Vostok Food Privacy Policy
What data does the store need, how is it used and how to contact us regarding its processing.
Editorial from
Who processes the data
The operator of the site https://vfood.shop is Vostok Food LLP (Vostok Food), BIN 160240015879. Phone: +7 702 266 36 50. Legal address: Republic of Kazakhstan, Almaty region, Karasai district, Irgelinsky rural district, Irgeli village, Almaty - Bishkek highway, building 686. For inquiries about data: written request to the specified legal address of the LLP; You can clarify the procedure by calling the store.
Phone number and account
WhatsApp is used to login. Before requesting the code, the user separately agrees to the processing of the number to confirm it. The number and text of the code are transmitted to the WhatsApp service through a sending service connected to the store. Number verification does not include advertising subscriptions.
If the account exists, the correct code allows access to it. If you don't have an account, a registration form opens. A new account is created only after filling out the first and last name and a separate consent to data processing. Date of birth and gender are optional. News subscription is disabled by default and can be selected separately.
The codes are valid for five minutes; The site stores a protected verification value of the code. The temporary key to complete registration is valid for ten minutes and is stored as a hash. Expired requests and keys are deleted automatically. The version and time of consent are saved, and after creating an account, the history of confirmed consents is saved.
A pre-created buyer account can also be provided with email and password login. The server stores a secure hash of the password; retrieval log and frequency limits are used to protect the input. This login provides only buyer rights and does not provide access to the store administration.
Order and contact with the buyer
The application contains name, phone number, delivery address, selected products, quantity, wishes and optional email. This information is used to coordinate and fulfill orders, process requests, and carry out mandatory accounting. Do not include bank card details, passwords or information not related to the order in the comments.
To calculate Yandex Delivery, the addresses and coordinates of the warehouse and recipient, as well as the weight of the shipment, are transmitted. The recipient's full name and telephone number, address instructions and comments on the order are transferred to Yandex Delivery when the employee prepares delivery of the agreed order. At the same time, the order number, package identifiers, their total weight and cost of goods are transmitted. The designated courier receives the information necessary for collection and delivery. To verify delivery, the store uses information received from Yandex about the courier, vehicle, delivery status and transfer code.
If the buyer pays for the order through a bank form, the card details are processed by the bank or payment service. The site does not offer to enter them in the application fields. At the current stage, the site accepts applications without online payment; connection of the payment service and the corresponding processing will be reflected in the available payment methods and the current version of the policy.
Address search, geolocation and saved addresses
When searching for an address, the city, street and house number are transferred from the store server to the Yandex Geocoder. The found location is shown on Yandex Map for verification by the buyer. Name, phone, email, shopping cart and a separate courier instructions field are not included in the search request. Do not enter this information in the address bar.
The map is downloaded directly from Yandex servers after opening the map step. Yandex receives the device's IP address and technical information necessary to download the map and the selected area. The map does not indicate a confirmed delivery zone: route availability and cost are checked separately by Yandex Delivery.
The buyer can mark the house and entrance manually on the map. The selected coordinates are sent to Yandex Geocoder to check the country; the selected point is not replaced by the center of the nearest house. Before payment, the buyer confirms that the point matches the entered address. An inaccurate search result also requires checking on the map.
The geolocation is determined only after the buyer’s consent in the form and browser permission. The point is shown on the map; when searching for the nearest address, its coordinates are transmitted to Yandex. The suggested address does not automatically replace the text entered by the buyer. There is no background tracking of movements. Instead of a geolocation, you can enter an address and select a point manually.
After logging in, you can save up to ten addresses and remove them from the list. For new saves, the address entered by the buyer, its name, instructions to the courier and dates are recorded. The coordinates and normalized response of the Yandex Geocoder are not recorded in the address book. When you select the address again, the location is searched and confirmed again. Removing from the list does not remove information from already submitted orders or fulfillment systems.
For the current calculation, these points are in the temporary cache for up to ten minutes. To prepare and safely repeat a courier request, a separate protected temporary cache is used for up to 24 hours for each entry. This geodata is not included in the permanent order database and its backup copies. After the deadline has expired, a new shipment is not automatically created: delivery requires re-approval or verification of the previous application in Yandex. Information about previously placed orders is saved according to the conditions that were in effect when they were placed.
Browser storage and technical data
The site uses a secure session cookie for login. It is valid for up to seven days; exit revokes the current server session. The shopping cart, favorites and application access keys are saved in the browser. Clearing this data removes local settings and access to the order on that device, but does not remove the retailer order record.
To protect the service, IP addresses and other technical information necessary to process requests, limit login attempts, and investigate errors are processed. Employee access is limited to their work rights. Significant actions are recorded in a log. Backups are used to restore operations.
Newsletter and recommendations
Marketing subscription is voluntary. You can turn it off in your profile or contact the store. Opting out of advertising does not close your account or cancel communications necessary to confirm your number or complete your order. The selection history is saved separately from the current subscription state.
For personalized recommendations, consent is separately requested to include category views and additions to cart. When you disable this function while saving the settings, the history of such events is deleted from the working database. Order history is saved separately. The site does not ask for advertising IDs, revenue, or hidden geolocation to build a buyer profile.
