1. General Provisions and Definitions

1.1

The following terms and definitions are used in this Privacy Policy and Consent to Personal Data Processing (hereinafter referred to as the “Policy” or “Consent”):

1.2

This Policy defines the conditions for access to and use of the Site, mobile versions of the Site, and other internet portals belonging to, managed by, or made accessible by the Administrator.

1.3

The User who begins using the Site accepts the terms of this Policy.

1.4

Acceptance by the User of the Policy terms is carried out by activating the checkbox on the Site: “I accept the terms of the Privacy Policy and Consent to Personal Data Processing.”

1.5

The Site Owner offers the User the use of the Site under the conditions set forth in this Policy. The Consent takes effect from the moment the User expresses agreement with its terms.

1.6

If the User disagrees with the Policy, the User must cease using the Site and leave it.

1.7

The Policy may be amended by the Site Owner unilaterally. The new version of the Policy takes effect 2 (two) calendar days after publication on the Site.

1.8

Functional capabilities of the Site are provided to both registered and unregistered Users. Certain functionality is available only to registered Users and may depend on the technical characteristics of the User's device.

1.9

When the User provides their personal information (personal data), the User gives consent for the Administrator to process their Personal Data.

2. Purposes of Collecting and Processing Personal Data

2.1

The Administrator collects and processes Personal Data for purposes related to the sale and servicing of Users, the fulfillment of agreements, and for improving the quality and efficiency of operations.

2.2

The Administrator's processing of User personal data includes: collection, recording, systematization, accumulation, storage, updating (modification), extraction, use, transfer (distribution, provision, access), anonymization, blocking, deletion, and destruction.

2.2.1

This data is necessary for identifying the User(s) in the Administrator's system.

3. Legal Basis for Processing Personal Data

3.1

Processing is based on applicable privacy laws, the Administrator's governing documents, and the User's Consent to personal data processing.

4. Duration of Personal Data Processing

4.1

The Administrator processes the User's personal data until the purposes of processing have been fulfilled.

5. Confidentiality of Personal Data

5.1

The Administrator and other persons who have gained access to personal data are obligated not to disclose or distribute personal data to third parties without the consent of the data subjects, unless otherwise provided by applicable law.

5.2

The Administrator may transfer Users' personal data to third parties in exceptional cases based on a data processing agreement.

5.3

The Administrator may transfer Users' personal data to investigative authorities and other authorized bodies on the grounds provided by applicable law.

5.4

The Administrator is obligated to take necessary legal, organizational, and technical measures to protect personal data from unauthorized or accidental access, destruction, modification, blocking, copying, distribution, and other unlawful actions.

5.5

In the event of unauthorized or accidental transfer of personal data resulting in a violation of data subjects' rights, the Administrator is obligated to notify the appropriate supervisory authority within 24 hours of the incident and within 72 hours of the results of the internal investigation.

6. Measures to Ensure the Security of Personal Data

6.1

Security of personal data is achieved through: identifying security threats during data processing; applying organizational and technical security measures; using certified information protection tools; assessing the effectiveness of security measures; accounting for data storage media; detecting unauthorized access and taking remedial measures; establishing access rules and ensuring logging of all actions involving personal data; and monitoring security measures.

7. Categories of Personal Data Subjects

7.1

The Operator processes personal data of the following categories of data subjects:

• Site users
• Persons representing the interests of Users
• Visitors to the Site, users of mobile and web applications
• Individuals and entities that use the Administrator's online resources
• Counterparties of the Administrator
• Other categories of subjects whose personal data the Administrator processes

8. Data Storage and Withdrawal of Consent

8.1

Personal data is stored by the Operator in electronic form in a database and/or on physical media.

8.2

The User gives consent for the Administrator to process personal data for an indefinite period.

8.2.1

The User may withdraw consent to personal data processing through their personal account, or by sending a written notification to ONLYHUGS HOLDING LLC at 1254 Chapman Rd, Ste 208 #25738, Newark, Delaware 19702, USA.

8.2.2

In the event of withdrawal of consent, the Operator is obligated to cease processing or ensure cessation of such processing, and if storage of personal data is no longer required, to destroy the personal data within thirty (30) days of receiving the withdrawal notice.

8.3

The Operator may not process personal data without the consent of the data subject except on grounds provided by applicable law.