Personal data processing consent

Consent is given by a website visitor, an account owner, an employee of the user, a company representative, a store buyer, or any other person who submits personal data through roxy.kz forms, the account, the public storefront, checkout, payment, support or integrations.

If the user enters data of buyers, employees, counterparties or other individuals into the service, the user confirms having obtained the necessary consents and having a legal basis to transfer such data to roxy.kz.

Consent is granted to GOOSEBUMPS DIGITAL LLP for the processing of personal data for the purposes of registration, providing access to the service, operating the online store, CRM, orders, warehouse, documents, payments, delivery, integrations, support, security, plan accounting and compliance with legal requirements.

The consent also covers service notifications, access recovery, handling of requests, error diagnostics, security logging and other actions necessary for the normal operation of the platform.

The consent covers collection, recording, systematization, accumulation, storage, clarification, modification, supplementation, use, transfer, distribution within the public features of the store, depersonalization, blocking, deletion and destruction of personal data.

Processing may be performed using information systems, automated tools, manual review of requests, technical support, integrations and backups.

Personal data may be transferred to employees and contractors of the operator, payment systems, delivery services, messaging services, marketplaces, hosting providers, error analytics services, state authorities and other parties where necessary for the operation of the service, performance of the contract or compliance with the law.

When the user connects an external service, data may be transferred to that service to the extent necessary to perform the selected operation: payment, delivery, sending a message, exchange with 1C, fiscalization, upload to a marketplace or another integration.

The consent is valid until the purposes of processing are achieved, until use of the service ends, or until it is withdrawn, unless a different retention period is required to perform the contract, for accounting and tax records, document retention, incident investigation, protection of rights or compliance with the law.

Some data may be retained in backups, security logs and archives until internal retention periods or mandatory statutory periods expire.

Consent may be withdrawn by sending a request to team@roxy.kz. The request must include details that identify the applicant and the account, company or store the request relates to.

Withdrawal of consent may limit access to the service or to individual features. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal was received, and does not stop processing that is necessary to perform the contract, comply with the law, retain documents or protect the rights of the operator.

Clicking the registration button, signing in, submitting a form, placing an order, ticking the consent checkbox, paying for a plan, or continuing to use the service means that the data subject has read this consent, the privacy policy and the terms of use.

If a person does not agree with the terms of personal data processing, they must not submit data through the service or must stop using the corresponding features.