Rivus Privacy Policy

1. Terms and definitions

Personal data — information relating to an identified or identifiable personal data subject.

Personal data subject — an individual (user) to whom personal data relates.

Operator — the person/entity that collects, processes, and protects personal data of Platform users.

Processing of personal data — any action (operation) or set of actions performed with personal data: collection, recording, systematization, storage, modification, use, anonymization, blocking, deletion, and destruction.

Cookies — small fragments of data stored on the user’s device when visiting the Website.

2. Operator and contact details

Operator: Sole Proprietor Rivus

IIN: 871207401439

Legal address: Astana, Akmola Region, Kazakhstan, Office 8, Building 50, Tole Bi Street, Nura District

Actual address: Astana, Akmola Region, Kazakhstan, Office 8, Building 50, Tole Bi Street, Nura District

E-mail (office): r.itakhunova@rivus.kz

Support phone: +7 777 999 68 88

For matters related to personal data processing, the user may contact us using the details above.

3. What data we collect

We may collect the following categories of data:

3.1. Data provided by the user

first name and/or last name;

phone number;

email address;

delivery details (city, address, order comment);

other information voluntarily provided by the user in forms (for example, when contacting support).

3.2. Data collected automatically

IP address, device type, browser, interface language;

information about actions on the Website (pages, clicks, visit time);

technical identifiers and cookies;

session parameters and error data (for diagnostics and security).

3.3. Data that may come from third parties

payment provider data about subscription payment status (success/error/pending) without transfer of full bank card details;

data from analytics services (aggregated/anonymized metrics and events).

4. Purposes of personal data processing

We process personal data for the following purposes:

User registration and authorization (account creation, login, access recovery).

Providing Service functionality depending on role and status (Guest/Member/Seller, etc.).

Placing and managing orders (creating an order, delivery/pickup, order statuses).

Issuing, managing, and renewing membership (subscription), including processing payment events.

Communication with the user: service notifications, support replies, informing about statuses and changes.

Security: fraud prevention, account protection, activity auditing.

Improving Service quality: analytics, testing, bug fixes, usability improvements.

5. Legal grounds for processing

Personal data is processed on the following grounds:

user consent to personal data processing;

performance of a contract (user agreement/offer) when using the Service, purchasing a subscription and/or placing an order;

fulfillment of obligations provided by the laws of the Republic of Kazakhstan;

legitimate interest of the Operator — ensuring security, preventing abuse, improving the Service (subject to balancing the interests and rights of the user).

6. Conditions and methods of processing

6.1. We process personal data using automation tools and/or without them.

6.2. We take reasonable organizational and technical measures to protect data from unauthorized access, modification, disclosure, or destruction.

6.3. Access to personal data is granted only to authorized persons who need it to perform their job duties.

7. Transfer of personal data to third parties

We may transfer personal data to third parties only to the extent necessary for processing purposes, including:

payment providers — to process subscription payments and confirm payment status;

suppliers/sellers — data required to fulfill an order (e.g., name, phone, delivery address) within the scope of the placed order;

delivery/logistics partners — when delivery is required;

hosting/infrastructure providers — to host and support the Service;

analytics services — primarily in anonymized form.

We do not sell or share users’ personal data with third parties for their marketing purposes without the user’s separate consent.

8. Cross-border transfer

When using cloud infrastructure and third-party services (e.g., analytics, mailings, hosting), personal data may be processed on servers located outside the Republic of Kazakhstan. In such cases, we ensure compliance with legal requirements and apply reasonable security measures.

9. Storage of personal data

9.1. We store personal data no longer than necessary for processing purposes or within the timeframes set by law.

9.2. Storage periods may depend on:

account activity;

existing obligations (orders, subscription);

accounting/tax record-keeping requirements.

9.3. Upon achieving processing purposes or upon withdrawal of consent (if there are no other grounds for processing), data is subject to deletion or anonymization.

10. User rights

The user has the right to:

receive information about their personal data and how it is processed;

request correction (update), blocking, or deletion of data if it is incomplete, outdated, inaccurate, or processed in violation of the law;

withdraw consent to personal data processing (where processing is based on consent);

limit the use of cookies (via browser settings);

file a complaint with the authorized personal data protection authority of the Republic of Kazakhstan.

Requests should be sent to: r.itakhunova@rivus.kz.

11. Cookies and analytics

11.1. We use cookies and similar technologies for:

proper operation of the Website;

saving user preferences;

ensuring security;

analyzing user behavior and improving the Service.

11.2. The user may disable cookies in browser settings. In this case, certain Website features may not work properly.

12. Personal data security

We apply security measures including, but not limited to:

HTTPS / encryption of data transmission;

access control and role-based permissions;

storing passwords as cryptographic hashes;

event logs and monitoring suspicious activity;

backups and recovery procedures.

13. Notifications and communications

We may send service notifications to the user (about login, changes in subscription/order status, contact verification). Such messages are necessary for operating the Service.

Marketing mailings (if any) are sent only with the user’s separate consent and can be unsubscribed from at any time.

14. Policy changes

We may periodically update this Policy. The new version enters into force from the date it is published on the Website unless otherwise specified.

We recommend users regularly review the current version of the Policy.

15. Details

Sole Proprietor: Rivus

IIN: 871207401439

Legal address: Astana, Akmola Region, Kazakhstan, Office 8, Building 50, Tole Bi Street, Nura District

Actual address: Astana, Akmola Region, Kazakhstan, Office 8, Building 50, Tole Bi Street, Nura District

E-mail: r.itakhunova@rivus.kz

Support phone: +7 777 999 68 88