Privacy Policy

1. General

This policy describes what personal data ТОО «Arba Wine» (the "Operator") collects through the Arba Wine mobile app (the "App"), how it is used and how it is protected.

The policy follows the Law of the Republic of Kazakhstan No. 94-V of 21 May 2013 "On Personal Data and Their Protection". By installing the App and registering in it you confirm that you agree to this policy.

2. What we collect

Your phone number, the name you entered and the delivery addresses saved in the App.

Orders and event bookings, favourite wines, arbinki (loyalty points) earned and spent, scanned bottle QR codes.

A device identifier for push notifications (token), if you allowed notifications.

When you sign in with Telegram: the phone number, Telegram ID and username provided by the bot.

Technical data: app version, device type, crash reports without personal data.

Approximate location is used only on your device to suggest the nearest city. It is not sent to our servers.

3. Why we use it

Registration, sign-in and protection of your account.

Placing and fulfilling orders, delivery, contacting you about an order.

Event bookings and reminders.

The Arbinki loyalty programme: earning, spending, tiers.

Notifications about order status and, unless you turn them off in your profile, about promotions and events.

Fixing errors, security and fraud prevention.

Meeting the requirements of the law of the Republic of Kazakhstan.

4. Consent

We collect and process data only with your consent. You give it by ticking a box when you sign in to the App; it is stored with the date and the version of the document.

You can withdraw consent at any time by deleting your account in the App (Profile → Delete account) or by writing to the Operator. After that the account can no longer be used.

5. Storage and retention

Databases with personal data are located on servers in the Republic of Kazakhstan.

Data is kept while your account exists. After you delete the account, personal data is deleted; records of completed orders may be kept without a link to you for accounting for the period required by law.

6. Sharing with third parties

We share data only as far as needed for the service to work: with the delivery service (address, name, phone), payment services (amount and order number), the SMS provider and Telegram for sign-in codes and internal messages to staff, and the Expo push notification service (device token).

Some of these services operate outside the Republic of Kazakhstan. Transfers are made in accordance with the law of the Republic of Kazakhstan and only for the purposes listed.

We do not sell your data and do not pass it to third parties for advertising.

7. Your rights

You have the right to know what data about you is processed, to ask for it to be corrected or deleted, to withdraw consent and to complain to the competent authority.

To do so, write to the Operator at the address below. We will reply within the time set by law.

8. Data protection

Data between the App and the server is encrypted (TLS). Staff access to data is limited by roles and recorded in an action log. Staff passwords are stored in hashed form.

9. Age

The App contains information about alcoholic products and is intended for people aged 21 and over. We do not knowingly collect data from anyone younger.

10. Changes

We may update this policy. The current version is always available through the link in the App. If the changes are significant, we will ask you to confirm your consent again.