service messages, as well as marketing offers through email, SMS and messengers, including WhatsApp;
3.2.11. Providing the User with personalized recommendations, notifications about new products, promotions, special offers and company events.
4. Methods and terms of personal data processing
4.1. Processing of the User’s personal data is carried out without limitation of time, by any lawful means, including in personal data information systems with the use of automation tools or without the use of such tools.
4.2. The User agrees that the Website Administration has the right to transfer personal data to third parties, in particular courier services, postal organizations, and mobile operators, solely for the purpose of fulfilling the User’s order and informing about the progress of its execution.
4.3. The User’s personal data may be transferred to authorized state authorities of the Republic of Kazakhstan only on the grounds and in the manner established by the legislation of the Republic of Kazakhstan.
4.4. In case of loss or disclosure of personal data, the Website Administration informs the User about the loss or disclosure of personal data.
4.5. The Website Administration takes necessary organizational and technical measures to protect the User’s personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, as well as from other unlawful actions of third parties.
4.6. The Website Administration together with the User takes all necessary measures to prevent losses or other negative consequences caused by the loss or disclosure of the User’s personal data.
4.7. The User has the right at any time to refuse to receive marketing messages from the company by sending the word “Unsubscribe” in the messenger or by sending an email to shop@viled.kz with the subject “Refusal of mailing”.
4.8. After receiving such a request, Viled.kz undertakes to stop sending marketing messages within a reasonable period of time.
4.9. When using messaging services, including WhatsApp, the User’s personal data may be processed on servers of service providers located outside the Republic of Kazakhstan, provided that the requirements of the legislation of the Republic of Kazakhstan on personal data and their protection are observed.
5. Obligations of the parties
5.1. The User shall:
5.1.1. Provide up-to-date information on personal data requested by the Website at the time of its use.
5.2. The User has the right to:
5.2.1. Access and edit information about personal data at any time through the Website interface;
5.2.2. Request blocking or destruction of personal data in case of violations of the conditions of their processing;
5.2.3. Withdraw consent to personal data processing at any time, including consent to receive informational and marketing messages via email, SMS and messengers, including WhatsApp.
5.3. The Website Administration shall:
5.3.1. Use the information received exclusively for the purposes specified in clause 4 of this Privacy Policy;
5.3.2. Ensure the confidentiality of information, not disclose it without the prior written permission of the User, and not sell, exchange, publish or disclose personal data transferred by the User by other possible means, except for clauses 5.2 and 5.3 of this Privacy Policy;
5.3.3. Take precautionary measures to protect the confidentiality of the User’s personal data in accordance with the procedure usually used to protect such information in existing business practice;
5.3.4. Block personal data related to the relevant User from the moment of request or inquiry of the User or his legal representative or authorized body for the protection of the rights of personal data subjects for the period of verification in case of detection of inaccurate personal data or unlawful actions.
5.4. The Website Administration has the right to:
5.4.1. Provide access for the collection and analysis of the User’s Non-personal Data to third parties for statistical purposes and optimization of advertising messages. The use of Non-personal Data by third parties is regulated by their own privacy policies, and the Website Administration is not responsible for their use.
6. Procedure for implementation of personal data protection measures
6.1. The Administration ensures the protection of personal data guaranteed by the state and takes necessary measures to protect personal data ensuring:
6.1.1. Prevention of unauthorized access to personal data;
6.1.2. Timely detection of unauthorized access to personal data if such access could not be prevented;
6.1.3. Minimization of adverse consequences of unauthorized access to personal data.
6.2. The obligations of the Administration, as well as of a third party for the protection of personal data, arise from the moment of collection of personal data and remain in force until their destruction or depersonalization.
6.3. Collection and processing of personal data are carried out only in cases ensuring their protection.
6.4. Protection of personal data is carried out through the application of a set of measures, including legal, organizational and technical measures, for the purposes of:
6.4.1. Realization of the rights to privacy, personal and family secrecy;
6.4.2. Ensuring their integrity and preservation;
6.4.3. Maintaining their confidentiality;
6.4.4. Realization of the right of access to them;
6.4.5. Prevention of unlawful collection and processing.
6.5. To ensure the security of personal data during communication with Users through messengers, technical and organizational protection measures are used, including restricting employee access to information and using secure data transmission channels.
7. Liability of the parties
7.1. The Website Administration that has failed to fulfill its obligations shall be liable for damages incurred by the User in connection with unlawful use of personal data in accordance with the legislation of the Republic of Kazakhstan, except for cases provided for in clauses 5.2, 5.3 and 7.2 of this Privacy Policy.
7.2. In the event of loss or disclosure of Confidential Information, the Website Administration shall not be liable if such confidential information:
7.2.1. Became public domain before its loss or disclosure;
7.2.2. Was received from a third party before it was received by the Website Administration;
7.2.3. Was disclosed with the consent of the User.
8. Dispute resolution
8.1. Before filing a lawsuit in court regarding disputes arising from relations between the User of the Website and the Website Administration, submission of a claim (written proposal for voluntary settlement of the dispute) is mandatory.
8.2. The Website Administration shall notify the claimant in writing of the results of consideration of the claim within the time limits established by the current legislation of the Republic of Kazakhstan.
8.3. If an agreement is not reached, the dispute shall be referred to a judicial authority in accordance with the current legislation of the Republic of Kazakhstan.
8.4. The current legislation of the Republic of Kazakhstan shall apply to this Privacy Policy and relations between the User and the Website Administration.
9. Additional conditions
9.1. The Website Administration has the right to make changes to this Privacy Policy without the consent of the User.
9.2. The new Privacy Policy comes into force from the moment it is posted on the Website unless otherwise provided by the new version of the Privacy Policy.
9.3. Users have the right to send inquiries to the Website Administration, including inquiries regarding the use of their personal data, in written form to the email address: shop@viled.kz
9.4. The request sent by the User must contain:
9.4.1. Full name;
9.4.2. Information confirming the User’s participation in relations with the Administration;
9.4.3. Phone number.
9.5. The Website Administration undertakes to review and send a response to the received User request within 10 calendar days from the moment of receipt of the request.