Personal Data Processing Policy

1. General Provisions

1.1. This document has been developed based on the Constitution of the Russian Federation, Federal Law No. 149-FZ of July 27, 2006, "On Information, Information Technology, and Information Protection," and Federal Law No. 152-FZ of July 27, 2006, "On Personal Data," as well as taking into account the requirements of anti-money laundering legislation.

1.2. This policy sets forth the principles for working with the personal data of visitors and clients of the Buy-now.pro website.

1.3. These rules apply to all actions with personal data performed by the Operator, both with and without the use of automation.

1.4. This document is publicly available on the Operator's official website.

2. Key Terms

Personal data (PD) — any information that directly or indirectly identifies an individual (service client).

Operator — the organization that owns the Buy-now.pro service, independently determining the purposes and scope of the processed data, as well as the actions performed with it.

User — an individual who voluntarily provided their personal data when submitting an exchange request.

3. For what purposes is the data processed?

• Identification of the user.
• Review and execution of exchange requests.
• Consulting and technical support.
• Notification of exchange status, new rates, and special offers (subject to consent).
• Assessing the quality of services provided and optimizing website performance.

4. What data is collected?

• Full name.
• Email address.
• Phone number.
• Data transmitted automatically: IP address, browser and device information, cookies, time of visit.
• Additional information that the user voluntarily provides (e.g., in support correspondence).

5. How and under what conditions is data processed?

5.1. Processing is carried out exclusively with the consent of the data subject, unless otherwise provided by law.

5.2. The Operator performs the following actions: collecting, recording, organizing, accumulating, storing, clarifying, retrieving, using, transferring, depersonalizing, blocking, deleting, and destroying data.

5.3. Data is stored only as long as necessary to achieve the above purposes, unless a longer period is established by law or contract.

5.4. The Operator may engage third parties in data processing only with the user's consent, except in cases expressly permitted by federal law.

6. How is personal data protected?

The Operator applies organizational and technical measures to protect against unauthorized access, destruction, modification, copying, and dissemination of data, including:

· Antivirus protection;

· Access rights management;

· Internal control over compliance with security regulations.

7. User Rights

Each user has the right to:

· Receive information about their personal data processed by the Operator;

· Request clarification, blocking, or destruction of their data if errors or violations are discovered;

· Appeal the Operator's actions to a supervisory authority or in court.

8. Transfer of Personal Data to Other Persons

Transfer is only possible in two cases:

· With the user's written consent;

· In accordance with the procedure established by Russian law (e.g., at the request of a court or law enforcement agency).

9. Amendment Procedure

The Operator may change the terms of this Policy at any time without prior notice. Amendments will take effect upon publication of the new version on the website.

10. Contact Information

All questions related to the processing of personal data can be sent to info@buy-now.pro.