Notice on the processing of personal data

This notice has been prepared to fulfil the duty to inform set out in the Law of the Republic of Azerbaijan “On Personal Data” (hereinafter — the “Law”) and applies to all users of the 8008gear.com website.

1. Operator

Operator	8008 Gear — (official name of the legal entity / sole proprietor)
TIN	——
Address	Baku, Republic of Azerbaijan (full address: ——)
Email	[email protected]
Phone	+994105558008

2. Categories of personal data processed

• Identification data: first name, last name.
• Contact data: email, phone, delivery address.
• Customer transactions: orders, payment confirmations, return and warranty requests, 8008 Coin and coupon transactions.
• Technical data: IP address, device and browser information, session identifier.
• Correspondence: order and support correspondence with customer support.

Special categories of personal data (racial, ethnic, religious, health, etc.) are not collected or processed.

3. Purpose and legal basis of processing

• Concluding and performing the sales contract (order, payment, delivery, warranty) — performance of the contract.
• Creating an account and identifying the user — your consent and performance of the contract.
• Fulfilling legal obligations relating to accounting, tax and consumer rights — a requirement of the law.
• Site security and preventing abuse — the operator’s legitimate interests.
• Promotion and news notifications — only with your separate explicit consent (Law of the Republic of Azerbaijan “On Advertising”).

4. How data is collected

Data is collected directly from you (sign-up and order forms, correspondence with customer support) and automatically (server logs, cookies). Providing data is voluntary; however, if the data required to fulfil an order is not provided, the contract cannot be concluded.

5. Recipients of the data

Personal data is shared only to the extent necessary to provide the service with courier and postal services, banks and payment institutions, email, hosting and CDN providers (including Cloudflare), Google when “Sign in with Google” is chosen, statistics and ad measurement services (Google Analytics, Yandex Metrica, Google Ads, Meta, TikTok) with your consent, and state authorities in cases provided for by law. Data may be transferred outside the Republic of Azerbaijan only in compliance with the requirements of the Law — ensuring an adequate level of protection or with your consent.

6. Retention period

Data is kept until the purpose of processing is achieved or for the period required by law: account data — until the account is deleted; order and payment records — 5 years; support correspondence — 2 years; technical logs — up to 12 months; backups — up to 30 days. After this period, the data is destroyed or anonymized.

7. Rights of the data subject

Under the Law, you have the following rights:

• to find out what personal data about you is processed, as well as the purpose and source of processing;
• to demand that the data be corrected, updated, blocked or destroyed;
• to withdraw your consent to processing at any time (this does not affect the lawfulness of processing before the withdrawal);
• to opt out of marketing notifications;
• to apply to the competent state authority or a court if your rights are violated.

8. How to make a request

You can send your request to [email protected] or +994105558008. Once your identity is confirmed, the request is answered within 7 (seven) business days at the latest. You can also request the deletion of your account and the data linked to it in the same way.

You can also download a copy of your data and delete your account yourself using the “My data” and “Delete account” rows in the “Sign-in and security” section of your account; on deletion, orders are kept anonymously for the accounting required by law.

For more information on cookies, security measures and third parties, see our privacy policy.