Privacy Policy

1. Who We Are

This Privacy Policy explains how Infini collects, uses, stores, transfers, and protects personal data when you use our website, create an account, place an order, contact us, or interact with our services.

Limited Liability Partnership 'Shahishifa KZ', BIN: 180140023215;

2. Legal Basis

This Policy is prepared with reference to the Law of the Republic of Kazakhstan “On Personal Data and their Protection” dated 21 May 2013 No. 94-V, the Law of the Republic of Kazakhstan “On Protection of Consumer Rights”, and other applicable laws of the Republic of Kazakhstan.

By creating an account, submitting checkout information, uploading a profile image, writing a review, or otherwise providing data to us, you consent to the collection and processing of your personal data for the purposes described in this Policy, unless another legal basis applies under Kazakhstan law.

3. Personal Data We Collect

Account data: name, email address, phone number, password-authentication identifiers, profile photo, preferred language, account status, and user role.

Order and delivery data: cart items, order history, delivery address, city, postal code, recipient name, phone number, WhatsApp/contact details, payment method, payment status, order status, and customer support messages.

Review data: product reviewed, rating, review text, account identifier, display name generated from your account data, and date of submission.

Technical data: IP address, browser and device information, cookies or similar technologies, logs, security events, and approximate usage information required to operate and protect the website.

4. Why We Use Personal Data

We process personal data only for specific, lawful, and reasonable purposes, including creating and maintaining accounts, processing orders, arranging delivery, providing support, managing returns, preventing fraud or abuse, displaying product reviews, improving the storefront, complying with accounting, tax, consumer-protection, security, and other legal obligations.

We do not sell personal data. We do not use personal data for unrelated purposes without a lawful basis or your consent where consent is required.

5. Storage and Localization

Kazakhstan law requires personal data databases to be stored in accordance with applicable Kazakhstan requirements. Infini is responsible for configuring its systems, vendors, backups, and operational processes so that personal data is stored and protected as required by Kazakhstan law.

6. Sharing and Processors

We may share personal data with service providers that help us operate the storefront, authenticate users, store data, host files, process payments, deliver orders, provide analytics, maintain security, and provide customer support.

Service providers may process personal data only for the purposes instructed by Infini and must use appropriate confidentiality, security, and data-protection measures.

We may disclose personal data where required by law, court order, government authority, consumer-protection procedure, fraud investigation, or to protect the rights, property, and safety of Infini, customers, or others.

7. Cross-Border Transfers

If personal data is transferred or accessed outside Kazakhstan, Infini will do so only where permitted by Kazakhstan law and with appropriate safeguards, including contractual, technical, and organizational measures.

Some technology providers may process or access data from other jurisdictions. Review vendor configurations and processor agreements before publishing this Policy.

8. Security

We use organizational and technical measures designed to protect personal data against unauthorized access, alteration, disclosure, loss, destruction, or misuse. These measures include access controls, authentication, restricted administrative permissions, data rules, and secure hosting practices.

No online service can guarantee absolute security. Customers should keep passwords confidential and contact us immediately if they believe their account has been compromised.

9. Retention

We keep personal data for as long as necessary to fulfill the purposes described in this Policy, including order fulfillment, warranty, return, tax, accounting, legal, fraud-prevention, and dispute-resolution purposes.

When personal data is no longer needed and no legal basis for retention remains, we will delete, anonymize, or restrict it in accordance with applicable law and technical feasibility.

10. Your Rights

Under Kazakhstan personal data law, you may request information about your personal data, access to it, correction of inaccurate or incomplete data, withdrawal of consent where processing is based on consent, blocking or deletion where legally required, and information about third parties that receive your data where applicable.

To exercise these rights, contact us using the details below. We may need to verify your identity before responding.

11. Children

The storefront is intended for adults or persons using the site with consent of a parent or legal representative. We do not knowingly collect children’s personal data without the required consent.

12. Changes

We may update this Policy from time to time. The updated version will be posted on this page with a new effective date. Material changes may be communicated through the website or by other reasonable means.

13. Contact

For privacy requests, account questions, or data-protection inquiries, contact Infini at support@infini.com. Replace this email with the official legal contact before publication if different.