We respect your right to control your personal data. Below, we explain clearly what information we collect, why we need it and how to contact us about its processing.
Data Controller and Scope
This Policy establishes the main principles, purposes and conditions for the processing of personal data when using yusubov.com, including placing orders through the shopping cart, contacting us by email and submitting partnership enquiries.
Personal data is processed in accordance with Federal Law No. 152-FZ of 27 July 2006, “On Personal Data”, and other applicable regulations of the Russian Federation.
What Personal Data We Collect
The categories of data depend on how a visitor interacts with the website:
- For partnership enquiries: first and last name, company, country, business email address, selected area of cooperation, telephone number / messaging contact if voluntarily provided, and message content.
- For email enquiries: the sender’s email address, the information they provide and the content of the correspondence.
- For placing and fulfilling orders: name, email address, telephone number, delivery city, region, postal address and postal code where requested by the current WooCommerce checkout form, names and quantities of products ordered, their prices, and information on order, payment and delivery status. Once delivery arrangements have been agreed, information on the selected Ozon pickup point and any details needed to hand over the parcel may also be processed. YUSUBOV does not collect complete bank-card details through its checkout form.
- Technical information: IP address, browser and device settings, technical identifiers, cookies and information on interactions with the website, to the extent actually collected by the services in use.
The Data Controller does not request special categories of personal data or biometric data through the website forms. Please do not include information about your health, identity documents or other unnecessary personal information in free-text fields.
Purposes and Legal Grounds for Processing
- Reviewing a business enquiry: assessing a proposal, responding, negotiating and potentially entering into an agreement. The legal basis is the separate consent to the processing of a partner’s personal data given when submitting the enquiry, or another basis provided by law where applicable.
- Placing and fulfilling orders: confirming orders, contacting customers, processing payments and electronic fiscal receipts once a payment system has been connected, agreeing on pickup points, organising deliveries, handling returns and keeping mandatory records. The legal basis is Article 6(1)(5) of Federal Law No. 152-FZ (entering into and performing a contract with the customer), together with the Data Controller’s obligations under applicable law. Separate customer consent is generally not required for these necessary operations; additional information is available in the section for customers.
- Responding to enquiries: establishing contact and handling requests made at a visitor’s initiative.
- Website security and operation: diagnosing errors, preventing misuse and maintaining the website’s technical operation.
- Visitor statistics: only to the extent collected by analytics systems that have actually been enabled, and where a necessary legal basis exists.
We do not send marketing messages using customer or partner contact details collected during checkout or through partnership enquiries. If such communications are introduced, separate prior consent will be obtained and this Policy will be updated.
How Personal Data Is Processed
Processing may include collection, recording, organisation, accumulation, storage, updating, retrieval, use, transfer to persons processing data on the Data Controller’s instructions, restriction, erasure and destruction. Processing may be carried out with or without automated tools.
The Data Controller follows the principles of purpose limitation and data minimisation. Personal data submitted through an enquiry is not made publicly accessible on the website.
Services and Disclosure of Information
The website runs on Timeweb hosting in Russia, with WordPress and WooCommerce for the website, cart and ordering system. Partnership enquiries are collected using an in-house WordPress form and stored in a private area of the website. Mail.ru email is used for notifications and correspondence.
For payments through YooKassa (ЮKassa), the provider and the connected YooKassa Receipts service receive the information necessary to process payments and issue electronic fiscal receipts, within the scope of the configured integration. Customers enter their complete bank-card details in the payment provider’s interface, not in YUSUBOV’s order form.
When arranging delivery to an Ozon pickup point agreed with the customer, the information necessary about the recipient and shipment may be shared with the relevant logistics provider. Delivery is arranged only if a suitable pickup point is available and the order terms have been agreed.
Information is shared with the providers involved only to the extent required for payment, issuance of receipts, delivery and compliance with legal obligations. Third-party access is restricted to what is needed for the purposes described, on grounds established by law and subject to contractual obligations. Information is not disclosed to unrelated organisations for marketing mailings without an appropriate legal basis.
Retention Periods and Deletion
Personal data is retained no longer than necessary for the purposes of processing, unless a longer retention period is required by law. The retention period depends on the category of information: orders, correspondence, payment and accounting records, or technical information.
For partnership enquiries that do not lead to a contractual relationship, the indicative retention period is until correspondence is completed and no more than 12 months after the last substantive contact. The internal enquiry system supports automatic removal on expiry of that period; any copies in correspondence or other systems are deleted under the internal retention procedure unless further retention is required by law.
Order and delivery data is used for the duration of contract performance, the resolution of related claims and any statutory retention periods. Payment information, fiscal receipts and accounting records are kept for the mandatory periods. Once the purpose of processing has been achieved, consent has been withdrawn (where processing is based on consent and no other lawful basis applies), or other circumstances prescribed by law arise, data is deleted or anonymised in accordance with the applicable procedure.
Cookies and Analytics
The YUSUBOV website uses essential technical cookies, including those used for the WooCommerce cart, customer session, administrator sign-in and essential website security functions. Separate visitor consent is not requested for these essential cookies.
The Data Controller does not use third-party web analytics, advertising pixels or behaviour-based advertising profiling. Additional cookies for analysing visitors’ behaviour for marketing purposes or displaying targeted advertising are not used by the Data Controller. If enhanced visitor statistics, analytics or advertising tools are introduced, this Policy will be updated and consent for non-essential cookies will be obtained where required by applicable law.
When a customer uses the cart or proceeds to payment, the participating services may also use essential technical cookies according to their purposes and data-processing terms. Visitors can restrict cookies in their browser settings, but doing so may affect certain website functions.
Data Subject Rights
Data subjects may request information about the processing of their personal data, seek correction, restriction or erasure of inaccurate or unlawfully processed data, and withdraw their consent in the cases and manner provided by law.
Requests should be sent to the Data Controller at yusubov.ecom@mail.ru. Please provide enough information to identify the relevant enquiry and explain the request. The Data Controller may ask for reasonable evidence of the applicant’s authority where necessary to protect personal data.
Data subjects may also submit a complaint to the competent personal-data protection authority or apply to a court.
Security Measures
The Data Controller is required to implement appropriate legal, organisational and technical measures to protect data against unlawful access, alteration, destruction, disclosure and other unauthorised actions, taking account of the nature of processing and applicable law.
Access to enquiry data must be limited to persons who need it to carry out their duties. Access permissions, account protection, enquiry handling and data deletion must be implemented through the procedures actually in place.
Possible Cross-Border Transfers
Core order records and partnership enquiries are stored on a server in the Russian Federation. Routine export of the customer database abroad is not envisaged. International business correspondence may require a separate assessment of cross-border processing, and any legally required steps are taken before such a transfer.
Before transferring personal data across borders, the Data Controller fulfils the obligations prescribed by law, including notifying Roskomnadzor where applicable. Russian-law requirements on localising certain processing operations involving Russian citizens’ data must be observed.
Changes to This Policy
The current version is publicly available at yusubov.com/privacy. This Policy will be updated when material changes occur in the categories of data collected, purposes of processing or services used.
Current version dated 23 October 2026. Further information on the processing of customer data is provided in the section for customers, and the terms of separate consent for partnership enquiries are provided in the section for partners.