Effective date: 14 October 2026 Version: 1.2
1. Purpose and scope of this Policy
This Personal Data Processing Policy (the “Policy”) explains how personal data is processed for users of https://puremf.me, the Account and PureMF services for assisted purchasing, receipt, warehouse handling and international forwarding of goods.
The Policy applies to data supplied by the User when registering, placing or fulfilling an Order, contacting support or submitting a claim, and to technical data collected when using the Website. It supplements the PureMF Public Offer and does not restrict the User’s mandatory rights under applicable law.
2. Who is responsible for data processing
LLC "Bulk Range" (the “Company”) operates the PureMF Website and Account and determines the purposes and essential means of processing data for registration, account management, support and operation of the Service.
Address: Apartment 68, Building 16, Ch. Aitmatov Avenue, Pervomaysky District, Bishkek, 720017, Kyrgyz Republic. Registration number: 219383-3301-ООО Personal data contact: [email protected].
The Company is the sole Provider for PureMF Orders and is responsible for processing data necessary for assisted purchasing, receipt, storage, packing, dispatch, payments, refunds and claims handling. The Website Operator and Provider are the same legal entity.
The Company processes only the data necessary for the relevant function, Order or compliance with the law.
3. What data may be processed
Data may be received directly from the User, automatically when the Website is used, from the payment service to the extent of transaction status, and from delivery participants and other persons where necessary to fulfil the Order.
Some data is necessary to conclude and perform the contract; other data is supplied voluntarily. Depending on the Service function used, we may process the categories listed below; for each category, we state whether provision is mandatory or voluntary and the consequences of refusal.
Depending on the Service function used, we may process:
- Account and contact data — name, email, telephone number, country and delivery address, communication language, User identifier and Account login details.
Mandatory (except communication language). Without this data, it is not possible to create an Account, place an Order or arrange delivery.
- Order and Parcel data — the personal identifier for the warehouse address, tracking number, sender and recipient information, product links, description, value, weight, dimensions, Parcel photographs, and service and delivery history.
Mandatory to the extent necessary for the particular Order. Without this data, it is not possible to purchase, receive, handle, pack or dispatch the Parcel.
- Payment data — amount, currency, status and identifier of a payment or refund. The full bank card number and security code are processed by the relevant payment service, not PureMF.
Mandatory. Without this data, it is not possible to process payments and refunds.
- Customs and identification data — recipient details, description and value of goods, and passport, identification or tax information.
Mandatory only where needed for a particular shipment, customs clearance or compliance with the law. Without it, international carriage or customs clearance is not possible.
- Enquiries — correspondence with support, claims, documents and other materials attached by the User.
Voluntary, but necessary to consider a particular enquiry. If this data is not supplied, we cannot consider the substance of the enquiry or claim.
- Technical data — IP address, browser and device information, event logs, technical identifiers and cookies, where used on the Website.
Mandatory for strictly necessary technical cookies; voluntary for analytics and marketing cookies. Refusing optional cookies does not affect use of the Service.
Where consent is required for particular processing, it is requested separately. Refusing marketing communications or withdrawing consent to optional processing does not affect performance of an existing contract if the relevant data is not necessary for that service.
We do not ask for health information, biometric data or other special categories of data unless required by law. The User should not send such information to support unnecessarily.
If the User supplies another person’s data, including that of the Parcel’s sender or recipient, they confirm that there is a lawful basis for the transfer and, where required, that the person has been informed. This does not release the Company from its own data protection obligations.
4. Processing purposes and legal bases
We process data for the following purposes:
| Purpose | Example data | Basis for processing |
|---|---|---|
| Account registration and management | Email, account data, technical logs | Conclusion and performance of a contract; legitimate interest in secure operation of the Website |
| Order fulfilment | Contact details, addresses, Parcel information, customs data | Conclusion and performance of a contract; compliance with legal requirements |
| Payments and refunds | Amount, currency, transaction status | Performance of a contract; compliance with payment and legal requirements |
| Support, claims and protection of rights | Correspondence, Order number, documents | Performance of a contract; legitimate interest in handling enquiries and protecting rights |
| Security, fraud and breach prevention | Account data, event logs, Parcel information | Legitimate interest in Service security and compliance with carriage rules; compliance with legal requirements |
| Marketing communications and optional analytics | Email, cookie identifiers | Consent, where required by applicable law |
Where consent is required for particular processing, it is requested separately. Refusing marketing communications or withdrawing consent to optional processing does not affect performance of an existing contract if the relevant data is not necessary for that service.
