Fluxo Privacy Policy

Where not defined in the Offer, the following apply in this Policy:

• Personal data — any information relating to an identified or identifiable natural person.
• Controller — Fluxo.sale as the organisation that determines the purposes and means of processing personal data in providing the Service.
• Processor — third parties (hosting, technical contractors) that process personal data on behalf of Fluxo.sale.

Controller: ИП Соловьева С.Н., BIN 800412402822, address: Республика Казахстан, г. Алматы, ул. Тимирязева, 42.

Contact for personal data questions: hello@fluxo.sale.

The Platform processes the following categories of data:

• Tenant data: name / full name, IIN/BIN, legal and postal address, contact details, billing details; account data — email, password hash, interface language, store settings;
• store data: product catalog, images, texts (including AI-generated), storefront settings;
• store user data (to the extent Fluxo.sale receives it as a technical provider / processor on behalf of the Tenant): name, phone, email, delivery address, technical data related to Store use; the Tenant is responsible for the lawfulness of collecting this data;
• technical data: IP addresses, access logs, cookies and similar technologies, Service usage data, performance metrics.

Data is processed to:

• provide and support the Service;
• register and manage Tenant accounts;
• invoice and settle Fluxo.sale fees;
• authenticate users;
• ensure security and prevent fraud;
• moderate content and run anti-fraud checks (including automated AI checks);
• perform technical diagnostics, analytics and improve Service quality;
• comply with legal obligations and respond to lawful requests from competent authorities.

The primary legal basis for processing the Tenant’s personal data and data related to providing the Service is the Fluxo.sale Public Offer (the agreement): acceptance of the Offer includes the Tenant’s permission to process personal data to the extent and for the purposes necessary to perform the agreement and provide the Service, as set out in the Offer and this Policy.

Additionally, processing may be based on: (i) the data subject’s consent where required separately (e.g. optional analytics cookies or marketing); (ii) Fluxo.sale’s legitimate interests (security, fraud prevention, service improvement), where such interests do not override the rights and freedoms of the data subject; (iii) legal requirements.

Fluxo.sale may disclose personal data to: hosting and cloud providers; technical contractors and integrators; analytics and monitoring providers; email services; AI providers for processing product texts and images during moderation and content generation; competent public authorities upon a lawful request.

When content is sent to AI providers, only product data (texts, images) is transmitted — not customers’ personal data.

Disclosure is based on contracts with appropriate data-protection safeguards. Fluxo.sale does not disclose personal data to third parties for marketing without the data subject’s explicit consent.

Personal data is retained for as long as needed to perform the agreement and meet Fluxo.sale’s legal obligations, and for any additional periods required by law. After retention periods expire, data is deleted or anonymised unless the law requires otherwise.

Account data is retained until the account is deleted; order data is retained for the period the Tenant needs to fulfil obligations to customers and legal requirements.

Data is stored on Platform servers and protected by organisational and technical measures (access control, encryption in transit, isolation of store data, software updates and incident monitoring). Absolute protection against all risks is not possible.

Data subjects have the right to: obtain information about processing of their personal data; request access to their data and copies; request correction of inaccuracies; request deletion where provided by law; restrict or object to processing where provided by law; withdraw consent (where processing is based on consent).

Send rights requests to hello@fluxo.sale. Fluxo.sale responds within the timeframes set by law.

Suspending a store for violating the Offer does not cancel data subject rights, but does not entail a refund of amounts paid — financial consequences of suspension are governed by the Offer.

Fluxo.sale uses cookies and similar technologies to operate the Service, store preferences, run analytics and maintain security.

A consent banner is shown on the first visit. Your choice is stored in the browser (localStorage, key fluxo_cookie_consent) for up to 12 months or until browser data is cleared. Optional analytics scripts are not loaded without consent.

Details on cookie types, purposes, retention and controls are set out in the Fluxo.sale Cookies Policy.

If personal data is transferred outside the Republic of Kazakhstan, Fluxo.sale complies with applicable legal requirements and takes measures to protect data in cross-border transfers.

Fluxo.sale may amend this Policy. The current version is published on the website. For material changes, Fluxo.sale notifies Tenants and, where required, seeks consent.

For questions about personal data processing, contact hello@fluxo.sale or write to: Республика Казахстан, г. Алматы, ул. Тимирязева, 42.