Fastyshop privacy policy

This Privacy Policy explains what personal, technical and other data Fastyshop processes, why the data is needed, who it may be shared with, and what rights the user has.

Fastyshop is a SaaS platform and e-commerce infrastructure. The service helps sellers create shops, publish public storefronts and process orders, but it is not the seller of all goods and services listed by shops.

This Policy applies to site visitors, buyers, sellers, cabinet users, support users and other persons who interact with Fastyshop.

The service operator is Individual entrepreneur "WhiteDog". The service covered by this policy is Fastyshop.

For questions about personal data, correction of information, withdrawal of consent, account or data deletion, and other privacy requests, the user may write to support@fastyshop.kz.

General contacts, support hours and communication channels are listed on the /contacts page.

Fastyshop’s first-party link-page analytics event dataset contains technical shop, page and element identifiers, the event type, and information needed to check consent and prevent duplicate recording. It does not include the visitor’s name or contact details, the link destination, IP address, User-Agent or fingerprint. Sellers receive daily aggregates without a visitor list. Network request processing and service security are described separately and do not become part of the seller’s report.

For link page analytics, FastyShop counts page views and clicks on buttons, selected products and contact elements only with the visitor’s current consent to the analytics category. These events let the seller assess page use in aggregate. Declining analytics does not prevent viewing an available page or following its links.

The figures reflect accepted events with consent, not all traffic or unique people. A click does not confirm that an external website opened, a call was made, an email was sent or a purchase occurred. Updates may be delayed and technical failures may leave some events out of the report. Events without the required consent are not reconstructed retrospectively after consent is given.

Fastyshop uses necessary cookies and similar technologies for site operation, security, sessions, CSRF protection, saving preferences and recording the cookie choice.

Necessary service cookies also include cookies that support the guest cart and protected linking of a guest order to an account. They are needed so the cart and checkout work without passing technical data through a public URL.

The secure data for linking the order is stored and verified by the service. The interface does not read the technical data and must not store it in localStorage, sessionStorage, or links.

Analytics cookies and web analytics scripts must not load before the user consents to the analytics category. The user can accept all categories, keep only necessary cookies or configure the choice separately.

The marketing category is reserved for future marketing/ad cookies. As of this version, advertising pixels and ad storage are not enabled as a separate marketing integration.

Fastyshop calculates the link-page metrics shown in the cabinet. Separately, the service uses Google Analytics 4 after a visitor consents to analytics. These consent settings are shared across supported service pages. Google Analytics data and Fastyshop metrics are processed separately and may differ.

Google Analytics may process pages viewed, referral sources, technical events and identifiers, device and browser information and approximate location. The current settings enable enhanced measurement of page views, scrolls, outbound links, site search, video interactions, downloads and form interactions. These settings describe available measurement types, rather than confirming every event on every page.

The account settings allow data sharing for modelling and statistics, technical support and business recommendations; sharing for Google products and services is disabled. Google Signals and the user-provided data collection feature are disabled. These settings do not mean that all technical identifiers or transfers to an external provider are absent. Fastyshop does not request advertising consent through this analytics category.

Fastyshop must not intentionally send passwords, full payment details, private form contents, delivery addresses, email addresses, telephone numbers or other sensitive fields to analytics. Enabled email redaction in Google Analytics does not guarantee that all personal data is excluded. Yandex Metrica is not connected in the service’s verified current configuration.

Service notifications are needed for platform operation: registration, sign-in, security, orders, shop statuses, support, important document changes, warnings and blocks.

In the current service version, Fastyshop may use email, Telegram and in-service system notifications. SMS notifications are not used yet.

Marketing messages may include service news, offers, promotions, selections and recommendations. The user will be able to opt out of marketing without deleting the account and without disabling mandatory service notifications.

