Consent to the Processing of Personal Data

Version 1, revision of November 6, 2026

1. General Provisions

1.1. This consent applies to the website https://isferra.com, including its Russian (https://isferra.com/ru) and English (https://isferra.com/en) versions (the "Website").

1.2. By ticking the consent box and submitting a form on the Website, you freely, of your own will and in your own interest give the operator named in Section 2 specific, substantive, informed, conscious and unambiguous consent to the processing of your personal data on the terms set out below (Article 9 of Federal Law No. 152-FZ of July 27, 2006 "On Personal Data", the "Personal Data Law").

1.3. Consent is given separately for each form on the Website at the moment the form is submitted — by ticking the consent box at the form. A form cannot be submitted without this tick. Consent covers only the data submitted through that form and only the purposes stated for it in Section 3. If you do not agree with this text, do not submit the form.

1.4. This consent is set out in a separate document. It is not part of the Privacy Policy, the Terms of Service or any other document of the Website.

1.5. This consent does not cover:

  • receiving advertising. Consent to receive advertising messages is given separately — by a separate tick box in the subscription form (Part 1, Article 18 of Federal Law No. 38-FZ of March 13, 2006 "On Advertising");
  • the processing of data about visits to the Website using cookies and the Yandex.Metrica service. This processing is based on Clause 7, Part 1, Article 6 of the Personal Data Law (the Operator's legitimate interest — Website traffic statistics) and is described in the Privacy Policy (https://isferra.com/en/menu/privacy) and in the cookie document (https://isferra.com/en/menu/cookies).

2. Operator

Individual Entrepreneur Kadyrov Emir Rafaelevich (the "Operator"):

  • INN (taxpayer identification number) 165812326373;
  • OGRNIP (primary state registration number of an individual entrepreneur) 324237500446287;
  • place of business and mailing address: 60 Dzhaparidze St., Sochi, 354055, Russia;
  • email: isferra.brand@gmail.com;
  • phone: +7 (900) 291-54-40.

The Operator is the owner of the Website and the operator of personal data for all forms in both language versions of the Website. For orders placed on the English version of the Website, the seller of the goods is ALPHA UTILITY INC (United States); the Operator transfers the data of such orders to it to the extent stated in Section 6.

3. Purposes of Processing

3.1. The "Ask us anything" form

The form is located on the home page, on the "Contacts" page and at the bottom of the Website's pages.

Purpose: to consider your question and answer it.

3.2. Newsletter subscription

Purpose: to keep a record of your subscription to ISFERRA news and to inform you about it: confirmation of the subscription, messages about changes to its terms and about the end of the subscription.

News about collections, tailored offers and invitations are advertising in nature. They are sent only if you have given separate consent to receive advertising (clause 1.5); this consent does not replace it.

3.3. Placing an order

Purposes:

  • concluding and performing the sale contract: placing and confirming the order, making the goods, contacting you about the order, including emails about the order and payment;
  • accepting payment and sending the payment receipt;
  • delivering the order;
  • handling your requests and claims concerning the order: refusal of the goods, return, warranty;
  • accounting and tax records;
  • for orders on the English version of the Website — transferring the order data to the seller, ALPHA UTILITY INC, for the sale of the goods and acceptance of payment.

Processing of order data is also necessary to conclude and perform the contract (Clause 5, Part 1, Article 6 of the Personal Data Law) and to fulfil obligations imposed on the Operator by law (Clause 2, Part 1, Article 6). On these grounds it continues after consent is withdrawn — within the limits stated in clause 8.3.

4. Personal Data Processed

4.1. The "Ask us anything" form

  • name;
  • phone number;
  • text of the question;
  • technical details: form type, address of the page from which the form was submitted, Website language.

4.2. Newsletter subscription

  • email address;
  • technical details: form type, address of the page from which the form was submitted, Website language.

4.3. Placing an order

  • full name;
  • email address;
  • phone number;
  • shipping address: address, city, state/province, postal code, country;
  • billing address: address, city, state/province, postal code, country;
  • order notes;
  • order contents (products, color, size, quantity), the order's price and currency, the selected shipping and payment methods, Website language;
  • payment details that the Operator receives from the payment service: payment ID, status and amount, and other data of the payment transaction. You enter full bank card details on the payment service's page — the Operator does not receive them;
  • details of emails sent to you about the order: time of sending and recipient's address.

The following is stored together with the form data: date and time of submission, IP address, browser and device details (the User-Agent string), version and address of the consent text, Website language, the list of completed form fields without their contents. These records are needed to prove that consent was obtained (Part 3, Article 9 of the Personal Data Law).

4.5. What the Operator does not request

The Operator does not request passport details, date of birth, place of employment, biometric personal data or special categories of personal data (including health data). Do not include them in the text of your question or in the order notes.

5. Actions with Personal Data and Processing Methods

5.1. Actions: collection, recording, systematization, accumulation, storage, clarification (updating, changing), extraction, use, transfer (provision, access) to the recipients named in Section 6, blocking, deletion, destruction.

5.2. Dissemination of personal data — disclosure to an indefinite circle of persons — is not carried out.

5.3. Processing method: automated processing using computer equipment and with transmission over the Internet.

5.4. Recording, systematization, accumulation, storage, clarification and extraction of personal data are carried out using databases located in the Russian Federation. Data from all forms in both language versions of the Website is first recorded in the Website's database on a server in Russia.

