PRIVACY AND PERSONAL DATA PROCESSING POLICY
Decorika online shop
Version dated 9 October 2026
1. GENERAL PROVISIONS
1.1. This Policy governs the collection, processing, storage, use, transfer and protection of personal data of users of https://decorika.kz (the “Website”).
1.2. The personal data operator is SILENT AROMA LLP, trading as Decorika (the “Operator”).
1.3. The Policy is prepared under Kazakhstan law, including the laws on Personal Data and Their Protection, Informatization and other applicable laws and regulations.
1.4. The Policy applies to visitors, buyers, order recipients and others interacting with the Operator.
1.5. Personal data is processed on a lawful basis, including consent where required. Merely visiting the Website does not constitute unconditional consent to all processing.
1.6. The Operator may amend this Policy. The current version is published on the Website, and fresh consent is obtained where necessary.
2. CATEGORIES OF PERSONAL DATA
2.1. The Operator may process:
- first and last name, phone number and email;
- delivery address and recipient details;
- order contents, cost, status and history;
- enquiries, messages and reviews;
- IP address, device, browser and operating-system details;
- cookies, technical identifiers and event logs;
- visits, Website activity and referral sources;
- other voluntarily provided information needed for lawful processing purposes.
2.2. Collection is limited to what is necessary for the stated purposes; excessive information is not requested.
2.3. The Operator does not intend to collect special categories of personal data unrelated to the online shop.
2.4. Where an independent payment provider processes card details and security codes directly, the Operator does not receive or store those full details.
3. PURPOSES OF PROCESSING
3.1. Personal data is processed to:
- place, confirm and fulfil orders;
- arrange payment, delivery and returns;
- contact customers and handle enquiries;
- meet tax, accounting and other legal obligations;
- maintain Website security and operation;
- prevent fraud and unlawful activity;
- analyse traffic and improve service;
- conduct marketing with the required consent;
- protect the Operator’s lawful rights and interests.
3.2. Use for purposes incompatible with those originally stated requires a separate lawful basis.
3.3. Placing an order does not automatically consent to advertising messages.
4. PROCESSING AND PROTECTION
4.1. Processing may be automated or manual and includes collection, recording, storage, updating, use, transfer, blocking and deletion.
4.2. Only authorized persons have access, within their duties.
4.3. The Operator may engage maintenance and processing contractors in compliance with law.
4.4. The Operator uses necessary organizational and technical safeguards, including access controls, secure connections, backups and security checks.
4.5. The Operator cannot guarantee completely invulnerable systems but complies with mandatory data-protection requirements.
5. SHARING WITH THIRD PARTIES
5.1. To achieve lawful purposes, necessary data may be shared with:
- delivery and logistics companies;
- payment organizations;
- hosting and software providers;
- technical contractors and accounting services;
- analytics services where a lawful basis exists;
- state bodies in cases prescribed by law.
5.2. Transfers are limited to what the particular purpose requires and comply with law.
5.3. Independent recipients are responsible for their own unlawful acts. The Operator is not liable for those acts unless the law imposes liability.
5.4. The Operator does not sell Users’ personal data to third parties.
6. COOKIES AND ANALYTICS
6.1. The Website may use cookies for the basket, preferences, security and correct interface operation.
6.2. Google Analytics 4, Yandex Metrica and similar services may be used to analyse traffic.
6.3. Optional analytics and advertising technologies are used in accordance with law, including obtaining consent where required.
6.4. Users can restrict cookies through browser and available Website settings. Disabling essential cookies may affect some features.
6.5. Independent analytics services may process data under their own policies, without removing the Operator’s legal duties.
7. DATA RETENTION
7.1. Data is kept for as long as necessary for lawful purposes or as required by law.
7.2. Personal data storage complies with Kazakhstan’s database-localization requirements.
7.3. Cross-border transfers are permitted only in compliance with applicable legal requirements.
7.4. Once lawful grounds cease, data is deleted or otherwise handled as prescribed by law within the required periods.
8. USER RIGHTS
8.1. A data subject may:
- obtain processing information provided by law;
- request correction of inaccurate data;
- request blocking or deletion on lawful grounds;
- withdraw consent in the prescribed manner;
- apply to authorized bodies and courts.
8.2. Withdrawal does not prevent processing required by law or supported by another lawful basis.
8.3. Requests are sent using the Operator’s contact details and reviewed within statutory periods.
8.4. The Operator may verify the requester’s authority to prevent unlawful disclosure.
9. USER OBLIGATIONS
9.1. Users must provide accurate information and avoid actions that breach the law or Website security.
9.2. Users must have a lawful basis for providing another person’s data, including a gift recipient’s.
9.3. Users bear statutory liability for consequences of knowingly providing false data through their own fault.
9.4. These terms do not restrict lawful User rights or remove the Operator’s duties.
10. INFORMATION SECURITY
10.1. The Operator takes necessary steps to prevent unlawful access, loss, alteration and disclosure of personal data.
10.2. Measures depend on the data, technical infrastructure, risks and legal requirements.
10.3. The Operator cannot guarantee the complete absence of cyberthreats, failures or unlawful third-party acts.
10.4. When incidents are identified, the Operator takes legally required remedial and notification measures.
11. LIMITATION OF LIABILITY
11.1. The Operator’s liability is determined by Kazakhstan law and limited only as permitted by it.
11.2. The Operator is not liable for consequences directly caused by:
- knowingly false information supplied by a User;
- unlawful User or independent third-party acts for which the Operator is not legally liable;
- a User’s own disclosure of confidential information;
- failures of external services or telecom providers outside the Operator’s control where no liability grounds exist;
- force majeure where statutory conditions for exemption are met.
11.3. The Operator gives no additional guarantee of uninterrupted operation or complete protection from all cyberthreats.
11.4. The Operator is not responsible for the independent activities of linked sites except as provided by law.
11.5. Nothing in this Policy excludes liability for the Operator’s unlawful acts, breaches of mandatory data-protection requirements or other liability that cannot legally be excluded.
11.6. Invalidity of one provision does not affect the remaining provisions.
12. DISPUTE RESOLUTION
12.1. Enquiries and claims are sent to the Operator using the listed contact details.
12.2. The parties may resolve disagreements by negotiation.
12.3. If unresolved, disputes are considered by a competent court or authorized body under Kazakhstan law.
12.4. This Policy does not restrict the User’s lawful right to judicial or administrative protection.
13. OPERATOR DETAILS
Legal entity: SILENT AROMA LLP
Brand: Decorika
Location: Astana, Republic of Kazakhstan
Business identification number: 260140025813
Registered address: 010000, ASTANA, ESIL DISTRICT, ALIKHAN BOKEIKHAN ST., BUILDING 3B, NON-RESIDENTIAL UNIT 181
Email: [email protected]
Phone: +77474349192
Website: https://decorika.kz
14. FINAL PROVISIONS
14.1. Unless otherwise stated, the Policy applies from publication on the Website.
14.2. Matters not covered by this Policy are governed by Kazakhstan law.
14.3. Mandatory legal provisions prevail over conflicting Policy terms.
14.4. The Policy does not replace separate consents, the Public Offer or other legally required documents.
14.5. The current Policy is published at https://decorika.kz.
Shop enquiries
Your name, phone, address, order contents and comment are stored on Decorika’s server to process the request. The shop owner has access. Contact the workshop to correct or delete data.