Business_lounge

Privacy Policy

This is a translation. The Russian version is the official text.

This Policy sets how the personal data of users of the website https://business-lounge.shop (the "Website") is processed and protected. The Policy takes into account Federal Law of the Russian Federation No. 152-FZ of 27.07.2006 "On Personal Data".

1. Data controller

1.1. Controller: Borisov Danil, individual entrepreneur, Kyrgyz Republic, TIN 20402200700776 (the "Controller").

1.2. Contact for personal data questions: borisovdu027@gmail.com.

2. Data subjects and personal data

2.1. The Controller processes the personal data of the Buyer and of the Passengers in the order (terms have the meaning given in the Public Offer).

2.2. Personal data:

  1. the Buyer's Contact: Telegram username, WhatsApp number, or email address;
  2. the first and last name of each Passenger in Latin letters;
  3. the gender of a Passenger, if the Buyer gives it;
  4. the IP address of the device used to place the order or to sign in to the service area of the Website.

2.3. The payment service YooKassa processes payment data (bank card number and other details). The Controller does not receive or keep this data.

3. Purposes and legal grounds

3.1. The Controller processes personal data for these purposes:

  1. to conclude and perform the contract with the Buyer: to prepare a file in the name of each Passenger, to send the Product, to replace a QR code, and to refund money;
  2. to examine the Buyer's requests and claims;
  3. to protect the Website from abuse: to limit the number of orders and sign-in attempts from one IP address.

3.2. Legal grounds: the consent of the data subject and the performance of a contract to which the data subject is a party.

3.3. The Buyer gives consent before payment by ticking the consent box on the Website. By entering Passenger data, the Buyer confirms that the Passengers agreed to give their data to the Controller.

4. Retention

4.1. The Controller keeps the order data (the Contact, and the names and gender of the Passengers) for 1 month after the order. After this period, the Website deletes the order data automatically.

4.2. IP addresses used for abuse protection are kept for no more than 24 hours.

4.3. The Controller deletes the data earlier at the request of the data subject, unless the law states otherwise.

5. Transfer of personal data

5.1. The payment service YooKassa gets the Buyer's Contact and the order amount to process the payment.

5.2. The Controller does not give the names and gender of the Passengers to third parties, including the Lounge Operator.

5.3. The Controller does not give personal data to other persons, except in cases that the law requires.

6. Rights of the data subject

6.1. The data subject can get information about the processing of their data, ask to correct, block, or delete the data, and withdraw consent.

6.2. To use these rights, the data subject writes to borisovdu027@gmail.com. The Controller replies within 7 days after receipt.

6.3. If consent is withdrawn before the order is performed, the Product cannot be delivered. In this case, the Controller refunds the money under the Refund Policy.

7. Data protection

7.1. The Controller uses legal, organisational, and technical measures to protect personal data: data transfer over HTTPS, password-only access to order data, a limit on sign-in attempts, and automatic deletion after the retention period.

8. Cookies

8.1. The Website does not set cookies on the Buyer's device and does not use analytics or advertising systems.

8.2. The YooKassa payment page works under the rules of the payment service.

9. Final provisions

9.1. The Controller can change this Policy. The new version applies from its publication on the Website.

9.2. Publication date: 05.11.2026.

Home