Personal Data Protection Policy

GENERAL PROVISIONS

1. For the purposes of this Policy, "personal data" shall mean any information or a combination of information relating to an identified or identifiable natural person.

2. Processing of personal data includes any operation or set of operations performed with or without the use of automated means, such as collection, registration, accumulation, storage, adaptation, alteration, updating, use, dissemination (including transfer), anonymization, and destruction.

3. By registering on the Website or placing an order, the User provides voluntary, informed, and unequivocal consent to the processing of their personal data as described in this Policy.

4. The Website administration (hereinafter – the “Administration”) ensures the confidentiality and security of personal data in accordance with applicable data protection laws.

COLLECTION AND USE OF PERSONAL DATA

1. In order to register on the Website and create a personal account, the User may be requested to provide the following data:

   • Full name or pseudonym;
   • Email address;
   • Date of birth;
   • Gender (if applicable);
   • Country (if applicable);
   • Payment information (processed directly by third-party payment systems).

2. The personal data provided by Users is collected and processed for the following purposes:

   • Creation and administration of the User's personal account;
   • Provision of access to Website functionality and services;
   • Communication with the User, including responses to inquiries and notifications regarding service updates;
   • Processing and execution of payments;
   • Improving service quality and user experience.

3. The Administration does not collect or process special categories of personal data, including but not limited to:

   • Racial or ethnic origin;
   • Political, religious, or philosophical beliefs;
   • Health information, sexual orientation, genetic or biometric data.

DATA SECURITY AND RETENTION

1. The Administration implements appropriate technical and organizational security measures to protect personal data against unauthorized or unlawful processing, accidental loss, destruction, or damage.

2. Personal data shall be retained for as long as is necessary for the provision of services to the User or until the User’s account is deleted.

DISCLOSURE TO THIRD PARTIES

1. The Administration does not disclose personal data to any third parties without the explicit consent of the User, except as required by law or in response to lawful requests by public authorities.

2. Payment data is processed solely by certified third-party payment systems that ensure the confidentiality and security of transactions in accordance with applicable standards.

USER RIGHTS

Users have the right to:

• Access their personal data held by the Administration;
• Request rectification or erasure of inaccurate or outdated personal data;
• Withdraw consent to the processing of their personal data (subject to service limitations);
• Lodge complaints with relevant supervisory authorities regarding data protection issues.

DATA DELETION

1. Users may request the deletion of their personal data by:

   • Sending a written request to info@zoria.ai with the subject line “Personal Data”;
   • Using the data deletion function available within their personal account.

2. In the event of user account inactivity exceeding five (5) years, the Administration reserves the right to delete such account and any associated personal data.

AMENDMENTS TO THE POLICY

1. The Administration reserves the right to amend or update this Policy at any time. Any changes shall take effect upon publication of the updated Policy on the Website.

2. Continued use of the Website by the User after such publication shall constitute acceptance of the updated terms.

CONTACT INFORMATION

For any inquiries regarding the processing of personal data, please contact:

Email: info@zoria.ai

Subject line: “Personal Data”