This Privacy Policy is developed in accordance with the Law of the Kyrgyz Republic dated April 14, 2008 No. 58 “On Personal Information” and defines the procedure for processing personal data and the measures taken to protect it by the Administration of the website https://panda.kg (hereinafter referred to as the Operator).
This Policy applies to all information the Operator may receive about visitors of the website https://panda.kg.
1. DEFINITIONS
1.1 The following terms are used in this Privacy Policy:
Operator – authorized employees responsible for managing the website and processing personal data on behalf of the cosmetics e-commerce store.
Personal data – any information related to a directly or indirectly identified individual (personal data subject).
Processing of personal data – any action or set of actions performed with or without the use of automated means on personal data, including collection, storage, updating, use, transfer, anonymization, deletion, and destruction.
Confidentiality of personal data – the obligation not to disclose personal data without the consent of the subject or legal grounds.
User – a person who visits and uses the website https://panda.kg.
Cookies – small data fragments stored in the User’s browser and transmitted when visiting the website.
IP address – a unique address of a device on the Internet.
2. GENERAL PROVISIONS
2.1 Use of the website https://panda.kg constitutes the User’s consent to this Policy.
2.2 If the User does not agree with the Policy, they must stop using the website.
2.3 The Operator does not verify the accuracy of the personal data provided by the User.
3. SUBJECT OF THE POLICY
3.1 The Operator undertakes not to disclose and to protect the personal data provided by the User when registering or placing an order on the website.
3.2 The data that may be processed include:
full name;
phone number and email;
delivery address.
3.3 The website collects statistics on IP addresses for technical and security purposes.
3.4 Other information (such as order history) is securely stored and not disclosed, except in cases specified in this Policy.
4. PURPOSES OF COLLECTING PERSONAL DATA
4.1 The Operator may use the User’s personal data for the following purposes:
to register and identify the User;
to contact the User (notifications, messages, inquiries);
to confirm and process orders;
to process payments;
to deliver products;
to provide customer and technical support;
to notify the User about order status;
to send newsletters, special offers, and promotions (with User’s consent);
to prevent fraud and ensure security.
5. PROCESSING AND STORAGE OF PERSONAL DATA
5.1 The Operator may perform the following with the collected personal data:
collection, recording, storage, updating, use, deletion, destruction.
5.2 Processing may be carried out with or without automated tools.
5.3 Data is stored indefinitely until the User withdraws consent or within the limits of applicable law.
5.4 Personal data may be shared with third parties (delivery services, telecom providers, etc.) solely for order fulfillment.
5.5 Personal data may be disclosed to authorized government bodies only in accordance with the laws of the Kyrgyz Republic.
5.6 In case of loss or disclosure of data, the Operator shall inform the User.
5.7 The Operator takes necessary measures to protect personal data from unauthorized access or unlawful actions.
6. RIGHTS AND OBLIGATIONS OF THE PARTIES
Operator’s rights and obligations:
request accurate personal data from the User;
continue processing data based on legal grounds even after consent is withdrawn;
define and implement sufficient security measures;
provide Users with information about their personal data upon request;
terminate data processing and delete personal data as required by law.
User’s rights:
request information about their personal data;
request correction, blocking, or deletion of data if it is outdated, inaccurate, or unlawfully collected;
withdraw consent to processing;
file complaints to supervisory authorities or courts for violations of their rights.
User’s obligations:
provide accurate personal data;
inform the Operator of any changes to their personal data.
7. LIABILITY OF THE PARTIES
7.1 The Operator is liable for any losses incurred by the User due to unlawful use of personal data, except as provided in clauses 5.2, 5.3, and 7.2 of this Policy.
7.2 The Operator is not liable for data disclosure if the data:
became public before disclosure;
was received from a third party before the Operator;
was disclosed with the User’s consent.
8. DISPUTE RESOLUTION
8.1 Prior to court proceedings, the User must submit a written claim for voluntary settlement.
8.2 The Operator must respond in writing within 30 calendar days from the date of receiving the claim.
8.3 If no agreement is reached, the dispute shall be referred to the competent court under the laws of the Kyrgyz Republic.
8.4 This Policy and the relationship between the User and the Operator are governed by the laws of the Kyrgyz Republic.
9. ADDITIONAL TERMS
9.1 The Operator has the right to amend this Privacy Policy without User consent.
9.2 The updated version takes effect upon publication on the website, unless otherwise specified.
9.3 All questions or suggestions regarding this Policy should be submitted via the contact page: https://panda.kg
9.4 Users may contact the Operator regarding personal data at: support@panda.kg