Login
menu
close
contacts
We’re always here to help you
Email: help@yookarma.ru
Phone: +7 (991) 111-27-12
Privacy Policy for Personal Data Processing

Privacy Policy for Personal Data Processing

Privacy Policy of the "UKarma" Website

1. General Provisions

1.1. This Personal Data Processing Policy (hereinafter referred to as the "Policy") applies to the website yookarma.ru (hereinafter referred to as the "Site").
1.2. The operator of personal data is an individual, Alexey Sergeevich Lozhkin (TIN — 262518524138, status "self-employed," registered as a taxpayer on professional income), email: help@yookarma.com, phone: +7 (991) 111-27-12 (hereinafter referred to as the "Operator").
1.3. The Policy is developed in accordance with the requirements of Federal Law No. 152-FZ dated July 27, 2006, "On Personal Data" (hereinafter referred to as "152-FZ") and other regulatory acts of the Russian Federation, as well as recommendations from authorized bodies (Roskomnadzor).
1.4. The Operator independently organizes all processes of collection, storage, processing, and protection of personal data without involving hired employees: all necessary technical operations with the data are performed personally by the Operator.
1.5. The Policy applies to all information that the Operator may obtain about visitors to the Site and users of services on yookarma.ru.

2. Basic Concepts

2.1. Персональные данные (ПД) — любая информация, относящаяся прямо или косвенно к определённому или определяемому физическому лицу (субъекту персональных данных).
2.2. Обработка персональных данных — любое действие (операция) или совокупность действий, совершаемых с использованием средств автоматизации или без них, с использованием ПД: сбор, запись, систематизация, накопление, хранение, уточнение (обновление, изменение), извлечение, использование, передача, распределение, обезличивание, блокирование, удаление, уничтожение.
2.3. Оператор — лицо, самостоятельно организующее и осуществляющее обработку ПД. В рамках настоящей Политики таким лицом является Ложкин Алексей Сергеевич, самозанятый.
2.4. Субъект персональных данных — физическое лицо, к которому относятся ПД.
2.5. Автоматизированная обработка ПД — обработка ПД с использованием средств вычислительной техники.
2.6. Cookie — текстовые файлы небольшого объёма, которые веб-сайт размещает в браузере пользователя для хранения информации об идентификаторе сессии, настройках интерфейса, статистических данных и т. д.
2.7. Трансграничная передача ПД — передача ПД на территорию иностранного государства иностранному органу, физическому или юридическому лицу.

3. Operator's Details and Status

  • Status: Individual, self-employed (professional income tax).
  • Full Name: Lozhkin Alexey Sergeevich
  • Taxpayer ID (INN): 262518524138
  • Email: help@yookarma.com
  • Phone: +7 (991) 111-27-12
  • Mailing Address: Stavropol Krai, Essentuki, Pyatigorskaya St., 121, 390027

The Operator independently carries out all procedures related to the processing of personal data (collection, storage, access, protection). In cases of technical necessity, third-party contractors may provide hosting and server maintenance services; however, access to personal data is granted only to the Operator and authorized data center employees, limited to the minimum extent necessary to ensure the stable operation of the Website.

4. Purposes and Legal Bases for Processing Personal Data

4.1. Purposes of Personal Data Processing

  • 4.1.1. Registration and granting access to the services and materials of the Site.
  • 4.1.2. Conclusion, execution, and termination of a civil contract for the provision of services (if necessary).
  • 4.1.3. Informing the user about news, updates, and special offers via email or SMS newsletters (only with separate consent).
  • 4.1.4. Processing requests through feedback forms, chatbots, and other communication channels.
  • 4.1.5. Collecting statistics and analyzing visits (via Yandex.Metrica, Google Analytics) to improve the quality of the Site's operation.
  • 4.1.6. Providing feedback and informing the user about the status of their requests or applications.

4.2. Legal grounds for processing personal data

  • 4.2.1. Consent of the Personal Data Subject (Clause 1, Article 6 of Federal Law No. 152-FZ). The User provides consent to the processing of their personal data by independently checking a box in the Site's forms with the following wording:
  • "By clicking the 'Submit' button, I consent to the processing of my personal data in accordance with the Personal Data Processing Policy of yookarma.ru."
  • 4.2.2. Necessity for Contract Performance (Clause 2, Article 6 of Federal Law No. 152-FZ). Processing of personal data may be required for the conclusion and execution of a contract between the Operator and the User (e.g., when paying for services).
  • 4.2.3. Legal Requirement (Clauses 2–11, Part 1, Article 6 of Federal Law No. 152-FZ). Provision of personal data may be required to comply with lawful requests from government authorities (court, law enforcement agencies).
  • 4.2.4. Optional Collection of Anonymized Technical Data (IP address, cookies, browser information, etc.) is carried out without separate consent, as it is necessary for the Site's operation and traffic analysis (Part 2, Article 10 of Federal Law No. 152-FZ).

