Privacy policy

This policy describes how Koles (the operator) processes the personal data of visitors and customers of this website. Processing is carried out in accordance with Federal Law of the Russian Federation No. 152-FZ «On Personal Data» and other applicable legislation. By using the site, creating an account or placing an order, you confirm that you have read this policy and consent to the processing described in it.

• Account data: email address and language preference. Sign-in codes are stored only in hashed form.
• Order data: full name, phone number, email, delivery address, your chosen messenger, and the contents and history of your orders.
• Support and chat data: messages you send to the on-site assistant and photos you upload (for example, to identify your car).
• Technical data: IP address, browser and device information, pages visited, and cookies or similar identifiers.

• To process, confirm and deliver your orders, and to contact you about them.
• To create and maintain your account and sign you in securely.
• To send transactional emails about your order status.
• To provide support through the site chat and your chosen messenger.
• To analyse how the site is used and improve the catalog and service.
• To comply with legal obligations of the seller.

We process personal data on the basis of the performance of a retail sale contract with you, your consent given when using the site and placing orders, and the operator's legal obligations. You may withdraw your consent at any time as described in the section on your rights.

Databases containing personal data of citizens of the Russian Federation are recorded and stored on servers located in the Russian Federation, as required by law. Data is retained only for as long as needed for the purposes above or for periods required by law.

We never sell personal data. Data is shared only to the extent necessary with:

• delivery services — to deliver your order;
• infrastructure and hosting providers that run the site;
• cloud services that store chat images and power the on-site assistant;
• state authorities, when required by applicable law.

Each recipient receives only the minimum data needed for its function.

The site uses a session cookie to keep you signed in, a cookie remembering your language, and first-party analytics that record page views and searches. We do not use third-party advertising trackers. Disabling cookies in your browser may prevent sign-in and the cart from working.

Account data is kept while your account is active. Order data is kept for the periods required by accounting and consumer-protection legislation. Chat images are stored with limited-lifetime access links. Analytics data is used in aggregated form.

You have the right to request access to your personal data, its correction or deletion, to restrict processing, and to withdraw consent at any time. To exercise any of these rights, write to the email address in the seller details below. We respond within the time limits established by law. You also have the right to lodge a complaint with Roskomnadzor, the supervisory authority for personal data protection.

We use encrypted connections (TLS), store sign-in codes only in hashed form, keep API keys and credentials server-side, and restrict administrative access to order and customer data to authorized staff.

We may update this policy from time to time. The current version, with its effective date, is always published on this page. Continued use of the site after changes take effect constitutes acceptance of the updated policy.