1.1. This Policy has been developed in accordance with Federal Law No. 152-FZ dated July 27, 2006 "On Personal Data" and other regulatory acts of the Russian Federation governing personal data protection and processing.

1.2. The purpose of this Policy is to ensure proper protection of user information, including personal data, from unauthorized access and disclosure.

1.3. The Administration processes users' personal data for the purposes of providing the Services, improving service quality, running marketing campaigns, and complying with Russian law.

2.1. The personal data permitted for processing under this Policy is provided by the User through registration forms on the Website and/or in the App and may include the following information:

• Last name, first name, patronymic;
• Email address;
• Delivery address;
• Passport details;
• Bank details;
• Sole proprietor tax ID;
• Other data required to provide specific Services.

2.2. The Administration may also collect and process depersonalized user data such as IP address, cookie data, browser information, access time, requested page URLs, and other technical information that does not identify the User.

3.1. The Administration processes personal data strictly for the following purposes:

• Identifying the User to provide the Services;
• Providing access to personalized Website and App resources;
• Maintaining feedback with the User, including sending notifications and requests related to use of the Services;
• Determining the User's location for security and fraud prevention purposes;
• Verifying the accuracy and completeness of the personal data provided by the User;
• Creating an account for purchases;
• Notifying the User about order status;
• Processing and receiving payments, confirming taxes or tax benefits;
• Providing effective customer and technical support;
• Sending product updates, special offers, price information, and newsletters with the User's consent;
• Conducting advertising activities with the User's consent;
• Providing access to partner websites or services of the Administration.

4.1. Personal data is processed for the period necessary to achieve the processing purposes, but no longer than 5 (five) years from the moment the User stops using the Services, unless another period is established by Russian law. After the expiration of this period, personal data must be anonymized or destroyed.

4.2. The Administration may transfer personal data to the following categories of third parties only to the extent and for the purposes required to fulfill the User's order:

• goods sellers;
• order pickers;
• courier and delivery services;
• postal operators;
• payment services and acquiring banks;
• IT companies providing hosting and technical support services.

When transferring data to other third parties, the Administration must obtain separate explicit consent from the User, except where otherwise required by Russian law.

4.3. Personal data may be transferred to authorized state authorities of the Russian Federation only on the grounds and in the manner established by law.

4.4. The Administration takes all necessary and sufficient organizational and technical measures to protect personal data, including, but not limited to:

• use of cryptographic tools;
• backup of data;
• appointment of persons responsible for organizing personal data processing;
• assessment of harm that may be caused to data subjects;
• identification of current threats to personal data security;
• establishment of access rules for personal data.

5.1. The User has the right to:

• freely decide whether to provide personal data and consent to its processing;
• update or supplement personal data if it changes;
• request clarification, blocking, or destruction of personal data if it is incomplete, outdated, or inaccurate;
• receive information about the processing of personal data;
• withdraw consent to personal data processing at any time by sending a written request to info@marketfood.online.

Withdrawal of consent results in the Administration stopping the use of the User's personal data and destroying it within 30 (thirty) calendar days from receipt of the request.

6.1. The Administration undertakes to:

• use received information only for the purposes specified in Section 3 of this Policy;
• keep confidential information secret and not disclose it without the User's prior written permission;
• take all necessary organizational and technical measures to protect personal data;
• block personal data upon the User's request during verification if inaccurate data or unlawful actions are identified.

7.1. The Administration, if it fails to fulfill its obligations, is liable for damages suffered by the User due to unlawful use of personal data in accordance with Russian law.

8.1. Before filing a lawsuit for disputes arising between the User and the Administration, it is mandatory to submit a claim (a written proposal for amicable settlement).

8.2. The recipient of the claim shall notify the claimant in writing of the results within 30 calendar days from receipt of the claim.

8.3. If no agreement is reached, the dispute shall be referred to the court at the location of the Administration in accordance with applicable Russian law.

9.1. The Administration may unilaterally amend this Policy. The new version becomes effective from the moment it is published on the Website and/or in the App. For material changes, the Administration shall notify the User at least 10 (ten) calendar days before the changes take effect.

9.2. All suggestions or questions regarding this Privacy Policy should be sent to info@marketfood.online.

10.1. The User may withdraw consent to personal data processing at any time by sending the Administration a motivated written request to info@marketfood.online. The request must include the User's last name, first name, patronymic, and email address.

10.2. The Administration undertakes to review the request and send the User a response within 30 (thirty) calendar days from the date of receipt.

10.3. Withdrawal of consent results in termination of the Services for the User, termination of all agreements with the User, deletion of the account, and destruction of personal data.

11.1. Before any cross-border transfer of personal data, the Administration shall ensure that the foreign state provides adequate protection for the rights of data subjects.

11.2. Cross-border transfer of personal data to foreign states that do not provide adequate protection may be carried out only with the data subject's written consent.

12.1. The Website and the App use cookie technology to collect depersonalized technical data about the User (source of visit, on-site behavior, preferences) to improve the Services, personalize content, and show targeted advertising.

12.2. The User may change browser settings at any time to block cookie files or be notified when they are sent. Disabling cookies may reduce the functionality of the Services.

12.3. By continuing to use the Website and/or App without changing browser cookie settings, the User agrees to their use under the terms of this Policy.