Personal Data Processing Policy

Effective date: June 18, 2026

1. General provisions

This Personal Data Processing Policy (the "Policy") sets out the procedure for processing and protecting personal data on the website https://iqraaos.ru/.

2. Data controller

Controller: Individual Entrepreneur Vorozhbyanov Evgeny Alexandrovich.
Tax ID (INN): 311111386613.
Primary State Registration Number (OGRNIP): 316312300092501.
Contact email: mail@iqraaos.ru.

3. Legal framework

The Policy is prepared in accordance with the Federal Law of the Russian Federation "On Personal Data" and other legal acts effective at the time the Policy enters into force.

4. Key definitions

For the purposes of this Policy the following terms are used: personal data, processing of personal data, personal data subject, user, etc.

5. Purposes of processing

to link payment to the user's e‑mail and provide subsequent authorization in the mobile application;
to communicate with the user regarding purchases and support;
technical and analytical support of the website.

6. Categories of personal data processed

Mandatory data: user e‑mail.
Optional: first and last name (if provided), payment information — only to the extent transmitted by the payment provider; the controller does not store full card details.
Technical data: IP address, cookies (storage: 120 minutes), aggregated/anonymized Yandex.Metrica data.

7. Legal grounds

Processing is based on the subject's consent and/or for performance of a contract and other grounds provided by law.

8. Collection, storage and deletion

Data is collected when filling the payment form and using the website. Data is retained only as long as necessary to achieve processing purposes; thereafter data is anonymized or deleted. Users may request correction, blocking or deletion by emailing mail@iqraaos.ru.

9. Third‑party transfers

Data may be transferred to payment providers, analytics services and other parties only to the extent necessary to fulfill obligations and with required security measures. Cross‑border transfers occur only in compliance with applicable law.

10. Cookies and analytics

Yandex.Metrica is used for analytics; collected data is used in anonymized form. Cookies are stored for 120 minutes. Users can disable cookies in browser settings, which may affect site functionality.

11. Security measures

The controller applies organizational and technical measures to protect data: role‑based access control, encryption in transit, antivirus protection, backups, etc.

12. Data subject rights

Subjects have the right to access processing information, request correction, blocking or deletion, withdraw consent and request portability where applicable. Requests should be sent to mail@iqraaos.ru.

13. Liability

The controller is liable for compliance with applicable personal data laws.

14. Changes to the Policy

The controller may amend the Policy; changes will be published on the website with the date of modification.

Contacts: Individual Entrepreneur Vorozhbyanov Evgeny Alexandrovich, INN 311111386613, OGRNIP 316312300092501, e‑mail: mail@iqraaos.ru.