PERSONAL DATA PROCESSING POLICY

Glorioza Flower Studio Website
Last updated: November 10, 2026
This Personal Data Processing Policy (hereinafter referred to as the "Policy") sets out how personal data of users of the website https://gloriozavl.ru (hereinafter referred to as the "Website") is collected, processed, and protected.

1. Personal Data Controller
The personal data controller is Individual Entrepreneur Andrey Yuryevich Fetisov (hereinafter referred to as the "Controller").
The Controller processes personal data in accordance with Federal Law No. 152-FZ of July 27, 2006, "On Personal Data", and other applicable laws and regulations of the Russian Federation.

2. Personal Data We Process
When placing an order, completing forms, or contacting the flower studio, the Controller may process the following personal data:

• First and last name;
• Phone number;
• Email address;
• Delivery address;
• Information necessary to place and fulfil an order;
• The contents of user enquiries and messages.

When using the Website, certain technical data may also be collected and processed automatically, such as IP addresses, browser and device information, and details of activities performed on the Website, provided that such data is collected by the services used on the Website.

3. Purposes of Personal Data Processing
Personal data is processed for the following purposes:

• Placing, confirming, and fulfilling orders;
• Arranging the delivery of flowers and gifts;
• Contacting customers regarding their orders;
• Handling enquiries and requests;
• Complying with the legal requirements of the Russian Federation;
• Maintaining the operation and security of the Website.

4. Legal Grounds for Processing
Personal data is processed on the legal grounds established by the laws of the Russian Federation, including where processing is necessary for entering into and performing a contract with the user, fulfilling the Controller's legal obligations, or, where required, on the basis of the user's separate consent.

5. Sharing Personal Data
The Controller does not sell users' personal data.
Where necessary to fulfil an order, relevant personal data may be shared with third parties involved in its fulfilment, including courier services and providers of technical or information services. Only the information necessary for the relevant purpose will be shared.
Personal data may be disclosed to government authorities in cases предусмотренных by the laws of the Russian Federation.

6. Data Retention Periods
Personal data is retained for no longer than necessary to fulfil the purposes for which it was collected, unless a different retention period is required by the laws of the Russian Federation or contractual obligations.
Once the purposes of processing have been fulfilled, personal data will be deleted or destroyed unless there are other lawful grounds for its continued retention.

7. Protection of Personal Data
The Controller takes the necessary legal, organisational, and technical measures to protect personal data against unlawful or accidental access, alteration, disclosure, destruction, and other unauthorised actions.

8. User Rights
Users have the right to request information about the processing of their personal data, request its correction, blocking, or deletion in cases предусмотренных by applicable law, and withdraw any previously given consent to the processing of their personal data.
To exercise these rights, users may contact the Controller using the contact details provided on the Website.

9. Final Provisions
The Controller reserves the right to amend this Policy. The current version is always available on the Website at:
https://gloriozavl.ru/en/privacy-policy
This Policy applies to all personal data processed by the Controller in connection with the use of the Website and the placement of orders.