5. List and Categories of Processed Personal Data

5.1. Personal data provided by the user independently:

  • Last name, first name, patronymic (during registration or form filling).
  • Email address.
  • Mobile phone number.
  • Mailing address (if provided when placing an order or application).
  • Date of birth (for participation in contests, promotions, webinars).
Important: passport data, health information, religious beliefs, and other special (sensitive) categories of personal data are not requested or processed by the Operator.

5.2. Automatically collected technical data:

  • User's IP address.
  • Cookies and other information transmitted within an HTTP session (user agent, access time, page URL, referrer, etc.).
  • Information from internet analytics services (Yandex.Metrica, Google Analytics): anonymized data on traffic sources, geographic "area" (region), device type, behavior on the site, demographic and interest characteristics (if available), provided they are available in anonymized form.

5.3. Special (sensitive) categories of personal data

  • The operator does not process information about racial or ethnic origin, political views, religious beliefs, health status, sexual life, etc., as such data is not required for the purposes of the Website's operation.

6. Retention Periods and Procedure for Destruction (Anonymization) of Personal Data

6.1. The operator retains personal data no longer than necessary to achieve the purposes of their processing (Part 3, Article 5 of Federal Law No. 152-FZ). Approximate retention periods:

  • Contact details (full name, email, phone number): up to 3 years from the date of last interaction (for customer databases and mailing lists).
  • Contract data (for paid services): up to 5 years from the date of full fulfillment of contractual obligations (or another period specified by the contract or legislation).
  • Technical data (IP address, cookies, server logs): up to 180 days from the date of collection, unless otherwise specified by service rules (e.g., Yandex.Metrica retains data for up to 25 months).
  • Other data: no longer than 5 years, unless specific legal requirements apply.

6.2. Destruction (anonymization) of personal data:

  • Upon achieving the processing objectives or at the request of the data subject, the Operator ceases processing and anonymizes or destroys the relevant data within 30 calendar days.
  • Anonymization is carried out by removing all identifiers from the databases that allow the identification of the data subject, and converting the data into a form where it is impossible to restore the connection to a specific individual.

6.3. Withdrawal of Consent:

  • Upon withdrawal of consent (application sent to email help@yookarma.com with the subject "Withdrawal of Consent"), the Operator deletes all personal data not required for mandatory storage by law within 30 calendar days. After this, any further mailing and use of such data is discontinued.

7. Measures to Ensure the Security of Personal Data

Since the Operator works without hired employees, all measures to protect personal data are carried out personally by them:

7.1. Technical Measures:

  • Storing personal data on a secure hosting, with physical servers located in the Russian Federation and certified by FSTEC/FSB.
  • Encrypting data transmission channels using HTTPS (current TLS).
  • Regular database backups (backup) with encrypted storage of backup copies.
  • Access to databases is password-protected, known only to the Operator.
  • Installation and regular updates of antivirus software and a firewall on the server.

7.2. Organizational measures:

  • The Operator does not share passwords or access with third parties.
  • Any local copies of personal data (CSV, XLS, printouts) are stored in encrypted form on the Operator's password-protected computer.
  • If it is necessary to involve contractors (e.g., hosting technical support) to resolve purely technical issues, access to personal data databases is not provided: contractors have access only to the servers themselves, not to the database contents encrypted with the Operator's own key.

7.3. Actions in case of incidents:

  • If the Operator identifies a fact of leakage or unauthorized access to personal data, they report it to the authorized body (Roskomnadzor) and the affected data subjects no later than 72 hours after detecting the incident.
  • The Operator promptly eliminates the cause of the leakage, analyzes the circumstances, and records the investigation results for reporting to Roskomnadzor.

8. Categories of Third Parties with Access to Personal Data

8.1. The Operator may engage third-party contractors to ensure the operation of the Site, but only to the extent necessary for performing specific technical functions:

  • Hosting provider and data center where the Site's servers are located (have access to encrypted databases if required for hardware support).
  • SMTP providers (email services) for sending email newsletters and notifications.
  • Payment services (when providing paid services): only the minimally necessary data for payment is transmitted (e.g., email and amount).
  • Internet analytics services (Yandex.Metrica, Google Analytics): receive only anonymized technical session parameters (cookies, time spent on pages, geographic "region" at the regional level).

8.2. All listed contractors process personal data exclusively on behalf of the Operator, based on concluded agreements (or user agreements with the respective services), and are obligated to maintain confidentiality, not disclose or use the obtained data for other purposes. Upon completion of services, contractors must destroy all copies of personal data received during the work.

9. Cross-border transfer of personal data

9.1. When using internet analytics services (Yandex.Metrica, Google Analytics), anonymized technical data (cookies, IP address in encrypted or hashed form, information about behavior on the site) is transmitted to servers located outside the Russian Federation (EU countries, USA).
9.2. By accepting this Policy, the User expresses their consent to such cross-border transfer of personal data (Part 5, Article 18 of Federal Law No. 152-FZ).
9.3. No other cross-border transfer of personal data is carried out.

