Personal Data Processing Policy

Version of 29.09.2026

1. General provisions

1. This Personal Data Processing Policy (the “Policy”) has been prepared in accordance with Russian Federal Law No. 152-FZ “On Personal Data” of 27.07.2006 (the “Law”) and sets out how personal data is processed and protected by изишип.ру (TBE International, Inc) (the “Operator”).
2. The Policy applies to all personal data the Operator receives from visitors of https://easyship.ru and users of the account area https://lk.easyship.ru (together, the “Website”), and from EasyShip customers when providing services of receiving, storing, purchasing and shipping parcels (the “Services”).
3. The Operator’s top priority is to respect human and civil rights and freedoms when processing personal data, including the right to privacy and to personal and family secrets.

2. Definitions

Terms are used in the meaning given in the Law: personal data, processing, automated processing, provision, dissemination, blocking, deletion, destruction and anonymisation of personal data, cross-border transfer of personal data. “User” means any person using the Website or the Services.

3. Data subjects and personal data processed

1. Website visitors: e-mail address (when subscribing to the newsletter or contacting us via Website forms) and data collected by cookies and Yandex Metrica (IP address, browser and device data, pages viewed, traffic source, on-page actions). See the Cookie Policy.
2. Customers (senders and recipients of parcels):
   • surname, first name, patronymic;
   • e-mail address, phone numbers;
   • delivery address, address of residence;
   • date of birth;
   • identity document details;
   • taxpayer identification number (INN);
   • parcel data: contents, value, weight, tracking numbers, stores and orders;
   • payment data for the Services (without full bank card details);
   • correspondence with the Operator.

4. Purposes of processing

1. Registering the User and providing access to the account area.
2. Concluding, performing and terminating the Services agreement (public offer): receiving, storing and consolidating parcels, purchasing goods, arranging delivery.
3. Delivering parcels and customs clearance in the countries of departure, transit and destination of the cargo.
4. Payments for the Services and compliance with legal obligations (including customs and tax).
5. Handling User requests and informing about parcel status.
6. Sending information and promotional messages — only with the User’s separate consent; the User may unsubscribe at any time.
7. Collecting visit statistics, analysing and improving the Website.

5. Legal grounds

• performance of the Services agreement to which the data subject is a party (Art. 6(1)(5) of the Law);
• the data subject’s consent (Art. 6(1)(1) of the Law), including the consent to personal data processing given when submitting Website forms;
• compliance with obligations imposed on the Operator by law (Art. 6(1)(2) of the Law), including the customs legislation of the countries along the cargo route.

6. Processing procedure

1. The Operator collects, records, systematises, accumulates, stores, clarifies (updates, modifies), retrieves, uses, transfers (provides, grants access to), anonymises, blocks, deletes and destroys personal data, with or without automation.
2. The Operator processes only the personal data necessary for the stated purposes.
3. Personal data is kept no longer than the purposes require, unless a longer period is required by law (e.g. accounting, tax or customs records) or by contract. When the purposes are achieved or consent is withdrawn, the data is destroyed or anonymised within the time limits set by the Law.

7. Transfer to third parties

1. To deliver parcels and clear them through customs, the Operator transfers the User’s personal data (name, contact details, delivery address, identity document details, INN and parcel data) to the extent necessary for these purposes to:
   • carriers, postal operators and courier services involved in delivering the parcel;
   • customs representatives (brokers) carrying out customs clearance of the parcel;
   • customs and other government authorities of the countries of departure, transit and destination of the cargo.
2. Personal data may also be transferred to providers supporting the Website and Services (hosting, mailing services, Yandex Metrica web analytics) to the extent necessary for their services and subject to confidentiality.
3. The Operator provides personal data to government authorities where required by law.
4. The Operator does not sell personal data and does not transfer it to third parties for their own marketing purposes.

8. Cross-border transfer

1. The Operator is a foreign organisation, and parcels are shipped from abroad. Processing therefore involves cross-border transfer of personal data: to the Operator and to the countries of departure, transit and destination of the cargo, for delivery and customs clearance (section 7).
2. Cross-border transfer is carried out in accordance with Article 12 of the Law — to perform a contract to which the data subject is a party and/or on the basis of their consent, including to foreign countries that do not ensure adequate protection of data subjects’ rights, to the extent necessary for these purposes.

9. Cookies and web analytics

The Website uses cookies and the Yandex Metrica web analytics service. The cookies used, their purposes and how to disable them are described in the Cookie Policy.

10. Rights of the data subject

1. The User has the right to:
   • receive information about the processing of their personal data;
   • demand clarification, blocking or destruction of personal data that is incomplete, outdated, inaccurate, unlawfully obtained or not necessary for the stated purpose;
   • withdraw consent to personal data processing;
   • appeal the Operator’s actions or omissions to the authorised data protection authority (Roskomnadzor) or in court.
2. Requests should be sent to office@easyship.ru (subject: “Personal data request”, “Personal data update” or “Withdrawal of consent to personal data processing”). The Operator responds within the time limits set by the Law.
3. Withdrawal of consent does not prevent the Operator from continuing processing without consent where permitted by the Law (e.g. to perform the contract with the User or comply with legal requirements). If consent to processing the data needed for delivery and customs clearance is withdrawn, it may become impossible to complete the Services for parcels in transit.

11. Data security

The Operator takes legal, organisational and technical measures to protect personal data against unlawful or accidental access, destruction, modification, blocking, copying, provision and dissemination: limiting access to employees who need it for their work, secure connections (HTTPS), access control to servers and databases, backups.

12. Final provisions

1. For any questions about personal data processing, the User may contact the Operator at office@easyship.ru.
2. The Operator may amend the Policy. A new version takes effect when published on the Website, unless it provides otherwise.
3. The current version of the Policy is freely available at https://easyship.ru/policy?lang=en.