Privacy Policy

1. General

1.1. This Policy sets out how personal data of users of getparfum.com (the «Site») is processed and protected. The data controller is Sole proprietor Andrey Stanislavovich Zaruev (OGRNIP 311507406800062, INN 507462292636, address: Molodyozhny settlement 27, Podolsk district, Moscow Region, Russia) (the «Operator»).

1.2. The Policy is published under Article 18.1 of Russian Federal Law No. 152-FZ «On Personal Data» and is publicly available.

2. What we process and why

• Sign-up and sign-in: e-mail, password (stored only as a hash), username; with Yandex ID — e-mail and name from the Yandex profile. Purpose: account, favourites and order history.
• Orders: name, phone, e-mail, delivery address or pickup point, order contents and amount. Purpose: concluding and performing the sale under the Public Offer, delivery, order communication, fiscal receipt.
• Unfinished orders and the AI consultant form: name, surname, e-mail, phone, cart contents, the chat with the AI consultant. Purpose: answering the request, helping to choose, recovering an unfinished order.
• Newsletter: e-mail, only with your consent.
• Reviews: username and review text, to publish the review.
• Technical data: IP address, browser and device details, cookies, chosen language and city, actions on the Site. Purpose: operation and security of the Site, delivery estimates, visit statistics.

3. Legal grounds

• performance of the contract with the buyer;
• your consent (account, AI consultant form, newsletter, analytics cookies);
• the Operator's legal obligations (accounting, tax, cash register and product marking rules).

4. Retention

• account data — until the account is deleted at your request;
• order data — 5 years after the end of the year of the order (accounting and tax rules);
• AI consultant form and unfinished orders — 3 years after the last contact or until consent is withdrawn;
• newsletter address — until you unsubscribe;
• published reviews — while the review is on the Site.

5. Who receives the data

The Operator does not sell personal data. Data is shared only as far as each purpose requires:

• CDEK — name, phone, delivery address or pickup point, to deliver the order;
• the acquiring bank and the fiscal data operator — for online payments and receipts; card details are entered on the bank's page and never reach the Operator;
• Yandex LLC — Yandex ID sign-in, Yandex Metrica statistics;
• Google LLC (USA) — Google Analytics and Google AdSense;
• OpenRouter, Inc. (USA) — messages sent to the AI consultant;
• Resend, Inc. (USA) — order e-mails and the newsletter;
• Telegram — internal notifications to the Operator's staff about new orders and requests;
• Cloudflare, Inc. (USA) — site protection and delivery;
• public authorities — upon a lawful request.

6. Cross-border transfer

Using Google, OpenRouter, Resend, Telegram and Cloudflare involves transferring personal data abroad, including to the USA. The transfer is based on your consent and complies with Article 12 of Law No. 152-FZ.

7. Cookies

The Site uses necessary cookies (sign-in, cart, checkout, language and city) and analytics and advertising cookies (Yandex Metrica, Google Analytics, Google AdSense). See the Cookie Policy.

8. Your rights

• to obtain information about the processing and a copy of your data;
• to have inaccurate, outdated or unlawfully obtained data corrected, blocked or destroyed;
• to delete your account;
• to withdraw consent and unsubscribe;
• to complain to Roskomnadzor or a court.

Send requests to [email protected] or by post to the Operator's address. We reply within 10 working days.

9. Security

Access to personal data is limited to staff and contractors who need it; passwords are stored as hashes; connections to the Site are encrypted (HTTPS).

10. Changes

The Operator may amend this Policy. The new version is published on this page with its date and takes effect on publication.