Privacy policy

This Privacy Policy explains how the personal data of people who use the 8008gear.com website and related services is collected, processed and protected. The operator of the personal data is 8008 Gear — (official name of the legal entity / sole proprietor) (hereinafter — “8008 Gear”), which operates in line with the requirements of the Law of the Republic of Azerbaijan “On Personal Data” and the Civil Code of the Republic of Azerbaijan.

People who use the Site are deemed to have read this policy. Processing necessary to manage orders and accounts is based on the performance of the contract, and in other cases on your consent.

1. Personal data processed

Data you provide directly:

• first name, last name;
• email address and phone number;
• delivery address;
• order history, selected products and variants, order notes;
• the content of correspondence with customer support;
• product reviews and the photos you attach to them;
• 8008 Coin balance, coupons and “Notify me when in stock” subscriptions;
• when you choose to sign in with Google — your Google account name, email address and identifier (your Google password is not shared with us).

Technical data collected automatically:

• IP address, browser and device type, date and time of access;
• session and security cookies (see section 4);
• server logs (errors and security events).

Payment card details are not collected or stored on the Site.

2. Purposes and legal basis of processing

• Accepting orders, confirming payments, delivery and warranty service — performance of the contract.
• Creating and managing an account, access to order history and the 8008 Coin balance — performance of the contract.
• Customer support and responding to requests — performance of the contract and legitimate interest.
• Site security and preventing abuse — legitimate interest.
• Accounting and tax records — an obligation established by law (Tax Code of the Republic of Azerbaijan).
• Statistical analysis of site usage — only with your consent.
• Promotion and news notifications — only with your explicit consent (Law of the Republic of Azerbaijan “On Advertising”); consent can be withdrawn at any time.

3. Sharing data with third parties

Personal data is not sold or shared with third parties for commercial purposes. Data may be shared only to the extent necessary to provide the service with:

• courier and postal services — name, phone, delivery address;
• banks and payment institutions — the data required to process a payment;
• an email delivery service — for account verification, password recovery and order emails;
• Google — only when you choose “Sign in with Google” (to verify the sign-in);
• statistics services (Google Analytics, Yandex Metrica) — only with statistics consent; ad measurement services (Google Ads, Meta, TikTok) — only with marketing consent and only when those services are connected;
• hosting, CDN and protection providers (including Cloudflare) — for running the site, storing data and backups;
• state authorities — in the cases and manner provided for by law.

Some of these services have servers outside the Republic of Azerbaijan; data is transferred to them only in compliance with the requirements of the Law “On Personal Data” — to the extent necessary to perform the contract or with your consent.

4. Cookies

Essential cookies always work: session (sign-in), security (CSRF) and a cookie that remembers your cookie choice (1 year).

Statistics cookies (the site’s own visitor cookie, Google Analytics and Yandex Metrica) and marketing cookies (Google Ads, Meta, TikTok) are created only after you consent to that category in the panel shown when you first open the Site — the code of these services is not loaded until consent is given. You can change or withdraw your choice at any time using the “Cookie settings” link at the bottom of the site; if the cookie rules change, consent is asked again.

Data for features such as “Recently viewed” is stored only in your browser and is not sent to the server. You can delete or block cookies in your browser settings; in that case signing in and the cart may not work.

5. Retention period

• Account data — until the account is deleted. When an account is deleted, personal data is deleted immediately, while orders are kept anonymously for accounting.
• Order and payment records — for the period required by accounting and tax legislation (5 years).
• Support correspondence — 2 years after the request is resolved.
• Technical logs — up to 12 months.
• Backups — up to 30 days; deleted data also leaves the backups within this period.

6. Security

Data is transmitted over an encrypted connection (HTTPS), passwords are stored as irreversible hashes, only authorized staff can access the data and every access is logged. In the event of a personal data breach, data subjects and the competent authority are notified in line with the requirements of the Law of the Republic of Azerbaijan “On Personal Data”.

7. Your rights

You have the right to receive information about your personal data, to demand that it be corrected, blocked or destroyed, to withdraw your consent to processing and to file a complaint. More details are given in the notice on the processing of personal data.

You can do this yourself in the “Sign-in and security” section of your account: “My data” — download a copy of all your account data as a JSON file; “Delete account” — delete the account. On deletion, your name, email, phone, address, cart, 8008 Coin and coupons are deleted and your reviews are hidden from the site; orders are kept anonymously for the accounting required by law. If you have an unfinished order, the account can be deleted after the order is delivered or cancelled.

8. Minors

The services are intended for people aged 18 and over. Personal data of people under 18 is not knowingly collected without the consent of a legal representative; if such a case is discovered, the data is deleted.

9. Changes and contact

This policy may be updated; the current version is always published on this page. For questions: [email protected], +994105558008.