6. Recipients of Personal Data

6.1. The Operator transfers personal data (provides access to it) to the following persons — only to the extent stated in the table and only for the stated purpose.

RecipientCountryWhat dataPurposeFor which forms
Hosting provider FirstVDS — JSC IOT, INN 7731399513Russiadata from Section 4 while stored on the Website's server and in the server logsstoring Website dataall forms
Yandex — Yandex Mail service (the Operator's mailbox isferra.brand@yandex.ru)Russianotifications to the Operator about requests and subscriptions: name, phone number, email address, text of the question, page address; emails about orders on the Russian version of the Website — to the customer and the Operator; notifications to the Operator about orders on the English version of the Websitesending and receiving notificationsall forms
YooKassaRussiaamount and currency (rubles), receipt items (product name, price, quantity), the customer's email address for the fiscal receipt, order number. The customer enters bank card details on the YooKassa pageaccepting payment, fiscal receiptorders on the Russian version of the Website
CDEKRussiafull name, phone number, shipping address, email address, order contents and valuedelivering the orderorders
ALPHA UTILITY INC, 5830 E 2ND ST, STE 7000 #17572, CASPER, WY 82609United Statesfull name, email address, phone number, shipping address and billing address, order contents and amount; details of payments in Stripesale of the goods and acceptance of payment — ALPHA UTILITY INC is the seller under these ordersorders on the English version of the Website
Stripe, LLC, 354 Oyster Point Blvd, South San Francisco, CA 94080 — Stripe payment service, the account is registered to ALPHA UTILITY INCUnited Statesthe customer's email address, order items (name, color and size, price, quantity), amount, currency (US dollars), order number. Stripe receives bank card details and the IP address from the customer on its payment pageaccepting paymentorders on the English version of the Website
Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 — Gmail service (mailbox isferra.brand@gmail.com)United Statesemails about orders that are sent through the Gmail server and kept in that mailbox's sent messages: to the customer at their email address — full name, phone number, shipping address, order contents and amount, order number, payment status; to the Operator — the same data, plus the customer's email address and order notes; correspondence with customers through this mailboxorder and payment notifications, correspondence about ordersorders on the English version of the Website

6.2. Cross-border transfer. The recipients in the United States — ALPHA UTILITY INC, Stripe, LLC and Google LLC — receive only data from orders placed on the English version of the Website and, in the case of Google LLC, the contents of letters you send yourself to isferra.brand@gmail.com, the contact address of the English version, including a withdrawal of consent under clause 8.1. The United States is not among the countries that provide adequate protection of the rights of personal data subjects. The Operator carries out such transfers in the manner established by Article 12 of the Personal Data Law.

6.3. Orders for delivery to Russia, Belarus and Abkhazia are accepted only on the Russian version of the Website and are paid for through YooKassa. The Operator does not transfer the data of such orders, or data from the "Ask us anything" form and the newsletter subscription, to ALPHA UTILITY INC, Stripe or Google.

6.4. Yandex.Metrica receives no data under this consent (clause 1.5): the data you enter in the Website's forms is not transferred to it.

7.1. This consent remains in effect and personal data is stored for the periods stated in the table, unless consent is withdrawn earlier (Section 8). Withdrawal of consent for the "Ask us anything" form and for the newsletter subscription ends the processing of the data of that form (clause 8.2). After consent is withdrawn, the Operator keeps order data until the end of the period stated in the table — without consent, on the grounds stated in clause 3.3 (clause 8.3).

FormPeriod
"Ask us anything" — form data and records of consent1 year from the date of the request
Newsletter subscription — email address and records of consentuntil consent is withdrawn, but no more than 3 years from the date of subscription
Placing an order — order data, payment details, details of emails sent and records of consent5 years after the end of the year in which the order was fulfilled (the retention period for tax records)

7.2. When the period expires, personal data is destroyed within 30 days.

8.1. You may withdraw your consent at any time:

  • by email to isferra.brand@gmail.com with the subject "Withdrawal of consent to the processing of personal data";
  • by post to: 60 Dzhaparidze St., Sochi, 354055, Russia.

In your withdrawal, state your name, the phone number or email address you provided in the form, and which consent you are withdrawing — for all forms or for a specific one: question, subscription, order.

8.2. On receiving the withdrawal, the Operator stops processing the personal data and destroys it within no more than 30 days from the date the withdrawal is received (Part 5, Article 21 of the Personal Data Law).

8.3. Withdrawal does not affect the lawfulness of processing carried out before it was received. The Operator continues to process, without consent, the order data needed to fulfil the order and documents whose retention period is set by law, on the grounds stated in clause 3.3 (Part 2, Article 9 of the Personal Data Law) — for the period stated in Section 7.

8.4. Withdrawing consent for the newsletter subscription means ending the subscription.

9. Rights of the Personal Data Subject

Your rights — to obtain information about the processing of your personal data, to demand that it be clarified, blocked or destroyed, and to appeal against the Operator's actions to Roskomnadzor (the Russian personal data protection authority) or in court — and the general terms of processing are set out in the Privacy Policy: https://isferra.com/en/menu/privacy.

10. Version and Date

10.1. Version 1, revision of November 6, 2026. The current revision is available at https://isferra.com/en/menu/consent.

10.2. When the text is changed, the Operator posts a new version with a new date. Consent given earlier remains in effect in the revision that was posted at the moment it was given. For new purposes or a new set of data, the Operator will request new consent.