Voluntary visit analytics
Detailed browsing history is collected after separate consent in the analytics settings. Previous consent for product views and shopping cart only does not include IP, device and referral source collection. Registration and subscription to news do not automatically include detailed analytics.
Random browser and session identifiers, IP network connection, expected device type, browser and OS, referral source domain, campaign tags source/medium/campaign, open public pages, active time, scroll depth and add to cart are saved. Once a customer logs in, visits are associated with the account. IP and device type do not prove identity. Full URL parameters, search queries, form contents, passwords and private sections of the account are not recorded. The goal is to understand the sources of visits and interest in store sections.
The history is stored separately from orders for up to 90 days and can be deleted earlier if volume is limited. It is not included in regular store backups. The identifiers are in protected first-party cookies; the consent choice is stored in the browser. Details with name and IP are available to administrators; the analyst sees only summary indicators. Visits from recognized employees are excluded, including the same browser's guest history prior to the employee's login.
In "Analytics Settings" you can refuse collection and delete the history of this browser. For the client, denial of account settings deletes the associated history from all recognized browsers. Orders and data necessary for order execution are stored separately.
Yandex Metrica is connected only after a separate permission in the “Analytics Settings” in the current browser. To analyze visits to public pages, Yandex receives the IP address, technical information about the device, addresses of public pages and the domain of the referral source, and also uses its own cookies. To evaluate advertising in the first view, the Direct click identifier yclid and verified tags of a known advertising campaign utm_source, utm_medium and utm_campaign can be transmitted; the remaining URL parameters are removed. After successfully submitting an application, the fact of this action can be transmitted, without the contents of forms, contacts, contents or application number and account data. Webvisor and heat map are disabled. You can revoke consent through “Analytics Settings” at the bottom of the site: this stops further collection of Metrics in this browser. Deleting a store's browsing history does not delete data previously transferred to Yandex; their processing is governed by Yandex's privacy policy.
Separately from this history, the site counts the total number of views of public pages, including when selecting “Only necessary”. Only the day in Almaty time, the normalized page path and the number of views are saved for up to 90 days. This counter does not store IP, device, cookies, visitor, session or account IDs, advertising tags or referral source. This is not a number of unique people: reopenings can be counted again; views with consent are already included in the total counter, so these indicators cannot be added. It is impossible to remove views of a specific person from the total, since they are not associated with him. Detailed rules for storing cookies and selecting them are described in a separate document.
Where is the data located and who can access it?
The current store base is located on a server in Samara, Russia. WhatsApp may also process the message number and details outside of Kazakhstan. This policy reports the actual design and is not a substitute for compliance with the requirements for storing and transmitting personal data.
Address search, map display and delivery use Yandex services. Transfer to these services may involve processing outside of Kazakhstan. Further processing by Yandex is governed by its privacy policy.
The data is available to authorized employees and external contractors within the scope of their task; transfer to government agencies is carried out if there is a legal basis. The profile, order address and consent history are not published in the catalog, recipes or reference book.
Mobile application data
The Vostok Food application for iPhone and Android uses the same account and server vfood.shop. The login token and access keys for submitted applications are stored in secure device storage. You need them to log in, view your submissions, and safely redo pending submissions. Exit revokes the current session; Deleting an application does not itself delete server entries.
Authorized employees may take or select photos and videos to confirm order completion. The camera, selected materials and microphone are used only upon the action of the employee and after permission from the device; There is no recording in the background. These materials, including the voice in the video, are transmitted to the store server and are available to participants in the corresponding order and employees with work rights.
The deletion request contains the account ID, confirmation time, processing time and status. The processing log contains the actions of the authorized employee, the result, information about the notification and, if necessary, the basis and period for storing individual data. Only the store administrator has access to the request queue.
Correction, revocation and deletion
You can change your name and optional information in your profile; date of birth and gender - clear. For processing information, correction, withdrawal of consent, or account deletion, please contact your operator. The store may ask you to confirm ownership of the number or order so as not to disclose the data to another person.
In the application, you can start deleting without contacting support: open your profile, the “Delete account and data” section, confirm your intention and click “Request deletion”. The request is recorded for the current account; its status and processing deadline are shown in the application. The operator processes the request and reports the result to the account contacts within 30 calendar days from the date of receipt. If you do not have access to the application, please send a request to koziyonk@gmail.com. Data necessary for the fulfillment of unfinished obligations or mandatory accounting is stored to the extent and period established by law; the operator informs them of their composition, basis and shelf life.
Storage periods depend on the purpose of processing and mandatory requirements. Completion of an order does not mean immediate deletion of its entry. After the termination of the basis for storage, the information is subject to deletion or depersonalization in accordance with the procedure established by law. Backups are intended for recovery purposes and do not provide a reason to retain data indefinitely or to resume revoked processing. When contacting, the operator informs you what information is subject to deletion, what must be preserved by law, and how long the request will be completed. The current version of the policy is posted on the website; new goals that require consent are not automatically enabled due to text changes.