We do not use data for a new purpose incompatible with the purpose originally stated without an appropriate legal basis and, where required, prior notice to the User.
5. Who may receive data
Data is transferred only to the extent necessary for the relevant purpose to the following categories of recipients:
- the warehouse operator and contractors involved in receipt, storage, packing and dispatch;
- Carriers and postal, courier and logistics organisations;
- payment services — to process payments and refunds and prevent fraud;
- customs authorities, customs representatives and other persons where transfer is necessary for international carriage or customs clearance or is required by law;
- IT infrastructure, hosting, communications and technical support providers that process data on instructions and within the authority granted to them;
- professional advisers and auditors — where necessary for legal compliance, protection of rights or business operations;
- public authorities, courts, banks and other persons where required by law, necessary to protect rights or to comply with a binding decision.
In a reorganisation or sale of the business or part of it, data may be transferred to a successor or prospective purchaser to the extent necessary for that transaction, subject to legal and confidentiality requirements.
PureMF does not sell Users’ personal data or transfer it to third parties for their own advertising without a separate basis provided for by applicable law.
6. International data transfers
PureMF provides international services. Data may be processed and transferred to countries where the Company, warehouse, Carrier, payment service, sender, Parcel recipient or public authorities involved in carriage and customs clearance are located.
Transfers take place only to the extent necessary to fulfil the Order, comply with legal requirements, protect rights or pursue another lawful purpose. The Company applies the safeguards and legal bases for transfer required by applicable law.
7. Retention periods
Data is retained no longer than necessary for the purposes of processing:
- account data — while the Account is in use and for a reasonable period after closure to resolve outstanding matters;
- Order, delivery, payment, refund and customs clearance data — for the periods required by law, payment and carriage rules, and applicable periods for bringing claims;
- correspondence and claims — while the enquiry is being handled and for the subsequent period necessary to protect rights;
- data processed on the basis of consent — until consent is withdrawn or the relevant purpose ceases, unless the law sets a different period.
At the end of the applicable period, data is deleted or anonymised unless further retention is required by law.
Closing an Account does not mean that all data is immediately deleted: some data may be retained to complete an outstanding Order, refund funds, consider a claim, comply with legal requirements or protect rights.
8. Security
The Company applies organisational and technical measures proportionate to the nature of the data and the risks: access controls, authentication, secure transmission channels, logging and backups.
The User must keep Account access credentials confidential and promptly report suspected unauthorised access to [email protected].
The Company enters into agreements with all data processors (including warehouse operators, IT contractors and other engaged parties), requiring them to adopt data protection measures consistent with the personal data protection requirements of the Kyrgyz Republic and other applicable mandatory rules, including prevention of unauthorised or accidental access, processing, erasure, loss or use of personal data.
9. Cookies and similar technologies
Strictly necessary technical cookies may be used for Website operation, security, language selection and maintaining a session. Optional cookies, including analytics and marketing cookies, are enabled only after consent is obtained where required by applicable law.
Before optional analytics, advertising systems, chat or other third-party technologies are connected, the Website must display a cookie banner and update information about the relevant data recipients and cookie retention periods.
10. User rights
The User may send a request to [email protected] or through the Account for access, correction, deletion, restriction of processing, objection to processing, withdrawal of consent or exercise of other rights under applicable law. Verification of the requester’s identity may be necessary to protect data. Requests may be limited in the cases and to the extent permitted by applicable law, including where data must be retained or rights must be protected.
The Company handles requests concerning both the Website and Order fulfilment through the common contact channel. Where necessary, it works with engaged processors while retaining its own obligations to the User.
We respond to access requests within the shortest period required by applicable law and, in any event, no later than 40 calendar days after receiving the request. If the applicable law of your country of residence sets a shorter period, that shorter period applies.
11. External websites and services
The Website may contain links to stores, Carriers, payment services and other external resources. This Policy does not govern processing by those parties. Before supplying data on an external resource, the User should read its privacy policy.
12. Children
The Service is intended for persons aged 18 or over. If the Company becomes aware that data has been supplied by a minor without the required involvement of a legal representative, that data will be deleted or its processing restricted in accordance with applicable law.
13. Changes to the Policy
A new version of the Policy is published on the Website with its effective date. If a change materially affects the User’s rights or occurs in circumstances where notice is required by law, the User is also notified by an available means.
14. Contacts
For questions about personal data processing, exercise of rights or international data transfers:
LLC "Bulk Range" Email: [email protected] Address: Apartment 68, Building 16, Ch. Aitmatov Avenue, Pervomaysky District, Bishkek, 720017, Kyrgyz Republic.