We collect only the data necessary to fulfill our obligations under the Commission Agreement (Terms & Conditions) and to organize international logistics:

• Identification Data: Full Name, passport details, and Tax ID (IIN/TIN) (strictly for the purposes of customs declaration for export/import).
• Contact Data: Delivery address, phone number, email.
• Financial Data: Order history, duty payment status (DDP). We do not store full bank card data (PAN/CVV); they are processed by our acquiring partners (PCI DSS Level 1).
• Technical Data and Anti-Fraud: IP address, device fingerprint, approximate location data (e.g., derived from IP/network parameters) used for anti-fraud; no precise location tracking is performed without separate consent (where applicable). This data is used to detect suspicious transactions and prevent fraud.

We use your data for the following specific purposes:

• Execution of Buying Agent Mandate: Order processing, interaction with suppliers, and export organization are carried out acting on the direct instruction of the User.
• Customs Representation (Crucial): The Importer of Record designation and the allocation of customs/tax responsibilities are defined in the Terms & Conditions and displayed at checkout; the role shown at checkout applies for customs formalities and related data transfers.
• Logistics: Issuing Air Waybills (AWB) and handing over cargo to courier services.
• Security (Risk Management): Analyzing transactions for fraud protection and compliance with sanctions restrictions (Sanctions Screening).
• Marketing: Personalized offers (only with your consent).

Due to the architecture of our platform (Hybrid Model), your data is subject to cross-border transfer:

• Partner Status: Cross-border transfers are made to authorized commercial agents and logistics partners (Data Processors) acting under service agreements.
• Legal Basis: Performance of the contract. Without transferring data to Logistics Partners and Export Agents, we will not be able to purchase the goods and process the export.
• Safeguards: Data transfers are secured by the use of Standard Contractual Clauses (SCCs) and strict confidentiality obligations.

We disclose data strictly to a defined circle of persons participating in the 5PL supply chain:

• Role and Rights: Logistics partners, export agents, and delivery operators receive data as processors under contract with A4Y KZ and process it only on A4Y KZ instructions for order fulfillment purposes.
• Logistics Partners & Agents: For cargo acceptance, consolidation, and export clearance.
• Logistics Operators: (DHL, FedEx, VNPost, CDEK and local couriers) — only data necessary for delivery (Full Name, Address, Phone).
• Government Authorities: Customs services (of Vietnam and the destination country) — for border crossing. Tax authorities — upon official request.

You have the right to:

• Request a report on what data of yours we store ("Right of Access").
• Demand correction of errors in data (e.g., for customs).
• Demand deletion of the account ("Right to Erasure"), except for data we are obliged to keep by law (e.g., transaction history for tax reporting — 5 years).
• Withdraw consent for marketing.To exercise your rights, please write to us at dpo@a4y.kz.

We use encryption, role-based access control (RBAC) and regular security audits. Data Retention Periods:

• order, payment, customs, and tax records — 5 (five) years;
• account data — account lifetime plus up to 12 months;
• anti-fraud and log data — up to 24 months or longer where required by investigation, dispute, or regulator request.

• Strictly Necessary: Ensure login to the Personal Account, payment security, and Cart operation. Disabling them will make placing an order impossible.
• Performance: Help us understand how users use the site Google Analytics (where enabled — only with user consent where required by law). Where cross-border transfers occur, contractual and technical safeguards apply (e.g., SCCs/equivalent safeguards, where applicable).
• Functional: Remember the selected currency and delivery country (for correct DDP price calculation).
• Targeting: Used to show relevant advertising.

You can configure your preferences via the banner on the site or in your browser settings. Blocking "Strictly Necessary" cookies may lead to site malfunctions.

Pixels and trackers of third parties (payment systems, social networks) may be used on the site. We do not control this data directly; please refer to the policies of the respective services.