Personal data processing policy
Last updated: 12 June 2026
This Personal Data Processing Policy (the “Policy”) is drawn up in accordance with Russian Federal Law No. 152-FZ of 27 July 2006 “On Personal Data” and defines how personal data is processed and protected at the hindibindi.ru online store (the “Site”).
The personal data operator is a sole proprietor whose details are published on the Contacts page of the Site (the “Operator”).
1. Definitions
Personal data means any information relating directly or indirectly to an identified or identifiable natural person (the data subject).
Processing means any operation performed on personal data: collection, recording, organization, accumulation, storage, updating, retrieval, use, transfer, anonymization, blocking, deletion, destruction.
2. Data we process
- first and last name;
- phone number;
- email address;
- order delivery address;
- order and inquiry history;
- Telegram identifier (if voluntarily linked);
- session technical data: IP address, cookies, browser information.
3. Legal grounds
- the sale contract concluded when an order is placed (Art. 6(1)(5) of Law 152-FZ);
- the data subject's consent given at registration, checkout or notification opt-in;
- Russian accounting and tax legislation.
4. Purposes of processing
- concluding and fulfilling the sale contract: receiving, assembling and delivering orders;
- order status notifications via the selected channels (email, Telegram);
- maintaining the customer account area;
- handling inquiries and claims;
- fulfilling obligations under Russian law.
5. Processing terms
Processing is automated. Data is stored on servers located in the Russian Federation in line with the localization requirement (Art. 18(5) of Law 152-FZ).
Only authorized employees of the Operator bound by confidentiality have access to the data. Data is shared with third parties only to fulfil the contract: courier and postal services receive the recipient's name, phone number and delivery address.
Retention: data is processed until the purposes are achieved or consent is withdrawn. Order data is kept for the periods required by Russian tax and accounting law.
6. Data subject rights
The data subject has the right to:
- receive information about the processing of their personal data;
- demand correction, blocking or destruction of incomplete, outdated, inaccurate or unlawfully obtained data;
- withdraw consent to processing by sending a request to the Operator;
- appeal the Operator's actions or inaction to Roskomnadzor or in court.
7. Protection measures
- encrypted connection between the browser and the Site (HTTPS/TLS);
- passwords stored as cryptographic hashes;
- staff access control and action logging;
- regular server software updates;
- data backups.
8. Requests
Requests related to personal data processing (including consent withdrawal and data deletion) should be sent to the Operator's email address listed on the Contacts page. A response is provided within 10 business days of receiving the request.
The Operator may amend this Policy. The current version is always available on this page.
















