Privacy policy

1. Data controller

The data controller is Individual entrepreneur Zolotarev Mikhail Igorevich (INN 773319471109). Data-protection contact: support@get5stars.ru.

2. What data is processed

• Business-owner data: name, email, phone, Telegram id — for sign-up, login and notifications.
• Location and subscription data: map-listing links, settings, payment history.
• Guest data in the Prize Wheel: phone and/or name if the guest provides it when claiming a prize (optional).
• Technical data: session cookies and service logs needed for the site and account area.

3. Purposes and legal basis

Data is processed to provide the service (performance of the agreement), send notifications, take payment and issue fiscal receipts (54-FZ), and support users. Data is not sold to third parties and is not used for third-party advertising.

4. Sharing with third parties

To provide the service, data may be shared with infrastructure providers: the acquiring bank JSC «TBank» (payments, receipts; tbank.ru) and Telegram (notification delivery). Sharing is limited to the data needed for that operation.

5. Storage and deletion

Data is stored on servers in the Russian Federation for the term of the agreement and for the periods required by law (including accounting and tax records). On the owner’s request, the account and related data are deleted, except records the controller must keep by law.

6. Your rights

You may request access to your data, its correction, blocking or deletion, and withdraw consent to processing. To do so, email support@get5stars.ru.

7. Information security

The controller applies organisational and technical safeguards: role-based access control, storing passwords and PINs only as irreversible hashes (Argon2), access over secure channels, regular backups and software updates. Only authorised staff can access personal data, and only as needed for the work.

8. Secure transmission of payer data

All data exchange between the user’s device and the service is encrypted via HTTPS/TLS. Card details are entered on the acquiring bank’s secure payment page and processed on its side under the PCI DSS security standard. get5stars does not receive, see or store the full card number, expiry date or CVV.