Privacy Policy

1.1. The personal data operator is the owner and administration of the Yuri Bazaly Website. They organize the operation of the Website and determine the purposes of data processing.

1.2. This Policy applies to the main domain yuribazaly.com and the mirror domain yuribazaly.ru. For the purposes of this Policy, they are treated as a single Website. They share the same structure, the same set of data processing rules, and the same approach to privacy protection.

1.3. This Policy also applies to all pages, sections, and functions of the Website. This includes publications, comments, registration, the personal account area, the digital product store, contact forms, and technical security logs.

1.4. By using the Website, the user confirms that they have read this Policy. This applies to registration, comments, placing orders, and submitting forms.

1.5. If the user does not agree with this Policy, they should stop using Website functions related to data transfer. For example, registration, comments, placing orders, and submitting forms.

1.6. This Policy has been prepared taking into account the legislation of the Russian Federation on personal data, including Federal Law Russian Federal Law No. 152 “On Personal Data”. If individual provisions of applicable law require a different processing procedure, such mandatory procedure shall apply.

2.1. The Website does not collect passport data, residential address, phone number, biometric data, or health information. The Website also does not collect political views, religion, bank card payment details, or other excessive data.

2.2. Depending on the function used, the Website may process the following data:

• email address — for registration, login, access recovery, communication regarding orders, and notifications if the user has subscribed to them voluntarily.
• IP address — for protection against spam, brute-force attacks, abuse, suspicious logins, and technical failures.
• nickname, name, or signature — only if the user provides them during registration, when posting a comment, or when publishing a review.
• text of a comment, review, or message — if the user publishes or sends such text voluntarily.
• technical browser and device data — browser type, language, date and time of the request, page address, server response, and similar technical log records.
• account and order data — registration status, list of purchased digital products, order date, order status, and technical information required to provide access to files.
• essential cookies — for account login, the cart, selected Website theme, form protection, and normal interface operation.

2.3. If registration on the Website uses a password, it is not stored in plain text. A technical hash is used for this purpose. The Website Administration does not see the user’s original password.

2.4. The Website does not use third-party advertising pixels or external behavioral analytics. The Website also does not use hidden social widgets or external fonts/CDNs to track the user.

3.1. Personal data is used only to the necessary extent. It is required for the operation of the Website and for performing actions requested by the user.

3.2. The main purposes of processing are:

• creating and maintaining the user account.
• displaying and moderating comments.
• processing orders and providing access to digital products.
• sending technical notifications: registration, access recovery, order status, and replies to inquiries.
• protecting the Website from spam, hacking, mass automated requests, and other abuse.
• diagnosing technical errors and improving Website stability.
• complying with legal requirements if such an obligation arises.

3.3. Informational or news emails are sent only to users who have subscribed to them voluntarily. The user may unsubscribe using the link in the email. This may also be done through account settings if available, or through the “Contacts” page.

4.1. When a comment or review is published, the Website may store the text, publication date, IP address, email address, and name/nickname. This happens only if the user has submitted such data voluntarily.

4.2. The text of the comment, name/nickname, and publication date may be visible to other Website visitors. The email address and IP address are not displayed publicly.

4.3. The user must not publish other people’s personal data in comments. The user must also not publish private correspondence, payment details, addresses, phone numbers, or other private information.

4.4. The Website Administration may delete a comment, review, or account. This is possible if they violate the Website rules, the law, third-party rights, or are used for spam and technical attacks.

5.1. The Website store is intended for digital products. These may include 3D models, footage, sounds, presets, materials, files, bundles, and other digital products.

5.2. To provide access to a digital product, the Website may store the user’s email address. The order identifier, order contents, order date, and order status may also be stored.

5.3. In addition, the Website may store technical data related to the order. It is needed to provide a link, access to the file, and user support.

5.4. The Website does not store bank card payment details. If an external payment service is added in the future, this Policy will be updated before any data transfer begins.

5.5. Order data is used to confirm the purchase and provide access to the digital product. It is also needed for user support and protection against fraudulent actions.

6.1. The Website does not sell users’ personal data. The Website also does not exchange, rent out, or transfer such data to third parties for advertising, analytics, mailing lists, or profiling.

6.2. Data may be disclosed only in cases expressly provided by law. For example, under a court decision or a request from an authorized government authority.

6.3. In addition, data may be disclosed to protect the rights and legitimate interests of the Operator. This may also apply to the protection of users or third parties.

6.4. Hosting files, databases, and technical infrastructure on servers is not considered a transfer of data to third parties. Such data is not provided to them for independent use.

7.1. The Operator takes reasonable technical and organizational measures to protect data. These measures help protect data from loss, unauthorized access, alteration, disclosure, and destruction.

7.2. Access to administrative sections, the database, backups, and technical logs is restricted. Such access is granted only to persons who genuinely need it for the operation of the Website.

7.3. Account and order data is stored until the account is deleted by the user or the administration. Data may also be stored until the purpose of processing has been achieved. Longer storage is possible if required by law. In addition, data may be stored longer to protect rights and security.

7.4. Comments and related service data are stored until the comment or account is deleted. They may also be stored until they are no longer needed for moderation and security.

7.5. Technical security and access logs are stored for a limited period. Usually, this period is needed to diagnose errors, protect against attacks, and investigate abuse. Under standard conditions, this period does not exceed 12 months. However, the law, a security incident, or a disputed situation may require longer storage.

8.1. The user has the right to request information about their personal data, clarify it, request deletion, withdraw consent to processing, or stop using the account.

8.2. To process a request, the administration may ask the user to confirm that the request was sent by the owner of the relevant email address, account, or order. This is necessary to avoid disclosing or deleting data based on someone else’s request.

8.3. A request may be sent through the Contacts page on the Website. It is advisable to specify the account email address, the nature of the request, and the action the user wants to perform: receive information, correct data, delete an account, delete a comment, or withdraw consent.

8.4. If the user withdraws consent to data processing, the Website stops processing data based on such consent and deletes the data when its storage is no longer required for contract performance, legal compliance, protection of rights, or security.

8.5. Account deletion may result in loss of access to order history, saved settings, comments, and digital products if such access is technically linked to the account.

9.1. The Website uses only necessary cookies and similar technical mechanisms: for login, the cart, form protection, saving the interface theme, language, and basic operational stability.

9.2. Such cookies are not used for selling advertising, hidden profiling, or transferring user behavior to third-party advertising systems.

9.3. The user may disable cookies in browser settings, but after that some Website functions may work incorrectly: login, cart, checkout, comments, or saved settings.

10.1. The Operator may update this Policy if the Website functionality, the scope of processed data, legal requirements, or the approach to data protection changes.

10.2. A new version of the Policy becomes effective from the moment it is published on the Website, unless another date is specified in it.

10.3. The current version of the Policy is published at yuribazaly.com/en/privacy-policy.