10. Cookies

10.1. The site uses the following categories of cookies:

  • Technical (mandatory): maintaining user sessions and basic functionality.
  • Analytical: collecting anonymized data on behavior (Yandex.Metrica, Google Analytics) for statistics and interface improvement.
  • Advertising (marketing): targeted advertising and remarketing (Yandex.Direct, Google Ads), without linking to personal contacts.
  • Functional: remembering user preferences (interface language, theme).

10.2. Purposes of using cookies:

  • Ensuring the correct operation of the Site (sessions, authorization, storage of settings).
  • Collecting statistical information about visits and behavior on the site.
  • Conducting A/B tests to improve content and interface.
  • Personalizing advertising campaigns and sending relevant offers.

10.3. Cookie Management:

  • The user can block or delete cookies by changing browser settings (for example, in Google Chrome: "Settings" → "Privacy and security" → "Cookies and other site data" → "Block all cookies" or "Block third-party cookies").
  • Disabling cookies may result in incorrect operation of certain sections of the Site.
  • By continuing to use the Site, the user confirms consent to the use of cookies in accordance with this Policy (clause 4, article 9 of Federal Law No. 152-FZ).

11. Rights of Personal Data Subjects

11.1. The Personal Data Subject has the right to:

  • 11.1.1. Obtain confirmation of the processing of their personal data by the Operator.
  • 11.1.2. Request access to their personal data (in the form of a copy).
  • 11.1.3. Demand clarification, blocking, or deletion of personal data if they are incomplete, outdated, inaccurate, obtained in violation of the law, or not required for the stated purposes.
  • 11.1.4. Set a condition of prior consent to the processing of personal data for the purpose of promoting goods and services (Article 24 of Federal Law No. 152-FZ).
  • 11.1.5. Withdraw their consent to the processing of personal data in whole or in part (by sending a corresponding statement via email).
  • 11.1.6. Appeal the actions (or inaction) of the Operator and/or third parties to the authorized body (Roskomnadzor, 11 Ordzhonikidze St., Office 600, Moscow; website https://rkn.gov.ru) or in court (Article 21 of Federal Law No. 152-FZ).
  • 11.1.7. Demand compensation for damages caused by unlawful processing of personal data (Article 23 of Federal Law No. 152-FZ).

11.2. Procedure for filing a request:

  • A free-form request (including full name, contact email, and a list of requested actions: clarification, blocking, deletion, access) should be sent via email to: help@yookarma.com or by mail to:
  • Stavropol Krai, Essentuki, Pyatigorskaya St., 121, 390027.
  • The operator reviews data subject requests within 30 calendar days from the date of receipt (Article 19 of Federal Law No. 152). In exceptional cases, the deadline may be extended to 60 calendar days with prior notification to the data subject.

12. Procedure for Obtaining and Withdrawing Consent

12.1. The user provides voluntary and informed consent to the processing of their personal data by checking a box with the text:

"By clicking the 'Submit' button, I consent to the processing of my personal data in accordance with the Personal Data Processing Policy at yookarma.ru."
12.2. If separate consent is required for processing special categories of personal data (if such data is ever requested), a separate consent form will be used; however, such data is not currently being collected.
12.3. Withdrawal of consent is carried out by sending a written request to the email help@yookarma.com with the subject line "Withdrawal of Consent." Upon receiving the request, the Operator ceases processing and deletes (or anonymizes) all personal data not subject to mandatory legal retention within 30 calendar days.

13. Liability of the Parties

13.1. Operator is liable under the legislation of the Russian Federation (Federal Law No. 152-FZ, the Code of Administrative Offenses of the Russian Federation, etc.) for violations of personal data processing and protection requirements.
13.2. Personal Data Subject is responsible for the accuracy of the provided data (Article 4 of Federal Law No. 152-FZ).
13.3. In case of loss or unauthorized access to personal data, the Operator is obliged to notify Roskomnadzor and the affected Personal Data Subjects no later than 72 hours from the moment of discovering the fact (Article 19.7 of the Code of Administrative Offenses of the Russian Federation).

14. Policy Amendment Procedure

14.1. The Operator reserves the right to make changes and additions to this Policy.
14.2. The new version of the Policy comes into force from the moment of its publication on the Website (in the "Personal Data Processing Policy" section), unless otherwise specified in the version itself.
14.3. The User is considered to have familiarized themselves with the changes if they continue to use the Website after the publication date of the new version.

15. Contact Information

  • Email: help@yookarma.com
  • Phone: +7 (991) 111-27-12
  • Mailing Address:

Stavropol Krai, Essentuki, Pyatigorskaya St., 121, 390027

Authorized Body (Roskomnadzor):

Moscow, Ordzhonikidze St., 11, office 600
Website: https://rkn.gov.ru

Last Policy Update Date: June 5, 2025