Fastyshop’s primary personal data database is stored in Kazakhstan. Servers and VPS services use PS.kz; the confirmed region is Almaty, Kazakhstan (kz-ala-1). Local backups are held on a Mac in Kazakhstan. This description of our infrastructure does not mean that all external providers, their logs and their internal copies process data only in Kazakhstan.

Data is stored until the processing purposes are achieved and within the periods established by the laws of the Republic of Kazakhstan. Withdrawal of consent, an account deletion request, or a data deletion request does not always mean immediate or complete deletion of all data if there are orders, disputes, retention duties, security needs or legal requirements.

Using Google Analytics and Telegram involves transfers to external providers, and data may be processed outside the Republic of Kazakhstan. Such transfers require grounds provided by Kazakhstan law. An account’s country or time-zone setting does not determine where a provider processes data. Users retain their rights and their ability to contact Fastyshop.

Daily link page aggregates are available within a rolling window of 90 calendar days. Processing uses short-lived technical data: duplicate-event markers for up to 24 hours; daily counter buffers for up to 72 hours from the start of the relevant server day; and processing checkpoints until the start of the eighth following server day. Background jobs clean up stored aggregates, and a failure may delay cleanup. These periods do not describe retention for all security logs, backups or other data that must be retained.

The period for which link-page statistics remain available in the cabinet is not a single retention period for all service data. Temporary technical records, security logs and backups have separate purposes and retention rules. Disabled backups, versioning and object lifecycle settings at PS.kz do not disable application-level deletion or establish that the provider performs no internal replication. The local backup policy provides for retaining up to 14 daily, up to 8 weekly and up to 12 monthly restore points; this is not one maximum age for every record in every copy.

The Google Analytics property used by the service is configured to retain event data for 2 months and user data for 14 months. New activity resets the retention period for the associated user identifier. These settings do not determine retention of standard aggregated reports or provide a single retention period for Fastyshop data, technical logs or backups.

Automatic deletion of these Telegram service messages after a set period is not currently configured. This does not remove applicable storage-limitation and deletion requirements or mean that Fastyshop has no other deletion mechanisms. Questions about processing and deletion can be sent to support@fastyshop.kz. No specific automatic deletion period for these messages is stated.

Turning off the analytics category stops new analytics events from being sent after the browser applies the choice. Changing cookie settings does not automatically delete events already accepted or saved aggregate counts. Contact support@fastyshop.kz about personal data processing, withdrawal of consent or deletion; applicable rights and legal requirements remain in place.

Until account deletion is available in the interface, the user may request account deletion, deletion of specific data, restriction of processing, or clarification of processing status through support@fastyshop.kz.

Fastyshop reviews the request within applicable law, platform documents, and the technical capabilities of the service. Verifying the request may require confirmation of the account, contact, shop, order, or authority to act on behalf of the user.

After the request, some data may be deleted, destroyed, anonymised, restricted in processing, or retained if further retention is needed on a lawful basis.

Fastyshop applies organisational and technical measures to protect data from unauthorised access, alteration, disclosure or destruction.

For security, session cookies, CSRF protection, login logs, security events, IP, user-agent and future active session history may be used.

No internet service can guarantee absolute security. If the user suspects unauthorised access, a data leak, a technical vulnerability, or a privacy or security issue, they should contact support as soon as possible.

Security reports are accepted through support@fastyshop.kz. This does not mean that Fastyshop has launched a public vulnerability reward program, a separate response guarantee, an encrypted mail channel, or permission for independent vulnerability testing outside an agreed channel.

Fastyshop is intended for users who are at least 18 years old. By using the service, the user confirms that they are of legal age and have the right to accept platform documents.

Fastyshop may update the Privacy Policy when functions, laws, providers, data categories or processing methods change.

Material changes may require renewed user consent or an update to the stored consent version. The current version is published on the /privacy page.

For questions about personal data, cookies, analytics, consents, account deletion, data deletion, security, and user rights, write to support@fastyshop.kz.

For general requests, sales and other communication channels, use the /contacts page.