RUENHY
Sign in Orders Favorites Cart
Download AppApp

Privacy policy

Effective date: 28 October 2026

This Privacy Policy explains what personal data BYME.AM (“BYME.AM”, “we”) collects when you use the byme.am website, your personal account and the mobile app (the “Service”), what we use it for, who we share it with, how we protect it and what rights you have. By using the Service you confirm that you have read this Policy.

  • Personal data — any information that relates to you directly or indirectly (name, phone, email, address, order data, device identifiers, etc.).
  • Processing — any action with data: collection, recording, storage, modification, use, transfer, blocking, deletion.
  • Operator — BYME.AM, which determines the purposes and means of processing.
  • User — any site visitor, customer (individual or legal entity), supplier or carrier using the Service.

Data you provide yourself:

  • at registration and in your profile: first and last name, email, phone, password (stored only as an irreversible hash), language, city and country;
  • for legal entities: company name and legal form, tax ID, registration number, legal and actual address, bank details, contact person details;
  • when placing an order: order contents, recipient contact details, delivery address and method, payment method, comments;
  • when paying: information about the payment method and the payment confirmations you upload (for example, a bank transfer slip or receipt). We do not store bank card data: card entry takes place on the payment provider’s side;
  • in chat and requests: message texts, attached files and documents, requests and quotation requests;
  • in reviews and product questions: rating, text, and your name in shortened form (first name and the first letter of the last name).

Data collected automatically:

  • technical data: IP address, browser or app type and version, operating system, language, time and pages visited, referral source;
  • service usage data: activity logs in your account, security events (sign-ins, password changes), session identifiers;
  • cookies and similar technologies (see section 8);
  • mobile app notification tokens, if you enabled push notifications.

Location data:

  • we determine approximate or precise location only with your consent (browser or app prompt) or from an address you entered manually or picked on the map. You can withdraw consent at any time in your profile and browser settings.

Data from external sign-in services:

  • when you sign in with Google, Apple or VK, we receive an identifier, name and email from the provider — to the extent you allowed on the confirmation page.
  • creating and maintaining your account, identification, protection against unauthorized access;
  • accepting, confirming and fulfilling orders, checking availability with suppliers, calculating price and delivery cost, arranging delivery and preparing documents (invoices, waybills);
  • accepting and confirming payments, keeping settlements;
  • contacting you: order statuses, replies to requests, notifications by email, in messengers and push notifications;
  • selecting products and showing relevant products, warehouses and delivery terms for your region;
  • publishing your reviews and questions (with your name in shortened form) and the replies to them;
  • improving the Service: analysis of errors, load and usability;
  • ensuring security, preventing fraud and abuse, investigating incidents;
  • complying with legal requirements, accounting and tax records, and responding to requests from authorized bodies.

We do not make decisions that have legal consequences for you solely on the basis of automated processing of data.

We process data if at least one of the following grounds applies:

  • performance of a contract to which you are a party (order, registration, delivery, payment);
  • your consent (location, optional cookies, mailings);
  • our legitimate interest — security of the Service, fraud prevention, quality improvement, protection of rights;
  • compliance with obligations imposed on us by law.

We do not sell personal data. Sharing is possible only to the extent necessary:

  • suppliers and manufacturers — order contents and data needed to check availability, prepare and ship. A customer’s contact details are passed to a supplier only if required to fulfil the order and permitted by the settings;
  • carriers and delivery services — the recipient’s name and phone, address and cargo parameters;
  • payment providers and banks — to the extent needed to accept and verify a payment;
  • technical service providers — hosting, email and messenger services, maps and geocoding, accounting systems (in particular ERP/warehouse accounting), who act on our instructions and must keep data confidential;
  • government bodies — upon lawful request and in cases expressly provided by law;
  • successors — in case of reorganization or sale of the business, with notice of the change to this Policy.

To display maps and search addresses, your browser may contact a third-party mapping service (OpenStreetMap), which then gets access to your IP address.

Servers and contractors may be located outside your country. When transferring data abroad we take measures so that the level of protection meets the requirements of applicable law (contractual obligations, limiting the amount of data transferred).

  • account data — while the account is active and up to 3 years after last activity, unless you delete it earlier;
  • order, invoice and payment documents — for the periods set by accounting and tax law (as a rule, at least 5 years);
  • chat correspondence and requests — up to 3 years after processing is completed;
  • security and technical logs — up to 12 months;
  • reviews and questions — while published; after account deletion the author is shown as “Customer”.

After the period expires, data is deleted or anonymized, unless the law requires otherwise.

We use:

  • strictly necessary cookies — account sign-in (session), protection against request forgery, selected language and currency, cart operation. The Service does not work without them;
  • browser local storage — cart, your choice in the cookie notice, display settings;
  • functional data — your consent or refusal of location detection.

We do not use cookies for advertising profiling and do not pass them to ad networks. You can delete cookies in your browser settings; in that case sign-in and the cart may stop working.

We apply organizational and technical measures: connection encryption (HTTPS), storing passwords only as a hash, role-based staff access and data-level permissions, logging of significant actions, backups, checks for suspicious sign-ins. No method of data transmission over the internet is absolutely secure; keep your password safe and do not share it. We notify about security breaches affecting your data in the manner and within the time limits established by law.

You have the right to:

  • obtain confirmation of processing and a copy of your data;
  • request correction of inaccurate or incomplete data (most can be changed in your profile);
  • request deletion of data or restriction of its processing if there are no legal grounds to keep it;
  • withdraw consent (for example, for location detection) — this does not affect the lawfulness of processing before withdrawal;
  • object to processing based on our legitimate interests;
  • receive your data in a portable format;
  • contact the competent personal data protection authority if you believe your rights have been violated.

To exercise your rights, write to us at the address in the “Contacts” section. We will reply within the period set by law (as a rule, up to 30 days). To protect your data we may ask you to confirm your identity.

You can request deletion of your account and data by writing to us. After deletion we stop processing, except for data we are required to keep by law (for example, order documents) and data needed for fraud protection and dispute resolution.

The Service is intended for persons aged 18 and over and for organizations. We do not knowingly collect data of minors. If you believe a child has given us data, tell us and we will delete it.

The Service may contain links to third-party sites (carriers, payment services, social networks). We are not responsible for their privacy policies — read them before use.

Service messages (order status, security, payment) are sent regardless of consent to mailings, as they are necessary to fulfil the order. We send marketing messages only with your consent; you can opt out at any time via the link in the message or in settings.

We may update this Policy. The current version is always published on this page with its effective date. We will notify you of material changes on the site or by email in advance. By continuing to use the Service after changes take effect, you agree to the updated Policy.

For questions about personal data processing, to exercise your rights and for any questions about this Policy, contact us at the email address, phone number or postal address given in the “Contacts” section of the site.