Privacy policy

Nefis MMC · VÖEN 1906837672

What we collect

• For the account: name, e-mail address, telephone and an encrypted trace of the password. The password itself is kept nowhere.
• For the order: the delivery address or postal index, the metro station, the point you picked on the map, a telephone number, the delivery day and time, and your note.
• For the box: the images you upload and the words you write. If you chose a star map — the date, the time, the coordinates, the name of the place and the look you selected.
• For a polaroid letter: a photograph and text. For a live photo: a video.
• When paying by transfer: the receipt you upload. Your name and the last digits of your card may be visible on it.
• If you write in the chat: your message, your name, your telephone number and any image you send.

An image goes to the server as it is: whatever the phone wrote inside it (the date it was taken, sometimes the place) stays in the file.

Technical data

A session is kept so the site can work: your IP address and your browser's name are written beside it in the database. Your basket lives inside that session.

Kept in your browser: the session cookie, the form-protection cookie and your light or dark choice. The language is chosen by the page address, not by a cookie.

Cookies

There are two kinds of cookie, and the difference is set out here because only the second is asked about.

• The necessary ones — the session, which holds your basket, and form protection. Without them an order cannot be placed, so permission is not asked for them.
• The optional one — Google Analytics, which counts how many people look at which pages. Until you press «Accept» on the strip at the foot of the page, nothing of Google's is loaded and no counter runs.

You can change your mind: ask me again.

Besides that, the site's fonts are loaded from Google's server and the maps come from OpenStreetMap, which means your IP address is visible to those services. Neither sets a cookie.

At sign-in, at password reset and in the chat, attempts are counted for a short while — this protects the site from automated attacks.

Who sees it

• The shop's people — to make the order and deliver it.
• epoint.az — card payment is taken on their page. The card number never reaches us; we keep only the payment's number, its amount and its time.
• The courier or the post — a name, a telephone number and an address, for the delivery.
• Telegram — notices about orders, the chat and the couriers go to the shop's bots. These are separate bots.
• Yandex Disk — a live photo's video is moved to the owner's disk.
• Google — if a maps key is connected, the map and the address search go through Google; if the counter is connected, visit data goes to Analytics; on the design page the model files used to cut out a face are loaded from Google's and jsDelivr's servers.
• WhatsApp — if we write to you there, the message passes through Meta's service.

We do not sell your data and we do not hand it to third parties for advertising.

How long it is kept

An order and its images are kept for the order history and the accounts; nothing deletes them automatically. A live photo's video is moved to Yandex Disk as soon as possible and removed from the site; if the move fails, the video stays on the site until the next attempt.

You can close your account yourself at any time: at the foot of «My account», «Delete account». Your name, number, e-mail and the addresses on your orders go. The order keeps its number, its date and its total for the books — but no longer says who it was for or where it went.

Two things this button cannot reach, so we say so plainly: a live-photo video already moved to Yandex Disk cannot be deleted by the site, and whatever you wrote in the chat or the contact form is not tied to your account. Write to us if you want those gone too.

A word about the live photo

A live photo's link is a short code and asks for no sign-in: anyone who knows the code can open the video. Whoever picks up the box will see it — that is exactly what it is for. If the video is shared somewhere else, that is beyond our control.

Children

The site is not meant for children. If you upload a photograph of a child, you do so as a parent or a legal guardian.

Your rights

You may ask what we keep about you, and ask us to correct it or remove it. Your name, number and e-mail you change yourself on «My account», and you close the account there too. For anything else, write to us using the ways below.

Contact

• Telefon və WhatsApp: +994 99 230 80 50 — Every day 10:00–20:00
• Instagram: nefis.az
• E-mail: info@nefis.az
• Saytın küncündəki söhbət — açıq olanda ora yazdığınız birbaşa bizə düşür.

This policy may change; the site always shows the latest version.