This Privacy Policy (hereinafter referred to as the "Policy") establishes the procedure for processing and protecting information regarding individuals (hereinafter referred to as the "User" / "Buyer") that may be obtained by Individual Entrepreneur Veronika Aleksandrovna Skokova (hereinafter referred to as the "Gallery" / "Operator") when using the website https://arzugallery.com/ (hereinafter referred to as the "Website").
The Website respects the Users' right to privacy and ensures the protection of their personal data in accordance with the Law of the Republic of Kazakhstan dated May 21, 2013, No. 94-V "On Personal Data and Its Protection."

1. GENERAL PROVISIONS
1.1. Using the Website, as well as filling out any feedback forms, placing orders, or reserving artworks, constitutes the User's unconditional consent to this Policy and the terms of processing their personal information specified herein.
1.2. In case of disagreement with the terms of the Policy, the User must immediately cease using the Website.

2. CATEGORIES OF PERSONAL DATA COLLECTED 
2.1. The Gallery collects and processes only the personal data necessary to provide services, process purchases, and communicate with the User:
• Full name;
• Contact phone number;
• Email address (E-mail);
• Delivery address (when arranging the delivery of artworks);
• History of inquiries and requests submitted via the Website's forms.
2.2. The Website may also automatically collect anonymized visitor data (including cookies, IP addresses, browser type, and device information) using web analytics services (Yandex.Metrika, Google Analytics, etc.) to improve the Website's performance and user experience.

3. PURPOSES OF DATA COLLECTION AND PROCESSING
The User's personal data is processed strictly for the following purposes:
• User identification for placing orders and reserving artworks;
• Communication, including sending notifications, responses to inquiries, and updates regarding order or delivery status;
• Arranging the delivery of artworks to the Buyer;
• Sending newsletters and promotional materials (only with the User's explicit consent);
• Compliance with the statutory requirements of the Republic of Kazakhstan.

4. TERMS OF DATA PROCESSING AND DISCLOSURE TO THIRD PARTIES
4.1. The Gallery ensures the confidentiality of personal data and takes all necessary organizational and technical measures to protect it from unauthorized access.
4.2. The Gallery does not transfer the User's personal data to third parties, except in the following cases:
• Transfer to courier and logistics services strictly to the extent necessary for the delivery of the ordered artwork;
• Transfer to authorized state bodies of the Republic of Kazakhstan on the grounds and in accordance with the procedure established by the legislation of the Republic of Kazakhstan.

5. DATA STORAGE AND DELETION
5.1. Personal data processing is carried out indefinitely from the moment it is provided by the User, or until the consent is revoked by the User.
5.2. The User may revoke their consent to the processing of personal data at any time by sending a written notification to the Gallery's email: vskokovaa@gmail.com with the subject line "Withdrawal of consent to personal data processing."

6. OPERATOR DETAILS