Privacy policy

1. General provisions

This Privacy policy explains for what purposes iCode (the "Company") collects, processes, stores and protects users' personal data. The policy has been prepared in accordance with the Law of the Republic of Azerbaijan "On Personal Data" (dated 11.05.2010, No. 998-IIQ).

2. Data we collect

• On registration: first name, last name, email address, password (stored as a hash);
• In your profile and when ordering: phone number, address (where needed), order and service history;
• Financial transactions: balance movements, payment and refund records (the Company does not store payment card data; it is processed by the payment provider);
• Technical data: IP address, browser and device information, login history (for security and fraud prevention);
• Support requests: ticket and correspondence history.

3. Consent to the processing of personal data

By registering on or using the Platform, the user gives explicit and voluntary consent to the collection, processing, storage and (where necessary) transfer of their personal data to the third parties named in this Privacy policy, on the terms and for the purposes set out below. The user may withdraw consent at any time; in that case, closing the account or suspending the service may be unavoidable.

4. Purposes of processing

• Creating the account and identifying the user;
• Fulfilling orders, settling payments, managing balances and bonuses;
• Providing customer support;
• Sending notifications (order status, invoices, important service information);
• Ensuring security and preventing fraud;
• Meeting legal obligations (for example, bookkeeping and tax reporting).

5. Sharing data with third parties

Personal data is not sold. Data is shared only where necessary to provide the service — with payment providers, hosting and email delivery services, and with state authorities where legally required — and only to the minimum extent the task requires.

6. Retention period

Personal data is kept while the account is active, plus any additional period needed for legally required accounting and archiving. After an account deletion request, data is deleted or anonymised, except where retention is legally required.

7. User rights

Users have the right to access their personal data, to request its correction, updating or (where there are legal grounds) deletion, and to withdraw their consent to processing. To exercise these rights, contact us through the support (ticket) section of the client portal.

8. Cookies

The Platform uses necessary cookies to manage sessions and improve the user experience. Cookies can be managed in your browser settings, but this may limit some features.

9. Security

The Company takes technical and organisational measures (encryption, access control, audit logs) to protect personal data from unauthorised access, loss and misuse.

10. Contact

For questions and requests about this Privacy policy, use the support section of the client portal.

Last updated: 10.09.2026