Privacy Policy

1. General provisions

This Privacy Policy (the "Policy") sets out the rules for the collection, processing, storage and protection of the personal data of users of the "PakMazar" mobile application (customer and worker versions) and the admin panel (the "Service").

This Policy has been prepared in accordance with Law No. 998-IIIQ of the Republic of Azerbaijan dated 11 May 2010 "On Personal Data" and other applicable legislation.

By using the Service, the user confirms that they have read the terms of this Policy and consent to the collection and processing of their personal data in the manner set out below.

2. Personal data controller (operator)

The controller and operator of personal data:

• Legal entity: Ay-İst MMC
• Contact email: ayist@pakmazar.az

You may contact us using the details above with any question, request or complaint regarding your personal data.

3. Personal data we collect

The following personal data is collected while using the Service:

• Personal identification data: first name, last name, email address, phone number
• Location (GPS) data: coordinates of the cemetery/grave where the service is provided, and the real-time location of the assigned worker while an order is being carried out
• Photo materials: grave photographs (before/after) taken for the purpose of the completed-work report
• Order and transaction data: order history, selected service package, payment status

Note: PakMazar does not store your payment card number, CVV, or other bank card details. Payments are processed entirely through the licensed payment provider Payriff (see section 5).

We do not collect copies of identity documents or biometric data (facial imagery, fingerprints, etc.).

4. Purpose of collecting and processing personal data

The personal data collected is processed for the following purposes:

• Creating and identifying the user's account (sign-in by SMS)
• Accepting orders, assigning them to a worker, and ensuring they are carried out
• Providing the customer with a photo report of the completed work
• Processing payment transactions (through Payriff)
• Sending order status updates, reminders and other notifications (in the selected language)
• Providing customer support and handling complaints
• Ensuring the security and correct operation of the Service

Personal data is not sold or leased to third parties for any purpose beyond those listed above, including advertising.

5. Data transfer and third parties

Your personal data is shared only with the following parties, to the extent necessary for the operation of the Service:

• Payriff (payment provider) — data necessary to carry out the payment transaction (such as the amount payable and the order number) is transmitted. PakMazar has no access to your bank card details and does not store them.
• Google Cloud / Firebase infrastructure — the Service's technical infrastructure (database, authentication, notification delivery, server functions) runs on the Google Cloud platform, on multi-region (eur3) server infrastructure located in the European Union. This means personal data is transferred outside the borders of Azerbaijan, and this transfer is necessary for the technical operation of the Service.

Personal data is not transferred to any other third party, except in cases provided for by law (for example, at the lawful request of an authorised government authority).

6. Retention period for personal data

• Personal data is retained for as long as the user's account remains active.
• When a user deletes their account, personal data is retained for 3 (three) months (for the purpose of resolving possible disputes and responding to legal requirements); after this period, the personal data is permanently and irrecoverably deleted.

7. Protection of personal data

Appropriate technical and organisational measures are taken to protect your personal data, including encryption during transmission and storage, access restrictions, and regular security monitoring. Nevertheless, no data transmitted over the internet can be guaranteed to be 100% secure.

8. User rights

As a data subject, you have the following rights:

• To review the full list of your personal data within the application
• To request correction of your personal data if an error is found
• To request deletion of your personal data by deleting your account (see section 6)
• To submit a request or complaint regarding the processing of your personal data using the contact details set out in section 2

9. Giving consent

When registering, the user confirms that they have read this Policy and give their explicit consent to the collection and processing of their personal data as described above, by ticking the relevant box ("I agree"). Registration cannot be completed without this consent.

10. Age limit

To use the Service, a user must have reached the age of 18. PakMazar does not knowingly collect personal data from persons under the age of 18. If it is determined that personal data has been collected from a person under 18, that data will be deleted as soon as this is discovered.

11. Changes to the Policy

This Policy may be updated from time to time. Where a material change is made, users will be notified within the application. The effective date of the updated Policy is shown at the top of this page.

12. Contact

If you have any questions about this Policy, you can contact us:

Ay-İst MMC
Email: ayist@pakmazar.az

Appendix — Short consent text for the registration screen

(This section is for use next to the checkbox on the app's registration screen, and is not a substitute for the full Policy.)

By registering, I confirm that I have read the Privacy Policy and consent to the collection and processing of my personal data (in accordance with the Law of the Republic of Azerbaijan "On Personal Data").