Your data, explained clearly

Who is responsible for your data

The data controller is Ilya Valerievich Ulanov, an individual entrepreneur trading under the HOOB brand (“HOOB”, “we”, “us”). Postal address: 18 building 6, Perevedenovsky Lane, Moscow 105082, Russian Federation. Email: hello@hoob.com.

This Notice applies to the hoob.com websites, customer accounts, orders, reservations, delivery or collection, wholesale and dealer enquiries, support, warranty and return requests, events and other interactions that link to it. A partner that decides independently how to use your data will provide its own notice.

Information we collect

Sources

We collect data directly from you, automatically from your browser or device, from a person or organisation acting on your behalf, from service partners involved in your request, and from lawful public professional sources. If another party gives us your data, it must have authority or another lawful basis to do so.

Fields required to create an account, place an order or reservation, verify age where required, or answer a request are identified at collection. If you do not provide them, we may be unable to provide that service. If identity or age verification is legally required, we explain the data needed and its purpose at collection.

How and why we use information

HOOB does not make decisions that produce legal or similarly significant effects about you solely by automated means. If that changes, we will explain the logic, consequences and available safeguards before the processing begins.

Who may receive information

We disclose only what is reasonably necessary to:

• website, hosting, cybersecurity, backup, communications and technical support providers;
• commerce and customer-management platforms, including Magento and retailCRM;
• analytics providers, including Yandex Metrica when the relevant cookies are enabled;
• sellers, partner stores, payment providers where applicable, logistics providers, collection points and service centres participating in your order, reservation, delivery, collection or service request;
• professional advisers, auditors, insurers and authorities where authorised or required by law;
• a successor in a merger, reorganisation or asset transfer, subject to appropriate confidentiality and notice.

Service providers process data under contractual limits, confidentiality duties and security requirements. HOOB does not sell personal information for money. We do not allow providers to use customer data for their own unrelated purposes.

Cookies, analytics and similar tools

We use strictly necessary cookies for security, sign-in, cart, order or reservation functions, language and session continuity. Functional cookies remember your choices. Optional analytics cookies help us understand performance and improve the site. Advertising cookies are used only if such functionality is enabled and you make the required choice.

Optional cookies should remain off until you consent where local law requires. You can change your cookie settings on this page at any time and can also remove cookies in your browser. Where required by applicable law, we recognise supported browser-based opt-out signals such as Global Privacy Control for sale or sharing.

Cookie lifetimes vary by purpose and are shown in the consent interface. They normally do not exceed 24 months. Blocking necessary cookies may prevent account, cart, order or reservation functions from working.

How long we keep information

• Accounts: while active and up to 3 years after closure, unless a legal record must be retained longer.
• Reservations and business contracts: for the relationship and generally 5 years afterwards, subject to longer legal or dispute holds.
• Support, warranty and returns: 3 years after the matter closes, or longer while a claim is active.
• Marketing: until you unsubscribe or withdraw consent; consent and suppression records are retained for 3 years to demonstrate and respect your choice.
• Analytics identifiers: according to the cookie setting, normally no more than 24 months.
• Security logs: normally up to 12 months, longer only when needed to investigate an incident or claim.

When a period ends, we delete, destroy or irreversibly anonymise the data. Data in backups is removed during the normal overwrite cycle, generally within 90 days, unless law or an active security investigation requires a longer period.

International transfers and Russian localisation

HOOB is established in the Russian Federation and uses systems and providers that may operate in more than one country. Data may therefore be processed outside the country where you live.

For personal data collected online from Russian citizens, HOOB uses databases located in the Russian Federation for initial recording, systematisation, accumulation, storage, update and retrieval where Russian law requires it. Before a regulated cross-border transfer, we complete the required assessment, contractual and notification steps.

For transfers from the European Economic Area, United Kingdom or Switzerland to a country without an adequacy decision, we use an available lawful mechanism where required, such as approved standard contractual clauses, the UK Addendum or another recognised safeguard, and assess supplementary protections. Contact us to request information about the safeguard relevant to your data.

Your choices and privacy rights

Depending on your location and subject to legal exceptions, you may have the right to:

1. access the personal data we hold and receive information about its use;
2. correct inaccurate or incomplete data;
3. request deletion, restriction, blocking or cessation of processing;
4. object to processing based on legitimate interests or direct marketing;
5. withdraw consent at any time and change cookie choices;
6. receive portable data in a structured format where applicable;
7. opt out of sale, sharing or targeted advertising where applicable;
8. complain to your local privacy authority or seek a legal remedy.

How to make a request

Email hello@hoob.com or write to our postal address. Tell us what right you want to exercise and provide the email, telephone number or account information needed to locate the relevant records. Do not send government ID unless we explain why less intrusive verification is insufficient.

We verify requests proportionately to protect you from unauthorised access. We respond within the period required by applicable law — normally within one month under the GDPR/UK GDPR and within the applicable statutory period in other jurisdictions. You may use an authorised agent where the law permits. We do not discriminate against you for exercising a privacy right.

Additional disclosures by location

European Economic Area, United Kingdom and Switzerland

Where the GDPR, UK GDPR or comparable Swiss law applies, HOOB acts as controller for the activities described here. Our legal bases are stated in section 3. You may lodge a complaint with the supervisory authority where you live or work, although we invite you to contact us first. When we rely on legitimate interests, you may request information about the balancing assessment. You have an absolute right to object to direct marketing.

California

This subsection applies only if HOOB is subject to the California Consumer Privacy Act as amended (“CCPA”). In the preceding 12 months, the categories described below may have been collected, used and disclosed for business purposes:

We do not knowingly use or disclose sensitive personal information to infer characteristics. HOOB does not sell personal information for money. If an optional analytics or advertising disclosure is legally treated as “sharing”, you may opt out through “Privacy choices” or a supported Global Privacy Control signal. California residents may request to know, access, correct or delete information and may opt out of sale or sharing, subject to exceptions. An authorised agent may submit a request with proof of authority.

Other jurisdictions

If privacy law in your country grants additional rights — including rights under Brazil’s LGPD, Canada’s privacy laws or Australian privacy law — we will honour those rights to the extent they apply. Contact us using the method in section 8.

Security and younger users

We use legal, organisational and technical safeguards proportionate to risk, including access controls, protected connections, backups, logging, security updates, staff awareness, provider review and incident response. No transmission or storage method is completely secure, but we work to reduce foreseeable risk and notify regulators and affected people when applicable law requires it.

HOOB products and English-language websites are intended for people aged 21 or older, or the higher minimum legal age that applies where they live. We do not knowingly collect minors’ data. If you believe a minor has provided data without valid authorisation, email hello@hoob.com so we can investigate and delete it where required.

Changes to this Notice

We update this Notice when our services, providers or legal obligations change. The current version and effective date appear on this page. Before a material change takes effect, we provide a prominent notice and request fresh consent when required.

This Notice is designed as a layered global notice. Regional law applies only when its territorial and business thresholds are met. Nothing in this Notice limits a right that cannot lawfully be limited.