Personal data processing policy

The personal data controller is Nadezhda Nikolaevna Ogneva. This policy covers DLC.ru.net, the Telegram bot, future checkout and support communications.

Data may include Telegram ID, username and interface language; email or other contacts supplied by the user; order reference and contents; payment amount, currency, provider identifiers and status; delivered-key records; and support messages.

Infrastructure may create standard technical logs such as IP address, request time, page address, browser type and security events.

Data is used to save language choice, create and verify orders, prevent duplicate delivery, deliver keys, provide support, process refunds, prevent abuse and comply with law.

Once connected, the payment provider receives transaction data it needs. The store does not store full bank card credentials.

Hosting providers and Telegram process technical data within their own services. The store neither sells personal data nor provides it for third-party advertising.

Processing is performed to enter into and perform a contract, comply with legal duties, protect the service and, where required, on the user's consent.

Data is kept until its purpose is achieved and for mandatory accounting, dispute and fraud-prevention periods, then deleted or anonymised unless continued retention is required by law.

Administrative access is restricted. Keys are encrypted at rest, and secrets or payment tokens are not placed in the frontend or public logs.

No storage method is absolutely secure; incidents are contained, investigated and reported where notification is legally required.

A user may request access, correction, restriction or deletion where retention is not required by contract or law, and may withdraw consent previously given.

Requests go to the support email. Telegram ID, email or an order reference may be needed to locate a record; never send a key or full payment credentials.