1. General Provisions
This Personal Data Processing Policy (the "Policy") defines the procedure for processing and protecting the personal data of users of https://shipperty.ru and all of its subdomains (the "Site").
This Policy applies to the Site and the Operator's services. The Operator is not responsible for the content and personal data processing practices of third-party websites and services that users may access through links or widgets placed on the Site.
The personal data operator is:
Individual Entrepreneur Dementiev Aleksei Alekseevich
INN: 772665070823
OGRNIP: 307770000563698
Address: Apt. 35, Bldg. 7, 3 Sevastopolsky Ave., Moscow, 117152, Russian Federation
Email for personal data inquiries: privatepolicy@shipperty.ru
2. Personal Data We Process
2.1. Data Provided by Users on the Site
When users fill out forms on the Site, the following data is processed:
- name
- phone number
- email address
- message text (comment or request)
- company details, website address, and other information provided by the user when requesting a contract or service
2.2. Personal Account Data
When users register and use a personal account, the following data is processed:
- user name and contact details
- delivery addresses
- order information
- order history
2.3. Automatically Collected Data
When users use the Site, the following data is collected automatically:
- IP address
- cookie data
- browser and device information
- information about user actions on the Site
This data may be collected using analytics, map, and communication services used on the Site, including Yandex Metrica.
3. Purposes of Personal Data Processing
Personal data is processed for the following purposes:
- processing requests submitted through Site forms
- providing courier delivery services
- managing user orders
- ensuring operation of the personal account
- communicating with users, including on order-related matters
- sending personalized notifications to customers
- providing technical support
- analytics and improving Site quality
4. Legal Grounds for Processing
Personal data is processed on the following grounds:
- user consent
- conclusion and performance of a contract
- requirements of the legislation of the Russian Federation
5. Personal Data Retention Periods
Personal data is stored only for as long as required for the purposes of processing, performance of contracts, compliance with statutory retention periods, or protection of the Operator's rights and legitimate interests. In particular, personal data is stored:
- until deleted by the user
- or until consent is withdrawn
- or for the period required to provide the services
- or for the period required by accounting, tax, civil, and other applicable legislation
After the purpose of processing is achieved, consent is withdrawn, or the statutory retention period expires, personal data is deleted, destroyed, or anonymized, unless further storage is required by law.
6. Transfer of Personal Data
Users' personal data is processed by the Operator's employees within the scope of their job duties.
For the purpose of providing delivery services, the Operator may transfer personal data to third parties engaged to perform obligations, including individual entrepreneurs, self-employed persons, and other delivery contractors.
The Operator may also engage service providers for hosting and administration, analytics, communications with users, email delivery, messengers, online chat, maps, and other technical services necessary for the Site and the Operator's services to function.
Data is transferred only to the extent necessary to fulfill an order.
The Operator ensures that such persons undertake confidentiality obligations with respect to personal data.
Personal data may also be transferred in cases provided for by the legislation of the Russian Federation.
If the use of a third-party service involves cross-border transfer of personal data, such transfer is carried out only in compliance with the requirements of the legislation of the Russian Federation, including prior notification of the authorized body where required.
7. Methods of Personal Data Processing
Personal data processing includes:
- collection
- recording
- systematization
- accumulation
- storage
- clarification (updating and modification)
- extraction
- use
- transfer, including provision and access, as part of service provision
- anonymization
- blocking
- deletion
- destruction
Processing is carried out both manually and using automated systems, including internal information systems and APIs.
8. Storage and Protection of Personal Data
Users' personal data is stored on servers located in the Russian Federation.
The Operator maintains the confidentiality of personal data, except where disclosure is required by law, necessary for service provision, or permitted by the user.
The Operator takes the necessary legal, organizational, technical, and software measures to protect personal data from:
- unauthorized access
- modification
- disclosure
- destruction
Such measures may include limiting access to personal data, appointing responsible persons, maintaining confidentiality obligations, using technical security tools, backing up data, logging access events, and periodically reviewing the measures applied, taking into account the nature of the processed data and possible risks.
9. User Rights
Users have the right to:
- receive information about their personal data
- request clarification of their data
- request deletion of personal data
- withdraw consent to processing
To exercise these rights, users may send a request to: privatepolicy@shipperty.ru
10. Use of Cookies
The Site uses cookies to:
- ensure correct operation of the Site
- analyze user behavior
- improve user experience
- support communication widgets and other technical services used on the Site
Users may allow or decline the use of non-essential cookies through the Site's cookie notice, and may also restrict or disable cookies in their browser settings. Disabling cookies may affect the availability or correct operation of certain Site functions.
11. Changes to the Policy
The Operator may amend this Policy. The current version of the Policy is always available on the Site.
12. Use of the Site and Services
Use of the Site, including filling out forms, submitting orders, registering and using a personal account, and using the Operator's API and other services, means that the user has read this Policy.
The user confirms that, when using the Site and the Operator's services, the user acts voluntarily, provides accurate data, and agrees to the terms of processing described in this Policy.
Where personal data is processed on the basis of user consent, such consent is provided by the user through active actions, including submitting Site forms, clicking relevant buttons, using the cookie notice controls, or ticking the relevant checkboxes where available.
Submitting orders, registering in the system, using a personal account, and connecting to the API involve processing personal data to the extent necessary to provide the services.
13. Use of the API and Data Transfer by Third Parties
When using the API, the user or organization connecting to the API undertakes to:
- ensure the legality of personal data transfer
- obtain the necessary consents from personal data subjects
- transfer data only to the extent necessary to provide the services
The Operator is not responsible for violations of personal data legislation committed by API users when transferring data.